Abstract: Methods and systems are described for performing multifactor authentication. An authentication code may be encrypted in optical indica. Optionally, Advanced Encryption Standard (AES), Rivest-Shamir-Adleman (RSA), DES (Data Encryption Standard), and/or a hashing function may be utilized to encrypt the authentication code. An image of the authentication code may be captured from a device having a display using a digital camera. The image may be in a compressed format and transmitted over a network to an image analysis system. The image analysis system may decode the optical indicia to obtain the encoded authentication data and may perform decryption on the decoded data. If a hashing function is utilized to encrypt the authentication data, the encoded authentication data may be compared to a hash of stored authentication data. If needed, the image analysis system may perform image enhancement prior to performing decoding, including contrast enhancement, deblurring, and/or image rotation.

Abstract: A physical location access control system is configured to receive. via a network interface, a request to provide a temporary access right for a first physical location to a first user, the request providing an indication as to a first time period associated with the temporary access right. In response to determining that the requester has an access right to the first physical location for a second time period that comprises the first time period, a temporary access token corresponding to the first time period is created and the requester's access right to access the first physical location for the first time period is disabled. The temporary access token is transmitted to a device associated with the first user, enabling the first user to access the first physical location during the first time period.

Abstract: A physical location access control system is configured to receive. via a network interface, a request to provide a temporary access right for a first physical location to a first user, the request providing an indication as to a first time period associated with the temporary access right. In response to determining that the requester has an access right to the first physical location for a second time period that comprises the first time period, a temporary access token corresponding to the first time period is created and the requester's access right to access the first physical location for the first time period is disabled. The temporary access token is transmitted to a device associated with the first user, enabling the first user to access the first physical location during the first time period.