Digital Wallet Lifecycle Management

Overview 

The Expian Digital Wallet framework enables organisations to issue, manage, validate, update, suspend, and govern digital passes across Apple Wallet and Google Wallet.

The framework supports the complete lifecycle of wallet-enabled entitlements including:

• Annual Passes
• Membership Products
• Membership Products
• Bundle Products
• Family Passes
• Promotional Passes
• Date-Based Admissions
• QR-Code Access Credentials
• Multi-Person Entitlements

The wallet framework integrates directly with:

• B2C
• POS
• Reservations
• Validation Services
• Gate Scanning
• Entitlement Services
• Customer Accounts
• Bundle Management

Each digital pass:

• is linked to a live entitlement
• supports real-time operational validation
• can refresh dynamically after amendments
• supports suspension and reinstatement
• synchronises with operational servicing actions
• supports fraud prevention controls

The platform supports:

• Apple Wallet pass fulfilment
• Google Wallet pass fulfilment
• QR-code validation
• entitlement-level wallet generation
• wallet replacement after amendments
• independent pass downloads
• delegated entitlement fulfilment
• operational access governance

Why It Matters 

Modern attractions increasingly require:

• wallet-first admissions
• reduced paper fulfilment
• mobile-first guest journeys
• operational flexibility
• secure pass governance
• real-time entitlement control

Traditional ticketing systems often rely on:

• static PDFs
• non-refreshing QR codes
• shared ticket documents
• manual pass replacement
• disconnected operational systems This creates operational risks including:
• pass sharing
• outdated credentials
• invalid entitlement usage
• customer confusion
• fraud exposure
• operational servicing delays

Expian instead provides:

real-time digital entitlement architecture where:

• every pass remains synchronised to the live entitlement state
• amendments automatically invalidate outdated passes
• gate validation reflects operational changes immediately
• pass ownership can be controlled at entitlement level
• operational servicing updates wallet behaviour in real time This enables:
• secure admissions control
• improved customer experience
• reduced fraud
• faster operational servicing
• wallet-first fulfilment journeys
• reduced reliance on PDF tickets

Wallet Platform Architecture 

Shared Entitlement Model 

Digital wallets are directly connected to Expian’s central entitlement services. The same entitlement state is shared across:

• B2C
• POS
• Reservations
• Wallet services
• Validation services
• Gate scanning

This ensures:

• consistent operational state
• live entitlement governance
• synchronised access control
• operational visibility across channels

Wallet Pass Generation 

Apple Wallet & Google Wallet Support

The framework supports:

• Apple Wallet pass generation
• Google Wallet pass generation
• QR-code credential generation
• entitlement-level fulfilment
• individual guest downloads

Wallet passes may be generated for:

• annual passes
• memberships
• bundled entitlements
• family passes
• event admissions
• promotional products

Supported functionality includes:

• individual pass downloads
• grouped entitlement handling
• entitlement-level validation
• dynamic wallet refresh
• entitlement invalidation
• wallet replacement flows

Release functionality introduced support for direct Apple Wallet generation and “Add to Wallet” flows within B2C.

Wallet Fulfilment 

Individual Entitlement Downloads 

Each entitlement may:

• be downloaded independently
• exist in separate wallets
• maintain independent validation status
• support independent servicing

This is particularly important for:

• family admissions
• bundle products
• delegated guest access
• operational entitlement management

Examples include:

• Family Passes
• Group Admissions
• Multi-Person Memberships
• Shared Entitlement Packages

Wallet Ownership Controls 

Named Ownership & Identity Governance Wallet-enabled products may require:

• named ticket ownership
• customer account linking
• identity-linked admissions
• individual email assignment

Reserved customer fields may include:

• First Name
• Last Name
• Email Address

This enables:

• entitlement ownership control
• secure pass governance
• operational servicing
• fraud reduction
• independent entitlement validation

Named ownership is required for certain wallet servicing actions including:

• suspension
• reinstatement
• wallet replacement
• entitlement reassignment

Entitlement Sharing & Delegated Access 

Controlled Wallet Sharing 

The framework supports configurable entitlement-sharing rules.

Organisations may define:

• transferable entitlement types
• non-transferable passes
• delegated access permissions
• temporary entitlement sharing
• identity-locked credentials

Examples include:

This enables:

• delegated childcare visits
• operational servicing flexibility
• stronger fraud prevention

All entitlement sharing activity remains:

• auditable
• time-stamped
• operationally visible
• synchronised in real time

Wallet Validation

Real-Time QR Validation 

Wallet passes validate against live entitlement data.

Validation checks include:

• entitlement validity
• redemption state
• suspension state
• promotional validation
• location restrictions
• re-entry permissions

Validation operates independently per entitlement.

This allows:

• partial attendance handling
• independent guest admissions
• live operational governance
• fraud prevention

Existing scanners and validation devices support direct QR-code scanning from wallet passes.

Wallet Updates & Dynamic Refresh 

Amendment Synchronisation 

When a booking is amended:

• the original wallet pass may be invalidated
• replacement passes may be generated automatically
• entitlement updates synchronise in real time

Supported amendment scenarios include:

• pass upgrades
• validity-date changes
• entitlement reassignment
• bundle servicing
• suspension and reinstatement

Release functionality introduced automatic invalidation and replacement behaviour after amendments.

Amendment confirmation emails may also prompt customers to re-download updated wallet passes.

Pass Upgrade Synchronisation 

Wallet Replacement After Upgrades 

When a pass is upgraded:

• the original wallet pass becomes invalid
• upgraded entitlement details synchronise automatically
• the updated pass may be re-downloaded
• original validity periods may be preserved

Supported upgrade scenarios include:

• annual pass upgrades
• privilege pass upgrades
• membership upgrades
• mid-validity entitlement changes

This ensures:

• operational consistency
• accurate entitlement validation
• reduced servicing confusion

Suspension & Reinstatement 

Live Wallet Synchronisation 

Wallet passes remain synchronised to operational entitlement states. When a ticket is:

• suspended
• reinstated
• cancelled
• invalidated

the wallet validation state updates immediately.

This enables:

• real-time access governance
• operational fraud prevention
• entitlement-level servicing
• live gate enforcement

POS and Reservations servicing actions update validation services instantly.

Wallet Download Restrictions 

One-User vs Multi-User Controls 

The framework supports configurable wallet download limitations.

Supported behaviours include:

• One User
• No Limit
• restricted reassignment
• wallet replacement permissions

Examples:

Entitlement Type Suggested Wallet 

Behaviour 

Adult Membership One User

Child Pass No Limit

Carer Pass Delegated sharing

Premium Membership Identity locked

Where configured as “One User”:

• passes cannot be downloaded to multiple devices simultaneously
• device registrations are validated
• duplicate wallet usage is prevented

Removing a pass from a wallet may allow reassignment to another device where permitted.

Bundle Wallet Behaviour 

Family & Group Entitlements 

Bundle products support:

• individual wallet passes per guest
• grouped entitlement servicing
• independent scanning
• independent operational validation

This enables:

• flexible family attendance
• delegated guest access
• operational visibility
• entitlement-level servicing

“Download All” behaviour may also be configured per organisation.

Wallet Timezone Handling 

Timezone-Aware Entitlement Dates 

Wallet passes support timezone-aware date handling.

The framework ensures:

• pass dates reflect the organisation timezone
• start dates remain operationally accurate
• expiry dates synchronise correctly
• daylight saving changes are handled correctly

This prevents:

• incorrect activation dates
• scan failures
• timezone-related entitlement errors

Timezone synchronisation improvements were introduced to prevent wallet passes displaying incorrect start dates.

Email & Wallet Communications 

Wallet-First Fulfilment 

The framework supports wallet-first communication journeys. Supported behaviours include:

• Add to Wallet buttons
• wallet re-download prompts
• wallet resend functionality
• QR-code removal from emails
• PDF reduction strategies

This supports:

• reduced pass sharing
• simplified fulfilment
• mobile-first admissions
• reduced operational printing

POS staff may also resend wallet fulfilment emails directly from POS.

POS & Reservations Integration 

Operational Wallet Servicing 

POS and Reservations support:

• wallet resend actions
• entitlement servicing
• suspension and reinstatement
• entitlement amendments
• grouped entitlement handling
• operational validation

This enables:

• frontline operational flexibility
• faster customer servicing
• live entitlement governance

Real-Time Synchronisation 

Shared Operational State 

Changes made in:

• POS
• Reservations
• Wallet Services
• B2C

immediately update:

• validation services
• gate scanning
• entitlement states
• operational servicing visibility

This ensures:

• live operational consistency
• accurate access control
• synchronised entitlement governance

How to Configure 

1. Configure Wallet Services

Navigate to: Admin → Wallet Services

Configure:

• Apple Wallet support
• Google Wallet support
• QR-code generation
• wallet refresh behaviour
• entitlement invalidation rules
• pass replacement behaviour

Recommended configuration:

• enable independent entitlement fulfilment
• enforce named ownership for premium products
• enable operational refresh handling

2. Configure Wallet Ownership Rules

Navigate to: Admin → Customer Assignment Rules

Configure:

• named ownership requirements
• identity-linked admissions
• email capture rules
• wallet ownership restrictions

Recommended best practice:

• require named ownership for annual passes
• restrict premium entitlement sharing
• audit entitlement reassignment activity

3. Configure Wallet Download Restrictions

Navigate to: Admin → Wallet Download Rules

Configure:

• One User restrictions
• No Limit behaviour
• delegated reassignment permissions
• wallet replacement permissions

Recommended operational setup:

• restrict adult membership sharing
• allow controlled dependent sharing
• configure operational override permissions carefully

4. Configure Wallet Validation 

Navigate to: Admin → Validation Services

Configure:

• entitlement validity
• suspension behaviour
• re-entry handling
• promotional validation
• location restrictions

Validation operates in real time across all operational channels.

5. Configure Wallet Communications

Navigate to: Admin → Email Templates

Configure:

• Add to Wallet buttons
• amendment refresh prompts
• resend communications
• wallet-first fulfilment journeys
• fallback operational messaging

Recommended configuration:

• reduce PDF reliance
• encourage wallet fulfilment
• clearly communicate re-download requirements after amendments

Recommended Best Practice 

Recommended operational setup includes:

• wallet-first fulfilment for pass products
• named ownership enforcement
• entitlement-level validation
• controlled sharing for dependent entitlements
• real-time operational synchronisation
• audit visibility for servicing actions

Organisations should also:

• restrict premium pass sharing
• validate timezone handling carefully
• test amendment synchronisation thoroughly
• review operational override permissions regularly

Operational Benefits 

The Expian Digital Wallet framework delivers:

• faster admissions processing
• reduced operational servicing overhead
• improved fraud prevention
• secure entitlement governance
• live operational visibility
• mobile-first guest journeys
• reduced reliance on paper fulfilment
• entitlement-level lifecycle management The framework enables organisations to operate:
• scalable admissions control
• real-time entitlement governance
• operationally flexible wallet fulfilment
• modern digital access experiences

Carer Pass

Identity locked flexibility

Child Pass

Delegated reassignment permitted

Seasonal Child Pass

Ticket Type

Suggested Behaviour

Shareable within household

Temporary sharing allowed

Adult Membership

Non-transferable

Premium Pass