Usually RFID cards are used for authorizing by knowing the identity of the carrier. I built the device with an option to limit the number of authorizations to the individual cardholder. After (n) number of scans, the device revokes the access unless re-authorized by system head.
It was a proof-of-concept I developed at my first employer, a laundry machine sales and service company. Laundry customers get an RFID card that tracks their wash history — for example hostel residents get 3 free washes per month, and the device enforces that limit.