Social and proximity based access control for mobile applications

• US 10,237,734 B2
• Filed: 09/29/2016
• Issued: 03/19/2019
• Est. Priority Date: 01/03/2013
• Status: Active Grant

• Current Assignee: AirBNB Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Castro, Paul C., Huang, Yunwu, Pistoia, Marco, Topkara, Umut
• Primary Examiner(s): Hirl, Joseph P
• Assistant Examiner(s): Truvan, Leynna T
• Application Number:
  US15/280,582
• Publication Number:
  US 20170019787A1
• Time in Patent Office: 901 Days
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/64 using geofenced areas

Abstract

Methods and systems for proximity-based access control include determining whether a distance from a first mobile device to each of one or more safe mobile devices falls below a threshold distance; determining whether a number of safe mobile devices within the threshold distance exceeds a safe gathering threshold with a processor; and activating a safe gathering policy in accordance with the safe gathering threshold that decreases a security level in the first mobile device.

Claims

1. A computer-implemented method for proximity-based access control, comprising:

determining a distance from a first mobile device to each of one or more safe mobile devices which falls below a threshold distance by receiving an identifier and a signal strength magnitude from one or more of the safe mobile devices;

determining a number of safe mobile devices within the threshold distance which exceeds a safe gathering threshold with a processor; and

activating a safe gathering policy in accordance with the safe gathering threshold that decreases a security level in the first mobile device.

2. The computer-implemented method of claim 1, further comprising periodically verifying that the number of safe mobile devices exceeds the safe gathering threshold and, if not, deactivating the safe gathering policy.

3. The computer-implemented method of claim 1, wherein activating the safe gathering policy comprises prompting a user of the first mobile device for a decision as to whether to activate the safe gathering policy.

4. The computer-implemented method of claim 1, wherein the one or more safe mobile devices comprise at least one identification badge having the ability to send identification signals.

5. The computer-implemented method of claim 1, further comprising:

determining whether the first mobile device is physically located within a safe space; and

activating the safe gathering policy further in accordance with presence in the safe space.

6. The computer-implemented method of claim 5, wherein determining whether the first mobile device is located in a safe space comprises determining whether the first mobile device is within a threshold range of one or more fixed transmitting stations.

7. The computer-implemented method of claim 5, wherein determining whether the first mobile device is located in a safe space comprises accessing door access logs to determine the identities of people who have entered the safe space.

8. The computer-implemented method of claim 1, wherein safe mobile devices include devices sharing a threshold secret key with the first mobile device and wherein determining whether a number of safe mobile devices within the threshold distance exceeds a safe gathering threshold comprises determining whether enough threshold secret keys are available to meet a decryption threshold.

9. The computer-implemented method of claim 1, wherein the safe gathering policy implements one or more authentication schemes that are less strict than a default authentication scheme.

10. The computer-implemented method of claim 1, wherein the safe gathering threshold is one of a set of safe gathering thresholds having varying levels of safety and wherein activating a safe gathering policy comprises selecting a policy from a set of safe gathering policies in accordance with a corresponding safe gathering threshold.

11. The computer-implemented method of claim 1, further comprising determining whether a meeting is scheduled and wherein activating the safe gathering policy is further in accordance with a determination that a meeting is scheduled.

12. A computer-implemented method for proximity-based access control, comprising:

determining a distance from a first mobile device to each of one or more safe mobile devices which falls below a threshold distance by receiving an identifier and a signal strength magnitude from one or more of the safe mobile devices;

determining a number of safe mobile devices within the threshold distance which exceeds a safe gathering threshold with a processor;

activating a safe gathering policy in accordance with the safe gathering threshold that decreases a security level in the first mobile device that implements one or more authentication schemes that are less strict than a default authentication scheme.

13. The computer-implemented method of claim 12, wherein activating the safe gathering policy comprises prompting a user of the first mobile device for a decision as to whether to activate the safe gathering policy.

14. The computer-implemented method of claim 12, wherein the one or more safe mobile devices comprise at least one identification badge having the ability to send identification signals.

15. The computer-implemented method of claim 12, further comprising:

determining whether the first mobile device is physically located within a safe space; and

activating the safe gathering policy further in accordance with presence in the safe space.

16. The computer-implemented method of claim 15, wherein determining whether the first mobile device is located in a safe space comprises determining whether the first mobile device is within a threshold range of one or more fixed transmitting stations.

17. The computer-implemented method of claim 15, wherein determining whether the first mobile device is located in a safe space comprises accessing door access logs to determine the identities of people who have entered the safe space.

18. A computer-implemented method for proximity-based access control, comprising:

determining a distance from a first mobile device to each of one or more safe mobile devices which falls below a threshold distance by receiving an identifier and a signal strength magnitude from one or more of the safe mobile devices;

determining a number of safe mobile devices within the threshold distance which exceeds a safe gathering threshold with a processor;

activating a safe gathering policy in accordance with the safe gathering threshold that decreases a security level in a first mobile device.