Providing a service with location-based authorization

• US 10,382,946 B1
• Filed: 09/19/2016
• Issued: 08/13/2019
• Est. Priority Date: 02/04/2011
• Status: Active Grant

• Current Assignee: CSC Holdings LLC (Altice USA, Inc.)
• Original Assignee: CSC Holdings LLC (Altice USA, Inc.)
• Inventors: Martell, Lawrence Robert, Henriksen, Brett, Lariccio, Michael, Sweeney, Brian
• Primary Examiner(s): Zewdu, Meless N
• Application Number:
  US15/268,908
• Time in Patent Office: 1,058 Days
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 67/303 Terminal profiles
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Methods and systems for providing a service are provided. A request is received to provide the service to a device. A location of the device, or a network interface through which the device is coupled, is determined. Finally, the delivery of the service is authorized based on the determined location of the device, or the determined network interface.

Claims

1. A server for providing a service of a service provider, the server comprising:

a memory configured to store a subscriber profile, the subscriber profile including an authorized location in which a first device is authorized to access the service; and

a processor configured to;

receive a request to access the service from the first device, the request including information related to the first device and specifying a second device to receive the service;

estimate a first location of the first device using the information;

authorize the server to provide the service to the second device when the first location of the first device matches the authorized location stored in the subscriber profile;

track, while the server is providing the service to the second device, the first location of the first device to determine whether the first device has moved to a second location different from the first location of the first device; and

cause the server to terminate the service to the second device when the first device has moved to the second location and the second location does not match the authorized location stored in the subscriber profile.

2. The server of claim 1, wherein the subscriber profile further includes:

user authentication information,

wherein the information comprises;

a user identifier associated with a subscriber account, and

wherein the processor is further configured to authorize the server to provide the service to the second device when the user identifier matches the user authentication information stored in the subscriber profile.

3. The server of claim 2, wherein the user identifier comprises:

a first user identifier;

or

a first user password, and

wherein the user authentication information comprises;

a second user identifier;

or

a second user password.

4. The server of claim 1, wherein the information comprises:

global positioning system (GPS) information to approximate the first location of the first device, and

wherein the processor is configured to perform GPS geolocation using the GPS information to approximate the first location of the first device.

5. The server of claim 1, wherein the subscriber profile further includes a linkage of a plurality of Media Access Control (MAC) addresses of a plurality of access points to a plurality of locations,

wherein the information comprises:

a MAC address of an access point from among the plurality of access points that is communicatively coupled to the first device; and

wherein the processor is configured to assign a location from among the plurality of locations that corresponds to the MAC address as the first location of the first device.

6. The server of claim 1, wherein the subscriber profile further includes linkage of a plurality of Internet Protocol (IP) addresses of a plurality of access points to a plurality of locations,

wherein the information comprises:

an IP address of an access point from among the plurality of access points that is communicatively coupled to the first device; and

wherein the processor is configured to assign a location from among the plurality of locations that corresponds to the IP address as the first location of the first device.

7. The server of claim 1, wherein the authorized location corresponds to one or more locations associated with a subscriber of the service.

8. The server of claim 1, wherein the processor is configured to estimate the first location of the first device using network connection information associated with information communicated to and/or from the first device using the service.

9. The server of claim 1, wherein the processor is configured to track a network address associated with the first device to track the first location of the first device.

10. A method for providing a service from a service provider, the method comprising:

storing, by a server, a subscriber profile, the subscriber profile including an authorized location in which a first device is authorized to access the service;

receiving, by the server, a request to access the service from the first device, the request including information related to the first device and specifying a second device to receive the service;

estimating, by the server, a first location of the first device using the information;

authorizing, by the server, the server to provide the service to the second device when the first location of the first device matches the authorized location stored in the subscriber profile;

tracking, by the server, while the server is providing the service to the second device, the first location of the first device to determine whether the first device has moved to a second location different from the first location of the first device; and

causing, by the server, the server to terminate the service to the second device when the first device has moved to the second location and the second location does not match the authorized location stored in the subscriber profile.

11. The method of claim 10, wherein the subscriber profile further includes:

user authentication information,

wherein the information comprises;

a user identifier associated with a subscriber account, and

further comprising;

authorizing the server to provide the service to the second device when the user identifier matches the user authentication information stored in the subscriber profile.

12. The method of claim 11, wherein the user identifier comprises:

a first user identifier;

or

a first user password, and

wherein the user authentication information comprises;

a second user identifier;

or

a second user password.

13. The method of claim 10, wherein the information comprises:

global positioning system (GPS) information to approximate the first location of the first device, and

wherein the using comprises;

performing GPS geolocation using the GPS information to approximate the first location of the first device.

14. The method of claim 10, wherein the subscriber profile further includes a linkage of a plurality of Media Access Control (MAC) addresses of a plurality of access points to a plurality of locations,

wherein the information comprises:

a MAC address of an access point from among the plurality of access points that is communicatively coupled to the first device; and

wherein the using comprises;

assigning a location from among the plurality of locations that corresponds to the MAC address as the first location of the first device.

15. The method of claim 10, wherein the subscriber profile further includes linkage of a plurality of Internet Protocol (IP) addresses of a plurality of access points to a plurality of locations,

wherein the information comprises:

an IP address of an access point from among the plurality of access points that is communicatively coupled to the first device; and

wherein the using comprises;

assigning a location from among the plurality of locations that corresponds to the IP address as the first location of the first device.

16. The method of claim 10, wherein the authorized location corresponds to one or more locations associated with a subscriber of the service.

17. The method of claim 10, further comprising:

estimating the first location of the first device using network connection information associated with information communicated to and/or from the first device using the service.

18. The method of claim 10, wherein the tracking comprises:

tracking a network address associated with the first device.

19. A server for providing a service of a service provider, the server comprising:

a network interface configured to receive a request to access the service, the request including information related to a first device which is authorized to access the service and specifying a second device to receive the service; and

a processor configured to;

estimate a first location of the first device using the information; and

authorize the server to provide the service to the second device when the first location of the first device matches an authorized location stored in a subscriber profile;

track, while the server is providing the service to the second device, the first location of the first device to determine whether the first device has moved to a second location different from the first location of the first device; and

cause the server to terminate the service to the second device when the first device has moved to the second location and the second location does not match the authorized location stored in the subscriber profile.

20. The server of claim 19, wherein the subscriber profile further includes:

user authentication information,

wherein the information comprises;

a user identifier associated with a subscriber account, and

wherein the server is further configured to provide the service to the second device when the user identifier matches the user authentication information stored in the subscriber profile.

21. The server of claim 20, wherein the user identifier comprises:

a first user identifier;

or

a first user password, and

wherein the user authentication information comprises;

a second user identifier;

or

a second user password.

22. The server of claim 19, wherein the information comprises:

global positioning system (GPS) information to approximate the first location of the first device, and

wherein the server is configured to perform GPS geolocation using the GPS information to approximate the first location of the first device.

23. The server of claim 19, wherein the processor is configured to estimate the first location of the first device using network connection information associated with information communicated to and/or from the first device using the service.

24. A server for providing a service of a service provider, the server comprising:

a memory configured to store a subscriber profile, the subscriber profile including an authorized location in which a device is authorized to access the service and a maximum number of devices associated with a user of the device; and

a processor configured to;

receive a request to access the service from the device, the request including information related to the device;

estimate a first location of the device using the information;

authorize the server to provide the service to the device when the first location of the device matches the authorized location stored in the subscriber profile and a number of devices presently associated with the user of the device is less than or equal to the maximum number of devices associated with the user of the device;

track, while the server is providing the service to the device, the first location of the device to determine whether the device has moved to a second location different from the first location of the device; and

cause the server to terminate the service to the device when the device has moved to the second location and the second location does not match the authorized location stored in the subscriber profile.