Method and apparatus for optimized access of security credentials via mobile edge-computing systems

• US 10,452,824 B2
• Filed: 07/24/2017
• Issued: 10/22/2019
• Est. Priority Date: 07/24/2017
• Status: Active Grant

• Current Assignee: Dell Products LP (Dell Technologies Inc.)
• Original Assignee: Dell Products LP (Dell Technologies Inc.)
• Inventors: Egner, Will A., Quinn, Liam B.
• Primary Examiner(s): Bekele, Mekonen T
• Application Number:
  US15/657,490
• Publication Number:
  US 20190026450A1
• Time in Patent Office: 820 Days
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data

Abstract

A method for secure access to a mobile edge-computing system device based on a subscriber location fingerprint may comprise receiving a request to access the mobile edge-computing system, a first personal authorization credential record, and an encrypted token from a requesting client, associating the first personal authorization credential record with a block chain location fingerprint for the subscribing client, including a plurality of time-stamped records of a plurality of estimated or measured location state variables of the subscribing client and an associated confidence interval representing an accuracy of those variables, decrypting the location fingerprint, receiving a requesting client location measurement, predicting a current location for the subscribing client and an associated current confidence interval based on recent location state variables in the location fingerprint, and allowing the requesting client access to the mobile edge-computing system when the received requesting client location measurement falls within the value of the current confidence interval.

Claims

1. An information handling system of a mobile edge-computing system operating a nomadic computing authentication system comprising:

a memory receiving a predicted location of a client with a predicted location tolerance;

the memory receiving a pre-located, encrypted set of personal authorization credentials;

a processor executing machine readable executable code instructions to;

detect an access attempt by the client including identification of the client at a first location and a first personal authorization credential record;

determine whether the access attempt indicates the client is within the predicted location tolerance of the predicted location of the client;

determine whether the first personal authorization credential record is matched in the personal authorization credential record;

identify a plurality of mobile edge computing systems located within a preset range of the first location if the first location is within the predicted location tolerance and the first personal authorization credential record is matched; and

select an optimal edge compute partner system from among the plurality of mobile edge computing systems located within a preset range of the first location based on a minimum historical trust category rating determined from historical trust references accessed for the optimal edge compute partner system.

2. The information handling system operating the system of claim 1 further comprising:

the processor executing code instructions to;

select the optimal edge compute partner system further based on a highest historical trust category or rating from among mobile edge computing systems determined from historical trust references accessed for the plurality of mobile edge computing systems.

3. The information handling system operating the system of claim 1 further comprising:

the processor executing code instructions to;

select the optimal edge compute partner system from among the plurality of mobile edge computing systems located within a preset range of the first location further based on an ability to meet an identified mobile edge-computing system resource requirement associated with the client access request.

4. The information handling system operating the system of claim 3 wherein the mobile edge-computing system computing resource requirement is a memory requirement.

5. The information handling system operating the system of claim 3 wherein the mobile edge-computing system computing resource requirement is a processing requirement.

6. The information handling system operating the system of claim 1 further comprising:

the processor executing code instructions to;

transmit a request for a second personal authorization credential record input if the access attempt indicates the client is not within the predicted location tolerance of the predicted location of the client; and

if the personal authorization credential record input fails to match in the personal authorization credential record, denying access to the nomadic computing services.

7. The information handling system operating the system of claim 1 further comprising:

the processor executing code instructions to;

transmit a request for a second personal authorization credential record input if the first personal authorization credential record is matched in the personal authorization credential record; and

if the personal authorization credential record input matches in the personal authorization credential record, granting access to the optimal edge compute partner system for nomadic computing services.

8. An information handling system of a mobile edge-computing system operating a nomadic computing authentication system comprising:

a memory receiving a predicted location of a client with a predicted location tolerance;

the memory receiving a pre-located, encrypted set of personal authorization credentials;

a processor executing machine readable executable code instructions to;

identify a plurality of mobile edge computing systems located within a preset range of the predicted future location;

select an optimal edge compute partner system from among the plurality of mobile edge computing systems located within a preset range of the predicted future location based on a minimum historical trust category rating determined from historical trust references accessed for the optimal edge compute partner system;

detect an access attempt by the client including identification of the client at a first location and a first personal authorization credential record, wherein the first personal authorization credential record is a biometric measurement;

determine whether the access attempt indicates the first location is within the predicted location tolerance of the predicted location of the client;

decrypt the personal authorization credential record and determine whether the first personal authorization credential record is matched in the personal authorization credential record; and

if the first location is within the predicted location tolerance and the first personal authorization credential record is matched, grant access to the optimal edge compute partner system for nomadic computing services.

9. The information handling system operating the system of claim 8 further comprising:

the processor executing machine readable executable code instructions to;

transmit a challenge request to the client for a second personal authorization credential record if the first personal authorization credential record does not match the decrypted personal authorization credential record; and

allow access to the mobile edge computing system upon receipt of the second personal authorization credential record matching the decrypted personal authorization credential record.

10. The information handling system operating system of claim 9 further comprising:

the processor executing machine readable executable code instructions to;

disallow access by the requesting client and future requesting clients upon receipt of a second personal authorization credential record not matching the decrypted personal authorization credential record.

11. The information handling system of claim 8, wherein the first personal authorization credential record is a data record generated by a gesture identification system.

12. The information handling system of claim 8, wherein the first personal authorization credential record is a data record generated by a voice recognition system.

13. The information handling system of claim 8, wherein the first personal authorization credential record is a data record generated by a facial recognition system.