Providing location data about a mobile entity

• US 20010055392A1
• Filed: 03/23/2001
• Published: 12/27/2001
• Est. Priority Date: 03/25/2000
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Thomas, Andrew, McDonnell, James Thomas Edward, Waters, John Deryk, Crouch, Simon E., Spratt, Michael P.
• Granted Patent: US 7,512,234 B2
• Time in Patent Office: Days
• US Class Current: 380/258
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04M 15/00 Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
• CPC Class Codes: H04M 15/80 Rating or billing plans; Tariff determination aspects
• CPC Class Codes: H04M 15/8033 location-dependent, e.g. business or home
• CPC Class Codes: H04M 2215/2026 Wireless network, e.g. GSM, PCS, TACS
• CPC Class Codes: H04M 2215/74 Rating aspects, e.g. rating parameters or tariff determination apects
• CPC Class Codes: H04M 2215/7435 Location dependent, e.g. Bussiness or home
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/24 Accounting or billing
• CPC Class Codes: H04W 64/00 Locating users or terminals or network equipment for network management purposes, e.g. mobility management

Abstract

Location data about a mobile entity (20) is provided in encrypted form by a location server (79) to a recipient that is one of the mobile entity (20) or a service system (40) usable by the mobile entity. The location data (P) is encrypted such that it can only to be decrypted using a secret available to a decryption entity (80) that is not under the control of the recipient. This permits location data (P) to be provided in a confidential manner to service systems (40) and also protects billing relationships between participants. A mechanism is also described for limiting the accuracy of decrypted location data (L) made available to a service system (40).

Claims

1. A method of providing location data about a mobile entity, wherein the location data is provided in encrypted form by a location server to a recipient that is one of the mobile entity or a service system usable by the mobile entity, the location data being encrypted such that it can only to be decrypted using a secret available to a decryption entity that is not under the control of the recipient, whereby involvement of the decryption entity is necessary to decrypt the location data.

2. A method according to

claim 1

, wherein the encrypted location data is decrypted by the decryption entity with explicit or implicit authorisation by the mobile entity.

3. A method according to

claim 1

, wherein the recipient is the mobile entity and the decryption entity is under the control of the location server or an agent of the latter.

4. A method according to

claim 2

, wherein the recipient is the mobile entity and the decryption entity is under the control of the location server or an agent of the latter.

5. A method according to

claim 4

, wherein mobile entity passes the encrypted location data to a service system in association with a service request to the latter, the service system then passing the encrypted location data to the decryption entity for decryption and return

6. A method according to

claim 5

, wherein the encrypted location data includes the identity of the mobile entity to which the location data relates, the mobile entity passing the service system authenticatable identity data concerning itself and the service system, and the service system passing the identity data to the decryption entity which authenticates the identity data and only returns the decrypted location data to the service system if both:

the mobile entity indicated by the identity data is the same as the one to which the location data relates, and

service system indicated by the identity data is the same as the one asking the decryption entity to decrypt the location data.

7. A method according to

claim 4

, wherein mobile entity passes the encrypted location data to the decryption entity for decryption and return.

8. A method according to

claim 1

, wherein the recipient is the mobile entity and the decryption entity is a service system to which the mobile entity passes the encrypted location data in association with a service request.

9. A method according to

claim 2

, wherein the recipient is the mobile entity and the decryption entity is a service system to which the mobile entity passes the encrypted location data in association with a service request.

10. A method according to

claim 1

, wherein the recipient is the service system and the decryption entity is under the control of the location server or an agent of the latter.

11. A method according to

claim 2

, wherein the recipient is the service system and the decryption entity is under the control of the location server or an agent of the latter.

12. A method according to

claim 11

, wherein the service system passes the encrypted location data to the decryption entity for decryption and return, upon receipt of an authoring service request from the mobile entity.

13. A method according to

claim 12

, wherein the encrypted location data includes the identity of the mobile entity to which the location data relates, the mobile entity passing the service system authenticatable identity data concerning itself and the service system, and the service system passing the identity data to the decryption entity which authenticates the identity data and only returns the decrypted location data to the service system if both:

the mobile entity indicated by the identity data is the same as the one to which the location data relates, and

service system indicated by the identity data is the same as the one asking the decryption entity to decrypt the location data.

14. A method according to

claim 11

, wherein the mobile entity obtains the encrypted location data from the service system and passes it to the decryption entity for decryption and return.

15. A method according to

claim 14

, wherein the encrypted location data includes the identity of the mobile entity to which the location data relates, the mobile entity passing the decryption entity authenticatable identity data concerning itself, and the decryption entity authenticating the identity data and only returning the decrypted location data to the service system if the mobile entity indicated by the identity data is the same as the one to which the location data relates.

16. A method according to

claim 11

, wherein the service system is a location-data archive system.

17. A method according to

claim 1

, wherein the recipient is the service system and the decrypting entity is the mobile entity, the latter having received the encrypted location data from the service system.

18. A method according to

claim 1

, wherein the recipient is the service system and the decrypting entity is the mobile entity, the latter having received the encrypted location data from the service system.

19. A method according to

claim 1

, wherein involvement of the decryption entity to decrypt the location data results in the generation of a billing record.

20. A method according to

claim 2

, wherein involvement of the decryption entity to decrypt the location data results in the generation of a billing record.

21. A method according to

claim 1

, wherein the encrypted location data is passed to the decryption entity for decryption and the mobile entity sends the decryption entity, either directly or via the service system, quality of service data, QoS data, indicating a desired location accuracy, the decryption entity returning the decrypted location of the mobile entity to an accuracy determined by the QoS data.

22. A method according to

claim 21

, wherein the mobile entity digitally signs the QoS data, and the decryption entity checks the authenticity of the QoS data on the basis of the mobile entity'"'"'s digital signature.

23. A method of providing location data about a mobile entity from a location server to a service system, wherein:

(a) in response to a request for location data about the mobile entity, the location server obtains the data, encrypts it in such a way that it can only to be decrypted using a secret known to a decryption entity associated with the location server, and sends out the encrypted location data;

(b) the service system receives the encrypted location data and sends it to the decryption entity for decryption and return.