Enhanced user privacy for mobile station location services

• US 20040176104A1
• Filed: 02/13/2004
• Published: 09/09/2004
• Est. Priority Date: 02/14/2003
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Arcens, Suzanne
• Granted Patent: US 7,088,237 B2
• Time in Patent Office: Days
• US Class Current: 455/456.3
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 8/10 between location register and external networks
• CPC Class Codes: H04W 8/14 between corresponding nodes
• CPC Class Codes: H04W 8/16 selectively restricting mobility data tracking

Abstract

A method and apparatus for enhanced user control of location information for mobile devices. The method and apparatus provide user control within the mobile station of privacy policies that supervise responses to requests for location information. In an exemplary embodiment the mobile station includes a Privacy Engine, a Position Determination Module, and a User Interface. The Privacy Engine is a software module that controls the responses of the mobile station to location requests. The Privacy Engine preferably includes a Privacy Policy that may be modified by the mobile station user by means of wireless downloads, the User Interface, or by locally connected devices such as a personal computer, personal digital assistant, or laptop. Advantageously, the Privacy Engine or the Privacy Policy may be downloaded to the mobile station by means of a wireless data network or other data connection such as Bluetooth, infrared connection, Universal Serial Bus, etc.

Claims

1. A privacy control system for use in a mobile station, wherein the mobile station communicates with a wireless communication system, and wherein the privacy control system provides geographical location information associated with the mobile station, comprising:

a) a Privacy Engine, including a Privacy Policy component, wherein the Privacy Engine receives location requests related to the geographical location of the mobile station; and

b) a Position Determination Module (PDM), operatively coupled and responsive to the Privacy Engine, wherein the PDM provides estimates of the geographical location of the mobile station to the Privacy Engine;

wherein, the Privacy Engine receives the geographical location estimates from the PDM, and responds to the location requests by processing the location estimates and providing response messages in accordance with the Privacy Policy component.

2. The privacy control system of claim 1, wherein the PDM operates according to one or more of the following methods:

Global Positioning System (GPS), assisted GPS, Advanced Forward Link Trilateration, Time of Arrival, Enhanced Observed Time Difference, and positioning based on identifying wireless communication cells within which the mobile station is operating.

3. The privacy control system of claim 1, further comprising a wireless network communication module operatively coupled to the Privacy Engine and to the wireless communication system, wherein the wireless network communication module is configured to receive the location requests from the wireless communication system and to transmit the response messages to the wireless communication system, and further configured to receive data and software instructions from the wireless communication system and to transmit data and software instructions to the wireless communication system.

4. The privacy control system of claim 3, wherein the Privacy Engine comprises software that is downloaded from the wireless communication system.

5. The privacy control system of claim 3, wherein the Privacy Engine is modified with software upgrades downloaded from the wireless communication system.

6. The privacy control system of claim 3, wherein the Privacy Policy comprises software that is downloaded from the wireless communication system.

7. The privacy control system of claim 3, wherein the Privacy Policy is modified with updates downloaded from the wireless communication system.

8. The privacy control system of claim 7, wherein the updates include user-specific Privacy Policy data.

9. The privacy control system of claim 3, wherein the location request is received from an external application operatively connected to the wireless communication system.

10. The privacy control system of claim 1, wherein the location requests are received from a local software application executing within the mobile station.

11. The privacy control system of claim 1, further comprising a local communication module operatively coupled to the Privacy Engine and to external local applications, wherein the local communication module is configured to receive the location requests from the external local applications and to transmit the response messages to the external local applications, and further configured to receive data and software instructions from the external local applications and to transmit data and software instructions to the external local applications.

12. The privacy control system of claim 11, wherein the Privacy Engine comprises software that is downloaded from an external local application.

13. The privacy control system of claim 11, wherein the Privacy Engine is modified with software upgrades by software instructions downloaded from an external local application.

14. The privacy control system of claim 11, wherein the Privacy Policy comprises software that is downloaded from an external local application.

15. The privacy control system of claim 11, wherein the Privacy Policy is modified with updates downloaded from an external local application.

16. The privacy control system of claim 15, wherein the updates include user-specific Privacy Policy data.

17. The privacy control system of claim 11, wherein the location request is received from an external local application.

18. The privacy control system of claim 1, further comprising a User Interface, operatively coupled to the Privacy Engine, wherein the User Interface is configured to receive input from a user, and wherein the user input is used to modify the Privacy Policy with updates.

19. The privacy control system of claim 18, wherein the updates include user-specific Privacy Policy data.

20. The privacy control system of claim 18, wherein the User Interface provides notifications of location requests to the user, in accordance with the Privacy Policy, and wherein the User Interface is configured to receive responses from the user, responsive to the location request notifications.

21. The privacy control system of claim 20, wherein the Privacy Policy includes a plurality of Privacy Classes, wherein the Privacy Classes classify the location requests received by the Privacy Engine, and wherein the Privacy Policy further includes Privacy Rules that determine responses to the location requests for each Privacy Class, and wherein the Privacy Rules include at least one of the following rules:

a) a rule requiring default acceptance or denial of a location request;

b) a rule requiring user notification of a location request;

c) a rule requiring user notification based upon a requested quality of service;

d) a rule requiring user notification based upon whether the location request is periodic or initiated on demand;

e) a rule requiring user notification based upon a time of occurrence of the location request;

f) a rule specifying a display mode to be used for user notification;

g) a rule specifying an accuracy range of the location estimate to be provided;

h) a rule requiring default handling of a response message if the user does not respond to a user notification; and

i) a rule specifying response message handling based on current geographical location of the mobile station.

22. The privacy control system of claim 1, further comprising a removable data storage device, wherein the removable data storage device is operatively coupled to the Privacy Engine, and wherein the removable data storage device is configured to receive, store, and transmit user-specific Privacy Policy data.

23. The privacy control system of claim 22, wherein the removable data storage device comprises a Subscriber Identity Module device.

24. The privacy control system of claim 22, wherein the removable data storage device comprises a Universal Subscriber Identity Module device.

25. The privacy control system of claim 22, wherein the removable data storage device comprises a Removable User Identity Module device.

26. A method of providing privacy control in a mobile station of the mobile station geographical location information, wherein the mobile station communicates with a wireless communication system, and wherein the mobile station includes a Privacy Engine comprising software instructions, wherein the Privacy Engine software instructions also include Privacy Policy instructions, and wherein the mobile station further includes a Position Determination Module (PDM) capable of providing geographical location estimates of the mobile station;

the method comprising the steps of;

a) receiving location requests for a current geographical location of the mobile station;

b) processing the location requests in accordance with the Privacy Engine software instructions;

c) obtaining geographical location estimates of the mobile station;

d) processing the location estimates in accordance with the location requests, the Privacy Engine software instructions, and the Privacy Rules; and

e) providing response messages responsive to the location requests, the Privacy Engine software instructions, the location estimates and the Privacy Rules.

27. The privacy control method of claim 26, wherein the step b) of processing the location requests further includes a step of processing emergency location requests by overriding the Privacy Policy instructions to provide emergency response messages.

28. The privacy control method of claim 27, wherein the step b) of processing the location requests includes processing a plurality of concurrent location requests.

29. The privacy control method of claim 28, wherein pending location requests are suspended while the emergency location requests are processed.

30. The privacy control method of claim 26, further comprising a step of notifying a user of location requests.

31. The privacy control method of claim 30, wherein the Privacy Policy instructions include Privacy Classes for classifying the location requests received during the step a), and wherein the Privacy Policy instructions further include Privacy Rules for determining a response to the location requests for each Privacy Class, and wherein the Privacy Rules include at least one of the following rules:

a) a rule requiring default acceptance or denial of a location request;

b) a rule requiring user notification of a location request;

c) a rule requiring user notification based upon a requested quality of service;

d) a rule requiring user notification based upon whether the location request is periodic or initiated on demand;

e) a rule requiring user notification based upon a time of occurrence of the location request;

f) a rule specifying a display mode to be used for user notification;

g) a rule specifying an accuracy range of the location estimate to be provided;

h) a rule requiring default handling of a response message if the user does not respond to a user notification; and

i) a rule specifying response message handling based on current geographical location of the mobile station.

32. An apparatus providing privacy control in a mobile station of the mobile station geographical location information, wherein the mobile station communicates with a wireless communication system, and wherein the mobile station includes a Privacy Engine comprising software instructions, wherein the Privacy Engine software instructions also include Privacy Policy instructions, and wherein the mobile station further includes a Position Determination Module (PDM) capable of providing geographical location estimates of the mobile station, comprising:

a) means for receiving location requests for a current geographical location of the mobile station;

b) means for processing the location requests in accordance with the Privacy Engine software instructions;

c) means for obtaining geographical location estimates of the mobile station;

d) means for processing the location estimates in accordance with the location requests, the Privacy Engine software instructions, and the Privacy Rules; and

e) means for providing response messages responsive to the location requests, the Privacy Engine software instructions, the location estimates and the Privacy Rules.

33. The privacy control apparatus of claim 32, wherein the means for processing the location requests further includes means for bypassing the Privacy Policy instructions to process emergency location requests and provide emergency response messages.

34. The privacy apparatus method of claim 33, wherein the means for processing the location requests further includes means for processing a plurality of concurrent location requests.

35. The privacy control apparatus of claim 34, wherein pending location requests are suspended while the emergency location requests are processed.

36. The privacy control apparatus of claim 32, further comprising means for notifying a user of location requests.

37. The privacy control apparatus of claim 36, wherein the Privacy Policy includes Privacy Classes for classifying the location requests received during step a), and wherein the Privacy Policy further includes Privacy Rules for determining a response to the location requests for each Privacy Class, and wherein the Privacy Rules include at least one of the following rules:

a) a rule requiring default acceptance or denial of a location request;

b) a rule requiring user notification of a location request;

c) a rule requiring user notification based upon a requested quality of service;

d) a rule requiring user notification based upon whether the location request is periodic or initiated on demand;

e) a rule requiring user notification based upon a time of occurrence of the location request;

f) a rule specifying a display mode to be used for user notification;

g) a rule specifying an accuracy range of the location estimate to be provided;

h) a rule requiring default handling of a response message if the user does not respond to a user notification; and

i) a rule specifying response message handling based on current geographical location of the mobile station.