System and method for access control in the delivery of location information

• US 20040224702A1
• Filed: 05/09/2003
• Published: 11/11/2004
• Est. Priority Date: 05/09/2003
• Status: Abandoned Application

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Chaskar, Hemant
• Application Number:
  US10/434,561
• Publication Number:
  US 20040224702A1
• Time in Patent Office: Days
• US Class Current: 455/456.3
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 8/16 selectively restricting mobility data tracking

Abstract

A system and method are provided for access controlled delivery of location information. The system includes a mobile station, a location services client, and a location server. The mobile station is capable of receiving consent to deliver location information regarding the mobile station and, if consent is granted, automatically creating an authorization. After creating the authorization, the location services client is capable of receiving the authorization. The location services client can then transmit a request for the location information, where the request includes the authorization. The location server, in turn, can verify the authorization. After the authorization has been verified, the location server can deliver the location information to the location services client if the authorization is verified.

Claims

1. A method for access controlled delivery of location information regarding a mobile station, the method comprising:

receiving consent to deliver location information regarding the mobile station, and automatically thereafter creating an authorization;

transmitting a request for the location information, wherein the request includes the authorization;

verifying the authorization; and

delivering the location information if the authorization is verified.

2. A method according to claim 1 further comprising triggering a prompt to consent to delivery of location information before receiving the consent.

3. A method according to claim 2, wherein triggering a prompt comprises requesting a location-based service to thereby trigger the prompt.

4. A method according to claim 1 further comprising selecting a location-based service before receiving the consent.

5. A method according to claim 1, wherein consenting to delivery of location information comprises consenting to delivery of location information with at least one parameter including a least one of a predefined granularity, frequency and time period, and wherein creating an authorization comprises creating an authorization including the at least one parameter.

6. A method according to claim 5, wherein verifying the authorization includes verifying that at least one of the predefined accuracy and time period has not been exceeded.

7. A method according to claim 6, wherein verifying the authorization further includes verifying a shared secret.

8. A method according to claim 1, wherein delivering the location information comprises delivering the location information with a predefined granularity.

9. A method according to claim 1 further comprising:

determining the location information, wherein the location information includes a set of geographic coordinates representative of a location of the mobile station; and

mapping the geographic coordinates into logical coordinates representative of a location of the mobile station, wherein the delivered location information includes the logical coordinates.

10. A system for access controlled delivery of location information, the system comprising:

a mobile station capable of receiving consent to deliver location information regarding the mobile station, wherein the mobile station is capable of automatically creating an authorization upon receiving the consent, and thereafter transmitting the authorization;

a location services client capable of receiving the authorization, and thereafter transmitting a request for the location information, wherein the request includes the authorization; and

a location server capable of verifying the authorization, and thereafter delivering the location information to the location services client if the authorization is verified.

11. A system according to claim 10, wherein the mobile station is capable of receiving input to thereby trigger a prompt to consent to delivery of location information before receiving the consent.

12. A system according to claim 11, wherein the mobile station is capable of receiving a request for a location-based service to thereby trigger the prompt.

13. A system according to claim 10, wherein the mobile station is capable of receiving a selection of a location-based service before receiving the consent.

14. A system according to claim 10, wherein the mobile station is capable of receiving consent with at least one parameter including at least one of a predefined granularity, frequency and time period, and wherein the mobile station is capable of creating an authorization including the at least one parameter.

15. A system according to claim 14, wherein the location server is capable of verifying the authorization by verifying that at least one of the predefined accuracy and time period has not been exceeded.

16. A system according to claim 15, wherein the location server is capable of verifying the authorization by further verifying a shared secret between the mobile station and the location server.

17. A system according to claim 10, wherein the location server is capable of delivering the location information with a predefined granularity.

18. A system according to claim 10 further comprising:

a position determining entity capable of determining the location information, wherein the location information includes a set of geographic coordinates representative of a location of the mobile station; and

a mapping processor capable of mapping the geographic coordinates into logical coordinates representative of a location of the mobile station, wherein the location information delivered by the location server includes the logical coordinates.

19. A mobile station comprising:

a user interface capable of receiving consent to deliver location information regarding the mobile station;

a controller capable of executing a software application to automatically create an authorization upon receipt of the consent; and

a transmitter capable of transmitting the authorization to a location services client.

20. A mobile station according to claim 19, wherein the user interface is capable of receiving input to thereby trigger the controller to execute the software application to present a prompt to receive consent to deliver location information before the user interface receives the consent for delivery of location information.

21. A mobile station according to claim 20, wherein the user interface is capable of receiving a request for a location-based service to thereby trigger the controller.

22. A mobile station according to claim 19, wherein the user interface is capable of receiving a selection of a location-based service before receiving the consent.

23. A mobile station according to claim 19, wherein the user interface is capable of receiving consent to deliver location information with at least one parameter including at least one of a predefined granularity, frequency and time period, and wherein the software application is capable of creating the authorization including at least one of the predefined granularity, frequency and time period.