Privacy protection in a server

• US 20050241004A1
• Filed: 06/17/2005
• Published: 10/27/2005
• Est. Priority Date: 12/02/2002
• Status: Active Grant

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Pyhalammi, Seppo
• Granted Patent: US 7,616,949 B2
• Time in Patent Office: Days
• US Class Current: 726/29
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

A resource controller may store a plurality of files or other data that are at least partially accessible by one or more users in a network. The user may operate a mobile device, such as a cellular telephone and/or personal digital assistant, to call or otherwise contact the resource controller. The mobile device and/or a communications network may send identification information to the resource controller that identifies the mobile device and distinguishes it from other mobile devices. Based on the identification information, the resource controller may grant or deny access to files. The resource controller may further provide the user with the appropriate user ID and/or password based on the identification information. The user may then enter the user ID and/or password to gain access to files stored at the resource controller.

Claims

1. A method for providing access to a storage unit, comprising:

receiving identification information from a device over a first communication link, the identification information identifying the device; and

determining whether the storage unit may be at least partially accessed by the device over a second communication link based on the identification information.

2. The method of claim 1, further including maintaining association data that associates the identification information with access rights of at least one user, the step of determining including determining based on a comparison of the association data and the identification information.

3. The method of claim 2, wherein the association data comprises user ID information, password information, caller ID information, and accessibility information.

4. The method of claim 1, wherein the identification information is caller ID information.

5. The method of claim 1, wherein the first communication link is a wireless communication link and the second communication link is a wired communication link.

6. The method of claim 1, wherein the first communication link is a wired communication link and the second communication link is a wireless communication link.

7. The method of claim 1, wherein the first communication link and the second communication link are established via a same type of communication link.

8. The method of claim 1, wherein the device is a remote control device.

9. The method of claim 1, wherein the device is a mobile phone.

10. A method for providing access to a storage unit, comprising:

receiving information identifying a device over a first network;

based on the information identifying the device, providing the device with access information over the first network;

receiving the access information over a second network; and

providing access to the storage unit based on the access information.

11. The method of claim 10, wherein the access information is a password.

12. A method for providing access to a server, comprising:

receiving information identifying a device over a first network;

based on the information identifying the device, providing the device with access information over the first network;

after the step of providing, receiving the access information over a second network; and

providing access to the server based on the access information.

13. The method of claim 12, wherein the access information is a password.

14. An apparatus, comprising:

a first interface configured to communicate with a device over a first communication link;

a second interface configured to communicate with the device over a second communication link;

a storage unit storing association data that associates access rights with corresponding identification information; and

a processor coupled to the first and second interfaces and the storage unit and configured to receive from the first interface information identifying the device, compare the received information identifying the device with the stored association data, and provide access to at least part of a file via the second interface.

15. A system, comprising:

a device configured to communicate over first and second communication links, and to send identification information over the first communication link;

a resource controller configured to communicate with the device over the first and second communication links;

a storage unit storing association data that associates access rights with corresponding identification information; and

means for determining the access rights of the device based on the association data and the identification information,

wherein the resource controller is further configured to provide the device with access over the second communication link.

16. A communication device, comprising:

a first interface configured to communicate over a first communication link;

a second interface configured to communicate over a second communication link;

a processor coupled to the first interface and configured to transmit first information to a server over the first communication link and to receive second information from the server over the first communication link, the first information identifying the communication device; and

a storage unit storing the second information,

wherein the processor is further coupled to the second interface and configured to transmit the second information over the second communication link.

17. A computer-readable medium storing computer-executable instructions for performing a step comprising:

responsive to receiving identification information from a device over a first communication link, wherein the identification information identifies the device, determining whether a storage unit may be at least partially accessed by the device over a second communication link based on the identification information.

18. A computer-readable medium storing computer-executable instructions for performing a step comprising:

responsive to receiving identification information from a device over a first communication link, wherein the identification information identifies the device, determining whether a server may be at least partially accessed by the device over a second communication link based on the identification information.

19. A computer-readable medium storing computer-executable instructions for performing steps comprising:

responsive to receiving over a first communication link information identifying a device, comparing the received information identifying the device with stored association data, wherein the association data associates access rights with corresponding identification information; and

depending upon an outcome of the step of comparing, providing access by the device to at least part of a file via a second communication link.

20. A computer-readable medium storing computer-executable instructions for performing steps comprising:

responsive to receiving over a first communication link information identifying a device, comparing the received information identifying the device with stored association data, wherein the association data associates access rights with corresponding identification information; and

depending upon an outcome of the step of comparing, choosing between either providing or not providing access by the device to a server via a second communication link.

21. A computer-readable medium storing computer-executable instructions for performing steps comprising:

sending first information to a server over a first communication link, wherein the first information identifies the communication device; and

responsive to receiving second information from the server over the first communication link, sending the second information over a second communication link.