Proximity-based authorization

• US 20060014532A1
• Filed: 07/15/2004
• Published: 01/19/2006
• Est. Priority Date: 07/15/2004
• Status: Active Grant

• Current Assignee: Arlington Technologies, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: Avaya Incorporated
• Inventors: Seligmann, Doree Duncan, Sammon, Michael J., Brotman, Lynne Shapiro
• Granted Patent: US 8,571,541 B2
• Time in Patent Office: Days
• US Class Current: 455/420
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/54 Presence management, e.g. monitoring or registration for receipt of user log-on information, or the connection status of the users
• CPC Class Codes: H04M 1/72457 according to geographic location
• CPC Class Codes: H04M 1/72463 to restrict the functionality of the device
• CPC Class Codes: H04M 2242/14 with services dependent on location where the service is an information service H04M2242/15; services independent of location H04M3/42229
• CPC Class Codes: H04M 2242/30 Determination of the location of a subscriber
• CPC Class Codes: H04M 3/38 Graded-service arrangements, i.e. some subscribers prevented from establishing certain connections queuing arrangements H04Q3/64
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 24/00 Supervisory, monitoring or testing arrangements

Abstract

Methods and apparatuses are disclosed for enabling the response to a command from a wireless terminal to be based at least partially on the presence or absence of other users nearby, and possibly the identity of those users. In the illustrated embodiment, a server maintains an updated list of the locations of fixed and wireless terminals within an area (e.g., an IEEE 802.11 wireless access point'"'"'s area of coverage, a CDMA base station'"'"'s cell, etc.). When a user issues a command to his or her wireless terminal, the command is transmitted to the server. The server determines whether there are any other nearby wireless terminals (and inferentially, the users associated with these terminals), and then determines whether the command is authorized in that environment.

Claims

1. A method comprising:

(a) receiving from a first wireless terminal a remote command issued by a first user; and

(b) refusing to execute said remote command when there is a second wireless terminal that is associated with a second user and is inside a perimeter that also contains said first wireless terminal.

2. The method of claim 1 wherein the extent of said perimeter is based on the nature of said remote command.

3. The method of claim 1 wherein the extent of said perimeter is based on an argument of said remote command.

4. The method of claim 1 further comprising (c) determining whether to transmit to said first terminal a product of said remote command.

5. The method of claim 1 further comprising at least one of:

(c) determining whether to encode a product of said remote command; and

(d) determining how to encode said product of said remote command.

6. A method comprising:

(a) receiving from a first wireless terminal a remote command issued by a first user; and

(b) refusing to execute said remote command when

(i) there is a second wireless terminal that is associated with a second user and is inside a perimeter that also contains said first wireless terminal, and

(ii) the user of said first wireless terminal is unauthorized to execute said remote command in the presence of the user of said second personal wireless terminal.

7. The method of claim 6 further comprising:

(c) determining, based on at least one of a whitelist, a blacklist, and a hierarchy of user groups, whether the user of said first personal wireless terminal is unauthorized to execute said command in the presence of the user of said second personal wireless terminal.

8. The method of claim 7 wherein said determining is also based on the location of said first terminal.

9. The method of claim 7 wherein said determining is also based on the calendrical time at said first terminal.

10. The method of claim 7 wherein said remote command comprises reading a value associated with a descriptor, and wherein the extent of said perimeter is based on said descriptor.

11. The method of claim 7 wherein said remote command comprises reading a value associated with a descriptor, and wherein the extent of said perimeter is based on said value.

12. The method of claim 7 wherein said remote command comprises transmitting a signal directed to another wireless terminal.

13. A method comprising:

(a) receiving from a first wireless terminal a remote command issued by a first user; and

(b) executing said remote command only when there is a second wireless terminal that is associated with a second user and is inside a perimeter that also contains said first wireless terminal.

14. The method of claim 13 wherein the extent of said perimeter is based on the nature of said remote command.

15. A method comprising:

(a) receiving from a first terminal a local command issued by a first user; and

(b) transmitting to said first terminal a response that indicates whether said first user is authorized to execute said local command;

wherein said response is based on the presence of a second terminal that is wireless, is associated with a second user, and is inside a perimeter that also surrounds said first terminal.

16. The method of claim 15 wherein said response is also based on the identity of said second user.

17. The method of claim 15 wherein said local command comprises changing a setting of said wireless terminal.

18. The method of claim 15 wherein said local command comprises capturing at least one of an image and an acoustic signal.

20. A method comprising:

(a) receiving from a first terminal a request by a first user to access content; and

(b) transmitting to said first terminal a version of said content;

wherein said version of said content is based on the presence of a second terminal that is wireless, is associated with a second user, and is inside a perimeter that also surrounds said first terminal.

21. The method of claim 20 wherein a first version of said content is associated with a first medium, and wherein a second version of said content is associated with a second medium.

22. The method of claim 20 wherein a first version of said content is associated with a first authorization category, and wherein a second version of said content is associated with a second authorization category.

23. The method of claim 20 wherein the extent of said perimeter is based on said content.

24. A method comprising:

(a) transmitting a command from a first terminal to a server, wherein said first terminal is associated with a first user; and

(b) receiving a response to said command;

wherein said response is based on the presence of a second terminal that is wireless, is associated with a second user, and is inside a perimeter that also surrounds said first terminal.

25. The method of claim 24 wherein said response comprises one of:

(i) an indication that said command was refused, and

(ii) an indication that said command was executed.

26. The method of claim 24 wherein said command is a request to access content, and wherein said response comprises a version of said content.

27. The method of claim 24 wherein said command is a local command, and wherein said response comprises an indication of whether said local command is authorized.

28. The method of claim 27 wherein said response also comprises at least one of:

(i) an indication that a first product of said local command should be suppressed; and

(ii) an indication that a second product of said local command should be encoded.

29. The method of claim 24 wherein said command is a request to access content, and wherein said response comprises an indication of a version of said content.

30. A method comprising:

(a) transmitting from a first terminal to a server (i) a location and (ii) a description of a perimeter that surrounds said first terminal, wherein said first terminal is associated with a first user;

(b) receiving from said server information about a second terminal that is wireless, is associated with a second user, and is inside said perimeter; and

(c) determining whether to execute a local command based on said information.

31. The method of claim 30 further comprising:

(d) determining whether to output a product of said local command based on said information.

32. The method of claim 30 further comprising:

(d) determining whether to encode a product of said local command based on said information; and

(e) determining how to encode said product of said local command based on said information.