Limiting services based on location

• US 20070030973A1
• Filed: 08/03/2005
• Published: 02/08/2007
• Est. Priority Date: 08/03/2005
• Status: Active Grant

• Current Assignee: AT&T Mobility II LLC (AT&T, Inc.)
• Original Assignee: Cingular Wireless II LLC (AT&T, Inc.)
• Inventors: Mikan, Jeffrey
• Granted Patent: US 8,832,792 B2
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/14 Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed
• CPC Class Codes: H04W 64/00 Locating users or terminals or network equipment for network management purposes, e.g. mobility management
• CPC Class Codes: H04W 80/00 Wireless network protocols or protocol adaptations to wireless operation

Abstract

A system for authorizing services in wireless devices based on a type of service requested and a location of the wireless device. For example, in a wireless telephony system, when a session is set up via an Internet Protocol-based system, an application server queries a location service for the location of the handset requesting the service. If the handset or the receiving handset is in a location that is not authorized for the requested service based on the position of the handset, the connection is not enabled. A message may be transmitted to the sending handset to inform a user that the service is not authorized for the location.

Claims

1. A method of authorizing a service within a wireless network, comprising:

receiving a request for said service from a wireless device;

determining a location of said wireless device;

comparing said location to location data within a database; and

authorizing said service based on a result of said comparing and said server.

2. The method of claim 1, further comprising:

determining a first location of a sending wireless device; and

determining if said first location is not authorized for said service.

3. The method of claim 1, further comprising:

determining a second location of a receiving wireless device; and

determining if said second location is not authorized for said service.

4. The method of claim 1, wherein said method is performed within said wireless device.

5. The method of claim 4, further comprising:

receiving, at said wireless device, a communication containing said location data; and

storing said location data in said database within said wireless device.

6. The method of claim 1, wherein said location data comprises geographic locations where said service is not authorized.

7. The method of claim 1, further comprising receiving a session initiation protocol (SIP) INVITE from a sending wireless device.

8. The method of claim 7, further comprising providing an SIP error message to said sending wireless device when said service is not authorized.

9. The method of claim 1, further comprising authorizing said service based on a time of said request.

10. A system for authorizing a service requested by a wireless device communicatively connected to a wireless network, comprising:

a session controller that manages wireless devices and requests for services;

an application server that provides said services; and

a location database,

wherein when said wireless device makes a request for a service, said application server ascertains a first location of said wireless device and compares it to said location database to authorize said service.

11. The system of claim 10, wherein said first location is of a sending wireless device, and wherein said first location is not authorized for said service.

12. The system of claim 11, wherein a second location of a receiving wireless device is determined, and wherein said second location is not authorized for said service.

13. The system of claim 10, wherein said location data comprises geographic locations where said service is not authorized.

14. The system of claim 10, wherein said request is received in the form of a session initiation protocol (SIP) INVITE.

15. The system of claim 14, wherein said application server responds to said wireless device with an SIP message indicating said service is not authorized.

16. The system of claim 10, wherein said service is authorized based on a time of said request.

17. The system of claim 10, further comprising a location service that ascertains said first location via a radio frequency (RF) communication to said wireless device.

18. The system of claim 10, wherein said wireless device comprises a mobile handset and said wireless network comprises a wireless telephony network.

19. A method of authorizing a service within a wireless handset, comprising:

receiving location data;

receiving a request for said service;

determining a location of said wireless device;

comparing said location to said location data within said wireless handset; and

authorizing said service based on a result of said comparing and said request.

20. The method of claim 19, further comprising receiving said location data in a first-in-first-out (FIFO) order, and wherein said location data comprises geographic locations where said service is not authorized.