Method and system for GNSS receiver login protection and prevention

• US 20080289033A1
• Filed: 05/18/2007
• Published: 11/20/2008
• Est. Priority Date: 05/18/2007
• Status: Active Grant

• Current Assignee: Trimble Navigation Limited (Trimble Inc.)
• Original Assignee: Trimble Navigation Limited (Trimble Inc.)
• Inventors: Riley, Stuart, Hamilton, Jeffery A.
• Granted Patent: US 8,220,046 B2
• Time in Patent Office: Days
• US Class Current: 726/19
• CPC Class Codes: G01S 19/42 Determining position
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

Embodiments of the present invention recite a method and system for implementing login protection and prevention to a Global Navigation Satellite System (GNSS) receiver. In one embodiment, a geospatial data collection device which is communicatively coupled with a GNSS receiver is authenticated. It is then determined that the geospatial data collection device is authorized to collect data from a geographic region in which the GNSS receiver is located. The geospatial data collection device is then permitted access to a control interface of the GNSS receiver.

Claims

1. A method for implementing login protection to a Global Navigation Satellite System (GNSS) receiver, said method comprising:

authenticating a geospatial data collection device which is configured to be communicatively coupled with said GNSS receiver;

determining that said geospatial data collection device is authorized to collect data from a geographic region in which said GNSS receiver is located; and

permitting said geospatial data collection device to access a control interface of said GNSS receiver.

2. The method as recited in claim 1 wherein said authenticating comprises:

receiving an identification which is assigned to said geospatial data collection device and a second identification which is assigned to said GNSS receiver.

3. The method as recited in claim 2 wherein said authenticating further comprises:

conveying a randomly generated sequence to said geospatial data collection device;

receiving a response to said randomly generated sequence from said geospatial data collection device; and

verifying said response using a decryption key.

4. The method as recited in claim 3 further comprising:

selecting said decryption key based upon said identification and said second identification.

5. The method as recited in claim 3 wherein said determining further comprises:

deriving a geographic region identification from said identification in response to said verifying;

using said GNSS receiver to determine a current geographic position of said GNSS receiver;

comparing said geographic region identification with said current geographic position; and

determining that said geographic region identification corresponds to said current geographic position.

6. The method as recited in claim 5 wherein said deriving further comprises:

using a second decryption key to derive said geographic region identification from said identification.

7. The method as recited in claim 1 further comprising:

using an electronic device communicatively coupled with said geospatial data collection device and with said GNSS receiver to perform said authenticating, said determining, and permitting.

8. A method for implementing login protection to a Global Navigation Satellite System (GNSS) receiver, said method comprising:

accessing a decryption key which is uniquely associated with at least one geospatial data collection device configured to be communicatively coupled with said GNSS receiver;

verifying said geospatial data collection device using said decryption key; and

permitting said geospatial data collection device to access a control interface of said GNSS receiver.

9. The method as recited in claim 8 further comprising:

conveying a randomly generated sequence to said geospatial data collection device;

receiving a response to said randomly generated sequence from said geospatial data collection device; and

verifying said response using said decryption key.

10. The method as recited in claim 8 further comprising:

using a second decryption key to derive a geographic region identification from said identification.

11. The method as recited in claim 10 further comprising:

using said GNSS receiver to determine a current geographic position of said GNSS receiver;

comparing said geographic region identification with said current geographic position; and

determining that said geographic region identification corresponds to said current geographic position.

12. The method as recited in claim 8 further comprising:

receiving an identification which is assigned to said geospatial data collection device and a product identification which is assigned to said GNSS receiver; and

using said identification and said product identification to identify said decryption key and said second decryption key.

13. The method as recited in claim 8 further comprising:

using an electronic device communicatively coupled with said geospatial data collection device and with said GNSS receiver to perform said accessing, said verifying, and said permitting.

14. A method for implementing login protection to a Global Navigation Satellite System (GNSS) receiver, said method comprising:

determining a geographic region identification descriptive of a geospatial data collection device configured to be communicatively coupled with said GNSS receiver;

verifying that said geographic region identification corresponds to a current geographic position of said GNSS receiver; and

permitting said geospatial data collection device to access a control interface of said GNSS receiver.

15. The method as recited in claim 14 further comprising:

receiving an identification which is assigned to said geospatial data collection device and a product identification which is assigned to said GNSS receiver.

16. The method as recited in claim 15 further comprising:

conveying a randomly generated sequence to said geospatial data collection device in response to said receiving;

receiving a response to said randomly generated sequence from said geospatial data collection device;

using said identification and said product identification to identify a decryption key and a second decryption key; and

verifying said response using said decryption key.

17. The method as recited in claim 16 wherein said determining further comprises:

using said second decryption key to derive said geographic region identification from said identification.

18. The method as recited in claim 17 wherein said verifying further comprises:

using said GNSS receiver to determine said current geographic position; and

comparing said geographic region identification with said current geographic position.

19. The method as recited in claim 14 further comprising:

using an electronic device communicatively coupled with said geospatial data collection device and with said GNSS receiver to perform said determining, said verifying, and said permitting.

20. A system for implementing login protection to a Global Navigation Satellite System (GNSS) receiver, said system comprising:

an authenticating component coupled with a communication interface for authenticating a geospatial data collection device which is configured to be communicatively coupled with said GNSS receiver;

a geographic location verifier coupled with said authenticating component, said geographic location verifier for determining that said geospatial data collection device is authorized to collect data from a geographic region in which said GNSS receiver is located; and

a control interface enabler coupled with said authenticating component and with said geographic location verifier, said control interface enabler for permitting said geospatial data collection device to access a control interface of said GNSS receiver.

21. The system of claim 20 wherein said authenticating component further comprises:

an identification receiver for receiving an identification from said geospatial data collection device and wherein said identification is assigned to said geospatial data collection device;

a product identification receiver for receiving a product identification from said geospatial data collection device and wherein said product identification is assigned to said GNSS receiver; and

a decryption key identifier coupled with said identification receiver and with said product identification receiver, said decryption key identifier for identifying a decryption key based upon said identification and said product identification.

22. The system of claim 21 wherein said authenticating component further comprises:

a sequence generator for generating a random sequence which is conveyed to said geospatial data collection device;

a response receiver for receiving a response to said random sequence from said geospatial data collection device; and

a geospatial data collection device verifier coupled with said response receiver and with said decryption key identifier, said geospatial data collection device verifier for verifying said response using said decryption key.

23. The system of claim 22 wherein said geographic location verifier further comprises:

a geographic region identification deriver for deriving said geographic region from said identification using a second decryption key which is identified by said decryption key identifier;

a geographic position input for receiving a current geographic position of said GNSS receiver; and

a geographic region comparator for comparing said geographic region identification with said current geographic position and for determining that said geographic region identification corresponds to said current geographic position.

24. The method as recited in claim 23 wherein said geographic region identification deriver further comprises:

an identification input coupled with said identification receiver and with said geographic region identification deriver; and

a decryption key input coupled with said decryption key identifier and with said geographic region identification deriver.