Location information verification

• US 20090265781A1
• Filed: 04/22/2008
• Published: 10/22/2009
• Est. Priority Date: 04/22/2008
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Tarkoma, Sasu, Prehofer, Christian
• Granted Patent: US 9,154,301 B2
• Time in Patent Office: Days
• US Class Current: 726/22
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services

Abstract

Location information is provided with an authenticator in order to enable future providing of an authentication to a service or application making use of the location information. The authenticator is based on a cryptographic method known by a provider and recipient of and also optionally based on position data provided by the location information. The authenticator is carried as a watermark in the location information so that the location information can be used by prior existing systems and enables the authentication of the location information in compatible authentication enabled systems. On receiving the location information, an authentication enabled recipient obtains the authenticator from the location information and checks using the authenticator whether use of the location information may be allowed.

Claims

1. An apparatus, comprising:

a memory configured to store location information comprising first part and a second part; and

a processor configured to obtain from the second part an authenticator and to test the authenticator based on a cryptographic method known by a provider of the location information and by the apparatus.

2. An apparatus according to claim 1, wherein the testing involves checking whether the authenticator corresponds to the first part and the apparatus is configured, if the authenticator does not correspond to the first part, to decide that the location information cannot be positively authenticated and if the authenticator corresponds to the first part, to decide that that the location information has been positively authenticated.

3. An apparatus according to claim 1, wherein the location information consists of a predetermined number of data bits configured to define a location or region with a given accuracy.

4. An apparatus according to claim 1, wherein the first part comprises a first set most significant ones of the data bits and the second part comprises a second set of least significant ones of the data bits.

5. An apparatus according to claim 1, wherein the authenticator comprises a replay attack protector configured to enable detecting reusing of the location information.

6. An apparatus according to claim 5, wherein the replay attack protector is based on any one of the following:

a detail related to a desired client or user of the location information;

time;

date;

random number; and

any combination thereof.

7. A method comprising:

storing location information comprising first part and a second part;

obtaining from the second part an authenticator; and

testing the authenticator based on a cryptographic method known by a provider of the location information and by the apparatus.

8. A method according to claim 7, wherein the testing involves checking whether the authenticator corresponds to the first part and if not, deciding that the location information cannot be positively authenticated and if yes, deciding that that the location information has been positively authenticated.

9. A method according to claim 7, wherein the location information consists of a predetermined number of data bits configured to define a location or region with a given accuracy.

10. A method according to claim 7, wherein the first part comprises a first set most significant ones of the data bits and the second part comprises a second set of least significant ones of the data bits.

11. A method according to claim 7, wherein the authenticator comprises a replay attack protector configured to enable detecting reusing of the location information.

12. A method according to claim 11, wherein the replay attack protector is based on any one of the following:

a detail related to a desired client or user of the location information;

time;

date;

random number; and

any combination thereof.

13. An apparatus comprising:

a memory configured to store location information comprising a first part and a second part, the location information being intended to a recipient; and

a processor configured to include in the second part an authenticator based on a cryptographic method known by the apparatus and by intended recipient of the location information.

14. An apparatus according to claim 13, wherein the processor is further configured to compute the authenticator based on the cryptographic method and on the first part.

15. An apparatus according to claim 13, wherein the location information consists of a predetermined number of data bits configured to define a location or region with a given accuracy.

16. An apparatus according to claim 13, wherein the first part comprises a first set most significant ones of the data bits and the second part comprises a second set of least significant ones of the data bits.

17. An apparatus according to claim 13, wherein the authenticator comprises a replay attack protector configured to enable detecting reusing of the location information.

18. An apparatus according to claim 17, wherein the replay attack protector is based on any one of the following:

a detail related to a desired client or user of the location information;

time;

date;

random number; and

any combination thereof.

21. A method according to claim 13, wherein the location information consists of a predetermined number of data bits configured to define a location or region with a given accuracy.

22. A method according to claim 13, wherein the first part comprises a first set most significant ones of the data bits and the second part comprises a second set of least significant ones of the data bits.

23. A method according to claim 13, wherein the authenticator comprises a replay attack protector configured to enable detecting reusing of the location information.

24. A method according to claim 23, wherein the replay attack protector is based on any one of the following:

a detail related to a desired client or user of the location information;

time;

date;

random number; and

any combination thereof.

19. A method comprising:

storing location information comprising a first part and a second part, the location information being intended to a recipient; and

including in the second part an authenticator derivable based on a cryptographic method known by the apparatus and by intended recipient of the location information.

20. A method according to claim 19, wherein the authenticator is based on the cryptographic method and on the first part.

25. A computer program comprising computer executable program code for causing an apparatus when executing the program code to perform:

storing location information comprising a first part and a second part, the location information being intended to a recipient; and

including in the second part by an authenticator based on a cryptographic method known by the apparatus and by the intended recipient of the location information.

26. A computer program comprising computer executable program code for causing an apparatus when executing the program code to perform:

storing location information comprising first part and a second part;

obtaining from the second part an authenticator; and

testing the authenticator based on a cryptographic method known by a provider of the location information and by the apparatus.