METHOD AND SYSTEM FOR LOCATION-AWARE AUTHORIZATION

• US 20100017874A1
• Filed: 07/16/2008
• Published: 01/21/2010
• Est. Priority Date: 07/16/2008
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Termine, Francesco, Secchi, Marco, Pichetti, Luigi, Piccinini, Sandro
• Application Number:
  US12/174,569
• Publication Number:
  US 20100017874A1
• Time in Patent Office: Days
• US Class Current: 726/18
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS

Abstract

A method and system for controlling access to a module based on spatial location of the module is provided. One implementation involves detecting spatial location of the module, accessing a set of rules indicating locations where access to the module is not authorized, and controlling access to the module based on the detected location by checking the detected location against the set of rules, and denying access to the module when the detected location is within locations where access to the module is not authorized.

Claims

1. A method of controlling access to a module based on spatial location of the module, comprising:

detecting spatial location of the module;

accessing a set of rules indicating locations where access to the module is not authorized; and

controlling access to the module based on the location by checking the detected location against the set of rules, and denying access to the module when the detected location is within locations where access to the module is not authorized.

2. The method of claim 1, wherein detecting spatial location of the module includes detecting geographical location of the module based on a geographical positioning system.

3. The method of claim 1, wherein said set of rules are stored locally with the module, and accessing the set of rules includes local access to the rules.

4. The method of claim 1, wherein the rules are stored remotely from the module, and accessing the set of rules involves remotely accessing the set of rules.

5. The method of claim 1, wherein controlling access to the module further includes:

obtaining additional information for access authorization;

checking the detected location against said set of rules; and

authorizing access to the module based on the additional information and the detected location.

6. The method of claim 5, wherein the additional information includes user credentials.

7. The method of claim 6, wherein the additional information includes time and/or date information.

8. The method of claim 6, wherein the module comprises an electronic device.

9. An apparatus for controlling access to a module based on spatial location of the module, comprising:

a location detector configured for detecting spatial location of the module; and

a controller configured for accessing a set of rules indicating locations where access to the module is not authorized, and controlling access to the module based on the detected location by checking the detected location against the set of rules, and denying access to the module when the detected location is within locations where access to the module is not authorized.

10. The apparatus of claim 9, wherein the location detector is further configured for detecting geographical location of the module based on a geographical positioning system.

11. The apparatus of claim 9, wherein said set of rules are stored locally with the module, and the controller is configured for accessing the set of rules includes local access to the rules.

12. The apparatus of claim 9, wherein the rules are stored remotely from the module, and the controller is configured for accessing the set of rules involves remotely accessing the set of rules.

13. The apparatus of claim 9, wherein the controller is further configured for obtaining additional information for access authorization, and checking the detected location against said set of rules for authorizing access to the module based on the additional information and the detected location.

14. The apparatus of claim 13, wherein the additional information includes user credentials.

15. The apparatus of claim 14, wherein the additional information includes time and/or date information.

16. The apparatus of claim 14, wherein the module comprises an electronic device.

17. An access control system, comprising:

a controlled module

an authenticator configured for controlling access to the controller module based on spatial location of the module, the authenticator comprising;

a location detector configured for detecting spatial location of the module; and

a controller configured for accessing a set of rules indicating locations where access to the module is not authorized, and controlling access to the module based on the detected location by checking the detected location against the set of rules, and denying access to the module when the detected location is within locations where access to the module is not authorized.

18. The system of claim 17, wherein said set of rules are stored locally with the module, and the controller is configured for accessing the set of rules includes local access to the rules.

19. The system of claim 17, wherein the rules are stored remotely from the module, and the controller is configured for accessing the set of rules involves remotely accessing the set of rules.

20. The system of claim 19, further including a remote authentication control configured for receiving location information from the authenticator, checking the location against a set of rules, and informing the authenticator if the location is in authorized locations or otherwise.