Arrangements for Location-Based Security Systems and Methods Therefor

• US 20100278335A1
• Filed: 11/03/2008
• Published: 11/04/2010
• Est. Priority Date: 11/02/2007
• Status: Abandoned Application

• Current Assignee: Board of Trustees of the Leland Stanford Junior University (Stanford University)
• Original Assignee: Board of Trustees of the Leland Stanford Junior University (Stanford University)
• Inventors: De Lorenzo, Truc, De Lorenzo, David, Enge, Per
• Application Number:
  US12/263,866
• Publication Number:
  US 20100278335A1
• Time in Patent Office: Days
• US Class Current: 380/45
• CPC Class Codes: G01S 19/14 specially adapted for specific applications
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 2463/081 applying self-generating credentials, e.g. instead of receiving credentials from an authority or from another peer, the credentials are generated at the entity itself
• CPC Class Codes: H04L 9/0872 using geo-location information, e.g. location data, time, relative position or proximity to other entities
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent

Abstract

Aspects are applicable to secure encryption such as in the generation of a cryptographic key from location information as may be useful in portable/wireless communication devices. As an example, one embodiment is implemented as a method of generating cryptographic keys from location information derived from a signal received from a publicly-used wireless communication system. The location information is protected from fraudulently generated signals using direction of arrival of the received signal. The method attempts to verify that the direction of arrival corresponds to an expected direction of arrival for a received signal of the primary signal type, and in response to the direction of arrival being verified for the direction of arrival, and then enables use of an encryption key that is generated from positional information derived from the received signal

Claims

1. A method of generating cryptographic keys from location information derived from a signal received from a publicly-used wireless communication system, the location information being protected from fraudulently generated signals using direction of arrival of the received signal, the method comprising the steps of:

attempting to verify that the direction of arrival corresponds to an expected direction of arrival for a received signal of the primary signal type; and

in response to the direction of arrival being verified as corresponding to the expected direction of arrival, enabling use of an encryption key that is generated from positional information derived from the received signal.

2. The method of claim 1, further including the step of, in response to the direction of arrival failing to be verified, using a secondary location signal to indicate a valid location.

3. The method of claim 1, wherein the direction of arrival is determined using a multiple-antenna receiver.

4. The method of claim 3, wherein the direction of arrival is determined using a space-time covariance function.

5. The method of claim 1, further including the step of controlling the availability of multiple encryption keys.

6. The method of claim 5, wherein the step of controlling the availability is responsive to a determination of a level of confidence of the positional information.

7. A system for implementing the method of claim 1, wherein one entity is set up for attempting to verify that the direction of arrival corresponds to an expected direction of arrival for a received signal of the primary signal type, and

another entity is set up in response to the direction of arrival being verified as corresponding to the expected direction of arrival, enabling use of an encryption key that is generated from positional information derived from the received signal.

8. An apparatus for generating cryptographic keys from location information derived from a signal received from a publicly-used wireless communication system, the location information being protected from fraudulently generated signals using direction of arrival of the received signal, the apparatus comprising:

first means for attempting to verify that the direction of arrival corresponds to an expected direction of arrival for a received signal of the primary signal type; and

second means, responsive to the direction of arrival being verified as corresponding to the expected direction of arrival, for enabling use of an encryption key that is generated from positional information derived from the received signal.

9. The apparatus of claim 8, wherein the means for attempting includes a logic circuit configured and designed for verifying that the direction of arrival corresponds to an expected direction of arrival for a received signal of the primary signal type.

10. The apparatus of claim 9, wherein the logic circuit includes a configuration of data stored in a storage medium which data is used to program the logic circuit for attempting to verify that the direction of arrival corresponds to an expected direction of arrival for a received signal of the primary signal type.

11. The apparatus of claim 8, wherein the logic circuit includes a software-programmed computer.

12. The apparatus of claim 8, wherein at least one of the first and second means include a software-programmed computer.