ENFORCING POLICIES IN WIRELESS COMMUNICATION USING EXCHANGED IDENTITIES

• US 20110119733A1
• Filed: 01/27/2011
• Published: 05/19/2011
• Est. Priority Date: 09/08/2008
• Status: Active Grant

• Current Assignee: Secure Communication Technologies, LLC
• Original Assignee: Proxicom Wireless LLC
• Inventors: Proctor, James Arthur JR., Proctor, James Arthur III
• Granted Patent: US 8,370,955 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06Q 10/0875 Itemisation or classification of parts, supplies or services, e.g. bill of materials
• CPC Class Codes: G06Q 20/202 Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/384 using social networks
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/386 using messaging services or messaging apps using mobile network messaging services for payment, e.g. SMS G06Q20/3255
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 30/0207 Discounts or incentives, e.g. coupons or rebates
• CPC Class Codes: G06Q 30/0222 During e-commerce, i.e. online transactions
• CPC Class Codes: G06Q 30/0226 Incentive systems for frequent usage, e.g. frequent flyer miles programs or point systems
• CPC Class Codes: G06Q 30/0242 Determining effectiveness of advertisements
• CPC Class Codes: G06Q 30/0261 based on user location
• CPC Class Codes: G06Q 30/0282 Rating or review of business operators or products
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 30/0623 Item investigation
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 61/5038 for local use, e.g. in LAN or USB networks, or in a controller area network [CAN]
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/306 : User profiles
• CPC Class Codes: H04L 67/52 : specially adapted for the location of the user terminal
• CPC Class Codes: H04L 67/54 : Presence management, e.g. monitoring or registration for receipt of user log-on information, or the connection status of the users
• CPC Class Codes: H04L 69/18 : Multiprotocol handlers, e.g. single devices capable of handling multiple protocols
• CPC Class Codes: H04W 12/02 : Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/04 : Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 4/02 : Services making use of location information
• CPC Class Codes: H04W 4/023 : using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds
• CPC Class Codes: H04W 4/029 : Location-based management or tracking services
• CPC Class Codes: H04W 4/21 : for social networking applications
• CPC Class Codes: H04W 4/80 : Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 76/11 : Allocation or use of connection identifiers
• CPC Class Codes: H04W 8/005 : Discovery of network devices, e.g. terminals
• CPC Class Codes: H04W 8/26 : Network addressing or numbering for mobility support
• CPC Class Codes: H04W 88/06 : adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

Techniques for facilitating the exchange of information and transactions between two entities associated with two wireless devices when the devices are in close proximity to each other. A first device uses a first short range wireless capability to detect an identifier transmitted from a second device in proximity, ideally using existing radio capabilities such as Bluetooth (IEEE802.15.1-2002) or Wi-Fi (IEEE802.11). The detected identifier, being associated with the device, is also associated with an entity. Rather than directly exchanging application data flow between the two devices using the short range wireless capability, a second wireless capability allows for one or more of the devices to communicate with a central server via the internet, and perform the exchange of application data flow. By using a central server to draw on stored information and content associated with the entities the server can broker the exchange of information between the entities and the devices.

Claims

1. A method for facilitating an exchange of information between first and second wireless devices, the method utilizing a server performing the steps of:

receiving a first unique identifier communicated over a wide area link from the first wireless device,

receiving a second unique identifier associated with the second wireless device, the second unique identifier associated with the second wireless device being communicated to the first wireless device over a local wireless link, and then from the first wireless device to the server over a wide area link,

comparing a disclosure policy associated with the second unique identifier with the first unique identifier from the first wireless device, wherein the disclosure policy specifies data representing one or more rules for privacy of information concerning communications with the second device; and

communicating further information to the first wireless device as permitted by a result of comparing the disclosure policy.

2. The method of claim 1 wherein the first and second unique identifiers are associated with a respective entity or person.

3. The method of claim 1 wherein at least one of the first or second unique identifiers further comprises one or more of

a Media Access Control (MAC) address;

a Bluetooth Device Name;

a Bluetooth Device Address (BD_ADDR)

a Service Set Identifier (SSID);

a Basic Service Set Identifier (BSSID);

or

a services list provided in a LMP_features_req message or LMP_features_req ext.

4. The method of claim 1 wherein the data in the disclosure policy specifies one or more of the following for an entity or person associated with the second device:

allow/do not allow notification of local presence;

disclose personal name/do not disclose personal name;

disclose age/do not disclose age;

or

do or do not disclose other personal details

5. The method of claim 1 wherein the data in the disclosure policy specifies disclosure of information as a function of the identifier of the first wireless device as a requesting entity.

6. The method of claim 5 wherein the identifier of the requesting entity is classified as one of

may be disclosed to any requesting entity;

a requesting entity associated must provide input;

approving the disclosure of the information;

do not disclose information to any other entity;

or

a Information Group Disclosure Policy which may consist of two or more requesting entities on a list of contacts, friends, groups, characteristics, or the like.

7. The method of claim 1 additionally comprising, before the step of receiving a second identifier:

setting data in the disclosure policy by a person associated with the second wireless device.

8. The method of claim 7 wherein the data set by the person associated with the second wireless device specifies one or more of:

they do not wish to receive any unsolicited information;

they do not wish to receive information from a broadcast;

or

they do wish to receive information from a broadcast device advertising a discount;

9. The method of claim 1 additionally comprising, before the step of communicating further information to the first wireless device;

comparing a second disclosure policy associated with the first unique identifier with the second unique identifier, wherein the second disclosure policy specifies privacy of communication for the first wireless device.

10. The method of claim 1 wherein the further information provided to the first wireless device comprises:

a priority of the second wireless device identifier;

a class the second wireless identifier belongs to;

a list the second wireless identifier is included on; and

/or

a list the second wireless identifier is not included on.

11. The method of claim 1 wherein the further information provided to the first wireless device comprises at least one of:

a visual identifier of a service;

information about an available service;

an autoplay script;

device capabilities;

a content type field specifying one or more of a picture, a media file, XML/AJAX;

or

login credentials for a social network;

payment information;

or instant message credentials

12. The method of claim 1 wherein before the step of the server receiving the first wireless identifier, the first wireless device has performed the steps of:

scanning for and receiving unique identifiers associated with two or more wireless devices associated with a merchant entity located in proximity to the first wireless device;

presenting a list of detected merchant unique identifiers to a person associated with the first wireless device; and

receiving input from the person indicating a selection of one of the wireless devices in proximity as the first unique identifier; and

sending the first unique identifier to the server.

13. The method of claim 1 additionally comprising, before the step of communicating further information to the first wireless device:

receiving a message from the first wireless device indicating a person associated with the first wireless device has performed an action indicating approval of receiving the further information.

14. The method of claim 13 additionally comprising, before the step of communicating further information to the first wireless device:

comparing each of the first and second disclosure policies with each of the first and second unique identifiers, to determine that the each of the respective communication privacy preferences specifies that communication with a wireless device associated with the other respective unique identifier is permitted.

15. The method of claim 1 additionally comprising:

notifying the first and second wireless devices of common timing reference information specifying active times and non-active times for the steps of receiving the first and second unique identifiers.

16. A server apparatus for facilitating an exchange of information between first and second wireless devices, the server comprising:

a receiver, for receiving a first unique identifier communicated over a wide area network from the first wireless device, and for receiving a second unique identifier associated with the second wireless device, the second unique identifier associated with the second wireless device haven been prior communicated to the first wireless device over a local wireless link, and then received from the first wireless device by the server over the wide area network;

a data processor, for locating a disclosure policy associated with the second unique identifier and comparing it to the first unique identifier received from the first wireless device, wherein the disclosure policy specifies data representing one or more rules for privacy of information concerning communications between the first and second device; and

a transmitter, for communicating further information to the first wireless device as permitted by the disclosure policy.

17. The apparatus of claim 16 wherein the first and second unique identifiers are associated with a respective entity or person.

18. The apparatus of claim 16 wherein at least one of the first or second unique identifiers further comprises one or more of

a Media Access Control (MAC) address;

a Bluetooth Device Name;

a Bluetooth Device Address (BD_ADDR)

a Service Set Identifier (SSID);

a Basic Service Set Identifier (BSSID);

or

a services list provided in a LMP_features_req message or LMP_features_req ext.

19. The apparatus of claim 16 wherein the data in the disclosure policy specifies one or more of the following for an entity or person associated with the second device:

allow/do not allow notification of local presence;

disclose personal name/do not disclose personal name;

disclose age/do not disclose age;

or

do or do not disclose other personal details

20. The apparatus of claim 16 wherein the data in the disclosure policy specifies disclosure of information as a function of the identifier of the first wireless device as a requesting entity.

21. The apparatus of claim 20 wherein the identifier of the requesting entity is classified as one of

may be disclosed to any requesting entity;

a requesting entity associated must provide input;

approving the disclosure of the information;

do not disclose information to any other entity;

or

a Information Group Disclosure Policy which may consist of two or more requesting entities on a list of contacts, friends, groups, characteristics, or the like.

22. The apparatus of claim 16 wherein the processor:

receives data for the disclosure policy from a person associated with the second wireless device.

23. The apparatus of claim 22 wherein the data from the person associated with the second wireless device specifies one or more of:

they do not wish to receive any unsolicited information;

they do not wish to receive information from a broadcast;

or

they do wish to receive information from a broadcast device advertising a discount;

24. The apparatus of claim 16 additionally wherein the processor further compares a second disclosure policy associated with the first unique identifier with the second unique identifier, and wherein the second disclosure policy specifies privacy of communication for the first wireless device.

25. The apparatus of claim 16 wherein the further information provided to the first wireless device comprises:

a priority of the second wireless device identifier;

a class the second wireless identifier belongs to;

a list the second wireless identifier is included on; and

/or

a list the second wireless identifier is not included on.

26. The apparatus of claim 16 wherein the further information provided to the first wireless device comprises at least one of:

a visual identifier of a service;

information about an available service;

an autoplay script;

device capabilities;

a content type field specifying one or more of a picture, a media file, XML/AJAX;

or

login credentials for a social network;

payment information;

or instant message credentials

27. The apparatus of claim 16 wherein the server receives the first wireless identifier from a first wireless device that further comprises:

a scanner for receiving unique identifiers associated with two or more wireless devices associated with a merchant entity located in proximity to the first wireless device;

a display for presenting a list of detected merchant unique identifiers to a person associated with the first wireless device;

a receiver for receiving input from the person indicating a selection of one of the wireless devices in proximity as the first unique identifier; and

a transmitter for sending the first unique identifier to the server.

28. The apparatus of claim 16 wherein the processor additionally:

receives a message from the first wireless device indicating a person associated with the first wireless device has performed an action indicating approval of receiving the further information.

29. The apparatus of claim 24 wherein the processor further compares each of the first and second disclosure policies with each of the first and second unique identifiers, to determine that the each of the respective communication privacy preferences specifies that communication with a wireless device associated with the other respective unique identifier is permitted.

30. The apparatus of claim 16 wherein the transmitter further sends, to the first and second wireless devices, common timing reference information specifying active times and non-active times for the steps of receiving the first and second unique identifiers.