SYSTEM AND METHOD FOR SELECTIVELY PROVIDING CRYPTOGRAPHIC CAPABILITIES BASED ON LOCATION

• US 20110154050A1
• Filed: 12/22/2009
• Published: 06/23/2011
• Est. Priority Date: 12/22/2009
• Status: Abandoned Application

• Current Assignee: Pitney Bowes Incorporated (Böwe Systec AG)
• Original Assignee: Pitney Bowes Incorporated (Böwe Systec AG)
• Inventors: Ryan, Frederick W. JR., Parkos, Arthur J., Cordery, Robert A.
• Application Number:
  US12/644,118
• Publication Number:
  US 20110154050A1
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

A system and method of providing cryptographic functionality includes receiving a request to perform a cryptographic operation in a mobile electronic device, determining whether the cryptographic operation is permitted to be performed by the mobile electronic device based on the current location of the mobile electronic device, and performing the cryptographic operation in the mobile electronic device only if it is determined that the cryptographic operation is permitted.

Claims

1. A method of providing cryptographic functionality using a mobile electronic device comprising:

receiving a request to perform a cryptographic operation in the mobile electronic device;

determining, by a processing device of the mobile electronic device, whether said cryptographic operation is permitted to be performed by said mobile electronic device based on a current location of said mobile electronic device; and

performing said cryptographic operation in said mobile electronic device only if it is determined that said cryptographic operation is permitted.

2. The method according to claim 1, wherein said determining comprises determining said current location in said mobile electronic device.

3. The method according to claim 2, wherein said determining said current location in said mobile electronic device comprises determining GPS coordinates of said current location in said mobile electronic device.

4. The method according to claim 3, wherein said determining GPS coordinates comprises determining said GPS coordinates using a GPS receiver provided in said mobile electronic device.

5. The method according to claim 3, wherein said determining GPS coordinates comprises receiving said GPS coordinates in said mobile electronic device from a trusted GPS source external to said mobile electronic device.

6. The method according to claim 2, wherein said determining said current location in said mobile electronic device comprises determining said current location based on triangulation by multiple mobile phone towers.

7. The method according to claim 1, wherein said requested cryptographic operation is based on a certain level of cryptography having a certain strength, wherein if it is determined that said cryptographic operation is not permitted the method further comprises performing an alternative cryptographic operation based on an alternative level of cryptography, said alternative level of cryptography have an alternative strength that is less than said certain strength.

8. The method according to claim 1, wherein said determining comprises determining a round trip communications time between said mobile electronic device and an encryption controller device and determining that said cryptographic operation is permitted to be performed only if said round trip communications time is less than or equal to a threshold level.

9. The method according to claim 1, wherein determining whether said cryptographic operation is permitted to be performed by said mobile electronic device based on a current location of said mobile electronic device comprises determining whether said current location is within a predetermined boundary.

10. A mobile electronic device providing cryptographic functionality, comprising:

a processing unit;

a location determining module operatively coupled to said processing unit, said location determining module being structured to determine a current location of said mobile electronic device; and

a cryptographic module;

wherein said processing unit is adapted to receive a request to perform a cryptographic operation and determine whether said cryptographic operation is permitted to be performed based on said current location, and wherein said cryptographic module will perform said cryptographic operation only if it is determined that said cryptographic operation is permitted.

11. The mobile electronic device according to claim 10, wherein said cryptographic module is part of said processing unit.

12. The mobile electronic device according to claim 10, wherein said cryptographic module is part of a cryptographic coprocessor separate from and operatively coupled to said processing unit.

13. The mobile electronic device according to claim 10, wherein said location determining module comprises a GPS receiver.

14. The mobile electronic device according to claim 10, wherein said location determining module comprises a mobile phone receiver/transmitter module.

15. The mobile electronic device according to claim 10, wherein said requested cryptographic operation is based on a certain level of cryptography having a certain strength, wherein if it is determined that said cryptographic operation is not permitted said cryptographic module will perform an alternative cryptographic operation based on an alternative level of cryptography, said alternative level of cryptography have an alternative strength that is less than said certain strength.

16. A system for providing cryptographic functionality, comprising:

an encryption controller device operatively coupled to a network; and

a mobile cryptography device operatively coupled to a network, said mobile cryptography device including;

a cryptographic module; and

a processing unit, wherein said processing unit is adapted to receive a request to perform a cryptographic operation, determine a round trip communications time between said mobile cryptography device and said encryption controller device through said network, and determine that said cryptographic operation is permitted to be performed only if said round trip communications time is less than or equal to a threshold level, and wherein said cryptographic module will perform said cryptographic operation only if it is determined that said cryptographic operation is permitted.

17. The system according to claim 16, wherein said requested cryptographic operation is based on a certain level of cryptography having a certain strength, wherein if it is determined that said cryptographic operation is not permitted said cryptographic module will perform an alternative cryptographic operation based on an alternative level of cryptography, said alternative level of cryptography have an alternative strength that is less than said certain strength.