AUTHENTICATING A MOBILE DEVICE BASED ON GEOLOCATION AND USER CREDENTIAL

• US 20110252464A1
• Filed: 04/12/2010
• Published: 10/13/2011
• Est. Priority Date: 04/12/2010
• Status: Active Grant

• Current Assignee: Cellco Partnership, Inc. (Verizon Communications Inc.)
• Original Assignee: Cellco Partnership, Inc. (Verizon Communications Inc.)
• Inventors: SANJEEV, Kumar
• Granted Patent: US 8,839,453 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/64 using geofenced areas

Abstract

Mobile devices provide security based on geographic location. With such a technique, a mobile device may automatically check its current location against geographic information as to the location(s) in which it is permitted to operate. When the user attempts access to the device, the mobile device will prompt the user for his/her credential only if the geographic location matches an allowed location. The user gains access then by inputting information corresponding to the credential, e.g. username and password, of a valid user. In the examples, if the geographic location does not match an allowed location, the mobile device provides a warning to the user, and the user is not allowed to enter any credential information. Optionally, the mobile device may send an alert message about the device being taken outside a specified boundary, e.g. to report the situation to other personnel.

Claims

1. A method of authenticating a user to operate a mobile device, comprising steps of:

(a) the mobile device determining its geographic location;

(b) comparing the determined geographic location to information defining one or more locations of permitted operation of the mobile device, stored in the mobile device, to determine whether or not the mobile device is at a location of permitted operation;

(c) only upon determining that the mobile device is at a location of permitted operation, the mobile device generating a prompt to the user to enter credential information into the mobile device;

(d) receiving input of credential information into the mobile device from the user; and

(e) permitting user access to operate the mobile device only upon a match of the input credential information to credential information of a valid user, stored in the mobile device.

2. The method of claim 1, further comprising steps of:

(f) repeating steps (a) and (b) at a different location of the mobile device;

(g) upon determining that the mobile device is not at a location of permitted operation, the mobile device blocking user access to operate the mobile device.

3. The method of claim 2, wherein step (g) comprises generating a warning for the user that the mobile device is not at a location of permitted operation, instead of generating the prompt to the user to enter credential information.

4. The method of claim 2, wherein step (g) comprises interrupting any operation of the mobile device by the user started prior to the determination that the mobile device is not at a location of permitted operation.

5. The method of claim 2, further comprising sending a message from the mobile device to an enterprise associated with the mobile device advising the enterprise that the mobile device is not at a location of permitted operation.

6. The method of claim 2, further comprising:

receiving programming and/or information defining one or more locations of permitted operation of the mobile device; and

storing the received programming and/or information in the mobile device, to configure the mobile device to perform steps (a) through (g).

7. The method of claim 6, wherein the receiving step comprises receiving the programming and/or information in the mobile device via a wireless network communication.

8. The method of claim 1, further comprising:

receiving programming and/or information defining one or more locations of permitted operation of the mobile device; and

storing the received programming and/or information in the mobile device, to configure the mobile device to perform steps (a) through (e).

9. The method of claim 8, wherein the receiving step comprises receiving the programming and/or information in the mobile device via a wireless network communication.

10. A mobile device, comprising:

a user interface for outputting information to a user of the mobile device and for receiving inputs from the mobile device user;

a programmable processor coupled to the user interface;

at least one storage device accessible by the processor, for storing programming for execution by the processor and data for processing by the processor, wherein at least some of the programming configures the processor to enable the mobile device to perform functions for authenticating the user to operate the mobile device, comprising functions to;

(a) determine geographic location of the mobile device;

(b) compare the determined geographic location to information defining one or more locations of permitted operation of the mobile device, stored in the at least one storage device, to determine whether or not the mobile device is at a location of permitted operation;

(c) only upon determining that the mobile device is at a location of permitted operation, generate a prompt via the user interface to the user prompting the user to enter credential information;

(d) receive input of credential information from the user via the user interface; and

(e) permit user access to operate the mobile device only upon a match of the input credential information to credential information of a valid user, stored in the at least one storage device.

11. The mobile device of claim 10, wherein the at least some of the programming configures the processor to enable the mobile device to perform further functions to:

(f) repeat functions (a) and (b) at a different location of the mobile device;

(g) upon determining that the mobile device is not at a location of permitted operation, block user access to operate the mobile device.

12. The mobile device of claim 11, wherein the function (g) comprises generating a warning for the user that the mobile device is not at a location of permitted operation, via the user interface, instead of generating the prompt to the user to enter credential information.

13. The mobile device of claim 11, wherein the function (g) comprises interrupting any operation of the mobile device by the user started prior to the determination that the mobile device is not at a location of permitted operation.

14. The mobile device of claim 10, further comprising:

a transceiver for communication via a wireless network, controlled by the processor,

wherein at least some of the programming configures the processor to enable the mobile device to perform further functions to;

receive programming and/or information defining one or more locations of permitted operation of the mobile device; and

store the received programming and/or information in the at least one storage device, to configure the mobile device to perform functions (a) through (e).

15. An article of manufacture, comprising:

a machine readable storage medium; and

programming stored on the medium for execution by a programmable processor of a mobile device, wherein execution of the programming configures the processor to enable the mobile device to perform functions for authenticating a user to operate the mobile device, comprising functions to;

(a) determine geographic location of the mobile device;

(b) compare the determined geographic location to information defining one or more locations of permitted operation of the mobile device, stored in at least one storage of the mobile device, to determine whether or not the mobile device is at a location of permitted operation;

(c) only upon determining that the mobile device is at a location of permitted operation, generate a prompt via the user interface to the user prompting the user to enter credential information;

(d) receive input of credential information from the user via a user interface of the mobile device; and

(e) permit user access to operate the mobile device only upon a match of the input credential information to credential information of a valid user, stored in the at least one storage.

16. The article of claim 15, wherein the at least some of the programming configures the processor to enable the mobile device to perform further functions to:

(f) repeat functions (a) and (b) at a different location of the mobile device;

(g) upon determining that the mobile device is not at a location of permitted operation, block user access to operate the mobile device.

17. The article of claim 16, wherein the function (g) comprises generating a warning for the user that the mobile device is not at a location of permitted operation, via the user device, instead of generating the prompt to the user to enter credential information.

18. The article of claim 16, wherein the function (g) comprises interrupting any operation of the mobile device by the user started prior to the determination that the mobile device is not at a location of permitted operation.

19. The article of claim 15, wherein at least some of the programming configures the processor to enable the mobile device to perform further functions to:

receive programming and/or information defining one or more locations of permitted operation of the mobile device, via a transceiver of the mobile device for communication via a wireless network; and

store the received programming and/or information in the at least one storage device, to configure the mobile device to perform functions (a) through (e).