LOCATION CONTROL SERVICE

• US 20120117209A1
• Filed: 11/10/2010
• Published: 05/10/2012
• Est. Priority Date: 11/10/2010
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Sinha, Suyash
• Granted Patent: US 8,560,648 B2
• Time in Patent Office: Days
• US Class Current: 709/221
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06F 2221/2151 Time stamp

Abstract

In embodiments of a location control service, location data that identifies the location of a device is stored in a memory module, such as secured non-volatile memory or a storage module, of the device along with a timestamp that correlates to local time at the location of the device. A determination is then made as to whether the location of the device has changed. Functionality of the device can be disabled, and access to data stored on the device restricted, when determining that a change in location of the device was not authorized. Alternatively, the location data can be updated to identify a new location of the device when determining that a change in location of the device was authorized.

Claims

1. A computer-implemented method, comprising:

storing a timestamp that correlates to local time at a location of a device, the timestamp stored in a memory module of the device;

storing location data that identifies the location of the device, the location data stored in the memory module of the device;

determining whether the location of the device has changed; and

disabling device functionality responsive to a determination that a change in location of the device was not authorized.

2. A computer-implemented method as recited in claim 1, further comprising:

requesting a service authorization from a network-based service that indicates the change in location of the device was authorized; and

updating the location data that identifies a new location of the device responsive to receiving the service authorization.

3. A computer-implemented method as recited in claim 1, further comprising:

requesting peer verification from one or more peer devices that indicates the change in location of the device was authorized, the one or more peer devices communicatively linked to the device for data communication; and

updating the location data that identifies a new location of the device responsive to receiving the peer verification.

4. A computer-implemented method as recited in claim 1, further comprising:

comparing a key-code input to the device with a stored key-code to validate the change in location of the device; and

updating the location data that identifies a new location of the device responsive to validating the key code.

5. A computer-implemented method as recited in claim 1, further comprising timing-out the device after a designated duration responsive to the determination that the change in location of the device was not authorized.

6. A computer-implemented method as recited in claim 1, further comprising restricting access to data stored on the device when said disabling the device functionality.

7. A computer-implemented method as recited in claim 1, further comprising initiating said determining whether the location of the device has changed periodically based on a time duration.

8. A computer-implemented method as recited in claim 1, wherein the location data comprises at least one of GPS location data or regional position data that correlates to the location of the device.

9. A computer-implemented method as recited in claim 1, wherein the timestamp and the location data are stored in a Trusted Platform Module (TPM) that securely maintains the timestamp and the location data.

10. A device, comprising:

a memory module configured to store a timestamp that correlates to local time at a location of the device, and location data that identifies the location of the device;

a processor and memory to implement a location control service configured to;

determine whether the location of the device has changed; and

disable device functionality and restrict access to data stored on the device responsive to a determination that a change in location of the device was not authorized;

or

update the location data that identifies a new location of the device responsive to a determination that the change in location of the device was authorized.

11. A device as recited in claim 10, wherein the location control service is further configured to request a service authorization from a network-based service that indicates the change in location of the device was authorized.

12. A device as recited in claim 10, wherein the location control service is further configured to request peer verification from one or more peer devices that indicates the change in location of the device was authorized, the one or more peer devices communicatively linked to the device for data communication.

13. A device as recited in claim 10, wherein the location control service is further configured to compare a key-code input to the device with a stored key-code to validate the change in location of the device.

14. A device as recited in claim 10, wherein the location control service is further configured to time-out the device after a designated duration responsive to a determination that the change in location of the device was not authorized.

15. A device as recited in claim 10, wherein the location data comprises at least one of GPS location data or regional position data that correlates to the location of the device.

16. A device as recited in claim 10, wherein the memory module comprises a Trusted Platform Module (TPM) that securely maintains the timestamp and the location data.

17. A networked system, comprising:

peer devices communicatively linked for data communication;

a peer device that implements a location control service configured to;

determine whether a location of the peer device has changed; and

update location data that identifies a new location of the peer device responsive to a determination that a change in location of the device was authorized.

18. A system as recited in claim 17, wherein the location control service is further configured to disable device functionality and restrict access to data stored on the peer device responsive to a determination that a change in location of the peer device was not authorized.

19. A system as recited in claim 17, wherein the location control service is further configured to at least one of:

request a service authorization from a network-based service that indicates the change in location of the peer device was authorized;

request peer verification from one or more of the peer devices that indicates the change in location of the peer device was authorized;

or

compare a key-code input to the peer device with a stored key-code to validate the change in location of the peer device.

20. A system as recited in claim 17, wherein the location control service is further configured to time-out the peer device after a designated duration responsive to a determination that the change in location of the device was not authorized.