SYSTEM, METHOD, AND APPARATUS FOR PROXIMITY-BASED AUTHENTICATION FOR MANAGING PERSONAL DATA

• US 20120178419A1
• Filed: 03/12/2012
• Published: 07/12/2012
• Est. Priority Date: 06/16/2009
• Status: Active Grant

• Current Assignee: HCL Technologies Limited
• Original Assignee: International Business Machines Corporation
• Inventors: Facemire, Michael D., Jania, Frank L., Rankin, Tracy L., Wanderski, Michael
• Granted Patent: US 8,693,990 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 4/023 using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds

Abstract

A computer program product that includes a computer useable storage medium to store a computer readable program for proximity-based authentication for managing personal data that, when executed on a computer, causes the computer to perform operations. The operations include receiving a request for personal data from a data access device, determining a first location corresponding to a location of the data access device, and determining a second location corresponding to a location of an authentication device. The operations also include transmitting the personal data to the data access device if the first location is within a threshold distance of the second location.

Claims

1. A computer implemented method for proximity-based authentication for managing personal data, the method comprising:

receiving a request for personal data from a data access device;

accessing a data access device database associating the data access device with a first location corresponding to a location of the data access device;

receiving second location data indicating a second location corresponding to a location of an authentication device; and

transmitting the personal data to the data access device in response to determining that the first location is within a threshold distance of the second location.

2. The computer implemented method of claim 1, further comprising transmitting a subset of the personal data in response to determining that the first location is within a second threshold distance of the second location.

3. The computer implemented method of claim 1, wherein the request for personal data from the data access device comprises the second location data.

4. The computer implemented method of claim 1, wherein the second location data is received from the authentication device.