TECHNIQUES FOR DYNAMIC ENPOINT SECURE LOCATION AWARENESS

• US 20130283345A1
• Filed: 09/28/2011
• Published: 10/24/2013
• Est. Priority Date: 09/28/2011
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Kahana, Uri
• Granted Patent: US 9,825,968 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G01S 5/0205 Details
• CPC Class Codes: G06F 15/16 Combinations of two or more digital computers each having at least an arithmetic unit, a program unit and a register, e.g. for a simultaneous processing of several programs coordinating program control therefor G06F9/52; in regulating and control system G05B
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 9/44 Arrangements for executing specific programs
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 64/00 Locating users or terminals or network equipment for network management purposes, e.g. mobility management

Abstract

Techniques for dynamic endpoint secure location awareness may include dynamically sending a location query in response to a change in location for a mobile device. A location response may be received. The platform security engine may determine whether the mobile device is located in a secure location based on the location response. Other embodiments are described and claimed.

Claims

1. An article of manufacture comprising a storage medium containing instructions that when executed enable a system to:

dynamically send a location query in response to a change in location for a mobile device;

receive a location response; and

determine, by a platform security engine, whether the mobile device is located in a secure location based on the location response.

2. The article of claim 1, comprising instructions that when executed enable the system to:

receive an event trigger indicating that the mobile device changed locations.

3. The article of claim 1, comprising instructions that when executed enable the system to:

receive, by the platform security engine, a policy query from a security component via an application programming interface.

4. The article of claim 1, comprising instructions that when executed enable the system to:

send, by the platform security engine, a policy indication to a security component stating whether the mobile device is located in a secure location.

5. The article of claim 1, comprising instructions that when executed enable the system to:

set, by a security component, a security policy based on a policy indication from the platform security engine.

6. The article of claim 1, comprising instructions that when executed enable the system to

establish secure communication by sending a fully qualified domain name from the platform security engine.

7. The article of claim 1, comprising instructions that when executed enable the system to:

receive the location response from an independent service vendor server.

8. The article of claim 1, comprising instructions that when executed enable the system to:

receive the location response from a cloud computing server.

9. The article of claim 1, comprising instructions that when executed enable the system to:

establish secure communication by authenticating with asymmetric Rivest, Shamir Adleman keys.

10. The article of claim 1, comprising instructions that if executed enable the system to:

receive the location response indicating that the mobile device is on a private network; and

determine that the mobile device is located in a secure location based on the location response.

11. The article of claim 1, comprising instructions that if executed enable the system to:

receive the location response indicating that the mobile device is on a public network; and

determine that the mobile device is located in a non-secure location based on the location response.

12. A method, comprising:

dynamically send a location query in response to a change in location for a mobile device;

receive a location response; and

determine, by a platform security engine, whether the mobile device is located in a secure location based on the location response.

13. The method of claim 12, comprising:

setting a security policy based on whether the mobile device is located in a secure location.

14. The method of claim 12, comprising:

sending a policy indication via an application programming interface to a security component.

15. The method of claim 12, comprising:

receiving the location response from an enterprise server.

16. The method of claim 12, comprising:

receiving the location response from a cloud computing server.

17. The method of claim 12, comprising:

establishing secure communication by sending a fully qualified domain name from the platform security engine.

18. The method of claim 12, comprising:

establishing secure communication by authenticating with asymmetric Rivest, Shamir Adleman keys.

19. The method of claim 12, comprising:

receiving the location response indicating that the mobile device is on a private network; and

determining that the mobile device is located in a secure location based on the location response.

20. The method of claim 12, comprising:

receiving the location response indicating that the mobile device is on a public network; and

determining that the mobile device is located in a non-secure location based on the location response.

21. A mobile device, comprising:

a processing circuit; and

a platform security engine operative on the processing circuit to;

dynamically send a location query in response to a change in location for a mobile device,

receive a location response, and

determine whether the mobile device is located in a secure location based on the location response.

22. The mobile device of claim 21, the location response comprising information indicating that the mobile device is on a private network.

23. The mobile device of claim 21, the location response comprising information indicating that the mobile device is on a public network.

24. The mobile device of claim 21, comprising:

a touch screen device.

25. The mobile device of claim 21, comprising:

a security component operative on the processing circuit to;

send a policy query to the platform security engine,

receive a policy indication stating whether the mobile device is located in a secure location, and

set a security policy for the mobile device based on the policy indication.

26. The mobile device of claim 21, comprising:

a communications component operative on the processing circuit to communicate with a server.

27. The mobile device of claim 26, the communications component comprising:

a radio-frequency transceiver to communicate electromagnetic signals representing information.

28. The mobile device of claim 26, the communications component comprising:

a network interface card to notify the platform security engine when the mobile device changed locations.