Method and System For Object Access and Usage Control Using Location and Access Boundary Shape Information

• US 20140082369A1
• Filed: 09/20/2012
• Published: 03/20/2014
• Est. Priority Date: 09/20/2012
• Status: Abandoned Application

• Current Assignee: Futurewei Technologies Incorporated (Huawei Investment & Holding Co., Ltd.), Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Futurewei Technologies Incorporated (Huawei Investment & Holding Co., Ltd.)
• Inventors: Waclawsky, John, Le, Zhengyi
• Application Number:
  US13/623,457
• Publication Number:
  US 20140082369A1
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS

Abstract

A method and a system for shape based encrypted object usage control using a querying device includes receiving location coordinates information and requesting an access to the encrypted object based on the received location coordinates information. The granting or denying access to the object is based on a determination of whether the received location coordinates information lies within at least one spatial access boundary. The at least one spatial access boundary is defined by an arbitrary physical object shape with at least two dimensional (2D) physical measurements in direct reference to designated location coordinates information. The received location coordinates information and the designated location coordinates information each includes longitude, latitude and optionally elevation values which provide the ability to identifying a specific location in a 3D space.

Claims

1. A method for controlling access to an object by a querying device having at least one processor coupled to a memory, the at least one processor performing:

receiving location coordinates information of the querying device;

requesting an access to the object in accordance to the received location coordinates information;

granting or denying access to the object based on a determination of whether the received location coordinates information lies within at least one spatial access boundary, wherein;

the at least one spatial access boundary is defined by an arbitrary physical object shape with at least two dimensional (2D) physical measurements, wherein the at least 2D physical measurements are in direct reference to designated location coordinates information, wherein the received location coordinates information and the designated location coordinates information each comprises longitude, latitude and elevation values; and

restricting access according to frequency of access to the object.

2. The method according to claim 1, wherein the arbitrary physical object shape is generated using one or more mathematical models or from actual measurements.

3. The method according to claim 1, wherein the arbitrary physical object shape is three dimensional (3D).

4. The method according to claim 1, wherein the object is associated with an encryption key, and the determination comprising matching a decryption key to the encryption key, and wherein the decryption key is generated from entering into the querying device, one or more of:

a randomly generated number, a device identification (device ID), device type, a WiFi access point service set identifier (SSID), equipment ID number (EIN), an RFID tag code, network IP address, device IP address, magnetic codes, graphic image data, image pattern data, optical scan codes, or user'"'"'s biometric data.

5. The method according to claim 1, wherein the querying device is a mobile wireless communication device, a smart phone, a personal digital assistant (PDA) device, a communication tablet device, a laptop computing device or a communication device connected to a network.

6. The method according to claim 1, wherein the at least one spatial access boundary is defined by specifying a predetermined radius distance originated from the designated location coordinates information.

7. The method according to claim 1, wherein the at least one spatial access boundary is defined by truncating any one of the coordinates of the designated location coordinates information.

8. The method according to claim 1, further comprising restricting access according to time duration, wherein the time duration comprises at least one of:

start and end dates, start and end time of a day, or time lapse between accesses of the object.

9. The method according to claim 1, wherein the at least one spatial access boundary comprises multiple discrete spatial access boundaries, wherein each of the multiple discrete spatial access boundaries references to the designated location coordinates information and wherein the granting or denying access to the object is based on determining whether the received location coordinates information lies within a corresponding one of the multiple discrete spatial access boundaries.

10. The method according to claim 1, wherein the object comprises at least one of:

an electronic document, an executable file, executable codes, multi-media content, a storage, a database, a network device, a machine, an appliance, a processor or an equipment.

11. A device for controlling access to an object, the device comprises:

a querying circuit having at least one processor coupled to a first memory, wherein the at least one processor is configured to;

receive location coordinates information;

receive a request for access to an object based on the received location coordinates information;

grant or deny access to the object based on a determination of whether the received location coordinates information lies within at least one spatial access boundary, wherein;

the at least one spatial access boundary is defined by an arbitrary physical object shape with at least two dimensional (2D) physical measurements in direct reference to designated location coordinates information, and wherein the received location coordinates information and the designated location coordinates information each comprises longitude, latitude and elevation values; and

restrict access according to frequency of access to the object.

12. The device according to claim 11, wherein the arbitrary physical object shape is generated using one or more mathematical models or from actual measurements.

13. The method according to claim 11, wherein the arbitrary physical object shape is three dimensional (3D).

14. The device according to claim 11, wherein the object is associated with an encryption key, and the determination comprising matching a decryption key to the encryption key, and wherein the decryption key is generated from entering into the querying device, one or more of:

a randomly generated number, a device identification (device ID), device type, a WiFi access point service set identifier (SSID), equipment ID number (EIN), an RFID tag code, network IP address, device IP address, magnetic codes, graphic image data, image pattern data, optical scan codes, or user'"'"'s biometric data.

15. The device according to claim 11, wherein the device is a mobile wireless communication device, a smart phone, a personal digital assistant (PDA) device, a communication tablet device, a laptop computing device or a communication device connected to a network.

16. The device according to claim 11, wherein the at least one spatial access boundary is defined by specifying a predetermined radius distance originated from the designated location coordinates information.

17. The device according to claim 11, wherein the at least one spatial access boundary is defined by truncating at any one of the coordinates of the designated location coordinates information.

18. The device according to claim 11, wherein the at least one processor is configured to restrict access according to time duration, wherein the time duration comprises at least one of:

start and end dates, start and end time of a day, or time lapse between accesses of the object.

19. The device according to claim 11, wherein the at least one spatial access boundary comprises multiple discrete spatial access boundaries, wherein each of the multiple discrete spatial access boundaries references to the designated location coordinates information and wherein the granting or denying access to the object is based on determining whether the received location coordinates information lies within a corresponding one of the multiple discrete spatial access boundaries.

20. The device according to claim 11, wherein the object comprises at least one of:

an electronic document, an executable file, executable codes, multi-media content, a storage, a database, a network device, a machine, an appliance, a processor or an equipment.

21. A method for generating an encryption key for an object by at least one processor coupled to a first memory, the at least one processor performing:

receiving designated global positioning system (GPS) location coordinates;

receiving at least one spatial access boundary information, wherein;

the at least one spatial access boundary information is defined by an arbitrary physical object shape with at least two dimensional (2D) physical measurements in direct reference to the designated GPS location coordinates, and wherein the designated GPS location coordinates comprises longitude, latitude and elevation values;

receiving a time coordinate comprising frequency of access to the object;

generating the encryption key utilizing at least the designated GPS location coordinates, the time coordinate and the at least one spatial access boundary information;

storing the encryption key in a secured memory; and

associating the encryption key to an object, wherein the object is stored in a second memory.

22. The method according to claim 21, wherein the arbitrary physical object shape is generated using one or more mathematical models or from actual measurements.

23. The method according to claim 21, wherein the arbitrary physical object shape is three dimensional (3D).

24. The method according to claim 21, wherein the at least one spatial access boundary comprises multiple discrete spatial access boundaries, wherein each of the multiple discrete spatial access boundaries references to the designated location coordinates information, and wherein the generating of the encryption key comprising:

generating a plurality of encryption group key sets as group member decryption keys, wherein each group member decryption key is associated to a corresponding one of the multiple discrete spatial access boundaries.