System and Method To Enhance Personal Server Security Using Personal Server Owner's Location Data

• US 20150074775A1
• Filed: 09/04/2014
• Published: 03/12/2015
• Est. Priority Date: 09/06/2013
• Status: Abandoned Application

• Current Assignee: Nambiar, Pradeep
• Original Assignee: Nambiar, Pradeep
• Inventors: Nambiar, Pradeep
• Application Number:
  US14/476,763
• Publication Number:
  US 20150074775A1
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 67/025 for remote control or remote monitoring of applications
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed

Abstract

A system and method to enhance Personal Server Security using Personal Server owner'"'"'s location data as derived from the Personal Server owner'"'"'s mobile client computer by controlling certain aspects of the Personal Server security application and Personal Server applications for example automatically or manually disabling access to certain Personal Server applications from the Wide Area Network (Internet) based on if the Personal Server owner is at the home premises and therefore can access the Personal Server from within the trusted Local Area Network and at other times selectively enabling access to certain Personal Server applications from the Wide Area Network when the Personal Server owner is away from the home premises and the only means of accessing such application while away from the premises is via the Wide Area Network.

Claims

1. A system to enhance personal server security using geo location data of the personal server owner;

comprising of one or more mobile client computer, security client application, security client key and certificate, wide area network, domain name service, internet modem with external IP address, one or more personal server computer, internal IP address, network router, local area network, personal server security application, personal server security application key and one or more personal server application.

2. A system as claimed in 1, wherein the mobile client computer is owned by the same user who owns the personal server or users authorized by the owner of the personal server.

3. A system as claimed in 1, wherein the personal server computer is housed at the premises of the personal server owner'"'"'s home or office and is connected to the local area network at premises and also to the wide area network that provides access to personal server when personal server owner is outside the premises.

4. A system as claimed in 1, wherein the mobile client computer is capable of connecting to the personal server computer system via the wide area network or via the local area network.

5. A system as claimed in 1, wherein the personal server that contains processor, memory, one or more input/output (I/O) controller, one or more mass storage device for storing program code instructions for the personal server operating system, applications, system and personal data;

one or more networking interface, a system bus that connects the various components and facilitates data transfer and control;

one or more personal server software application to manage and configure personal server for backup, restore, secure data exchange, mail server, web server, data sharing, authorized peer server sharing, authentication and authorization, creation of scheduled tasks, monitor and respond to external device events and notifications.

6. A system as claimed in 1, wherein the system component personal server connects to the local area network and the wide area network also called internet through its network interface or wireless network interface.

7. A system as claimed in 1, wherein the mobile client computer contains processor, memory, one or more input and output controller, one or more mass storage device for storing program code instructions for the mobile client computer operating system, one or more network interface, a system bus that connects the various components and facilitates data transfer and control;

a global positioning system to obtain location data of the mobile client computer or capability to determine location of the mobile client computer through other means, a display device, one or more input device for interfacing with the mobile client computer.

8. A system as claimed in 1, wherein a domain name service capable routing requests by resolving the external name and domain name of the personal server to the external IP address in the wide area network that relates to the premises where personal server is physically located and that is routable to the internal IP address of the personal server using the network router.

9. A system as claimed in 1, wherein the network router is capable of routing requests to the personal server by resolving the internal IP address or local name of the personal server.

10. A method for the personal server security client application running on the mobile client computer for sending location data and associated commands automatically and continuously to the personal server by authenticating to the personal server using the security certificate stored on the mobile client device to prove the authenticity of the mobile client computer.

11. A method as claimed in 10, wherein additional commands can be included with the location data sent to the personal server security application to control additional aspects of the personal server security application and personal server application to provide additional personalized location based services to the personal server owner.

12. A method for the personal server security client application running on the mobile client computer for sending location data and associated commands on demand to the personal server by authenticating to the personal server using the security certificate stored on the mobile client device to prove the authenticity of the mobile client computer.

13. A method for the personal server security application running on the personal server computer to accept authentication request from the mobile client computer and to process associated command to enable and disable access from wide area network or accept manual override command from the mobile client computer to selectively enable and disable access to personal server application from wide area network.

14. A method as claimed in 13, wherein additional commands received can be used to control additional aspects of the personal server security application and personal server applications to provide additional location based services to the personal server owner.

15. A method to setup and configure the personal server security application and also the personal server security client application by generating client and server security key pair and downloading to the security client application which is used to authenticate to the personal server security application when sending location data and associated commands to the personal server security application.