System and method for using location identity to control access to digital information

• US 6,985,588 B1
• Filed: 10/30/2000
• Issued: 01/10/2006
• Est. Priority Date: 10/30/2000
• Status: Expired due to Term

• Current Assignee: Longbeam Technologies LLC (IP Edge LLC)
• Original Assignee: Geocodex LLC
• Inventors: Glick, Barry J., Karpf, Ronald S., Seiler, Mark E.
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): KIM, JUNG W
• Application Number:
  US09/699,832
• Time in Patent Office: 1,898 Days
• Field of Search: 705/51, 711/163, 380/258, 380/264, 713/163, 713/201
• US Class Current: 380/258
• CPC Class Codes: G06F 21/1013 to locations
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00

Abstract

A method and apparatus for controlling access to digital information utilizes a location identity attribute that defines a specific geographic location. The location identity attribute is associated with the digital information such that the digital information can be accessed only at the specific geographic location. The location identity attribute further includes a location value and a proximity value. The location value corresponds to a location of an intended recipient appliance of the digital information, and may be further defined in terms of latitude, longitude and altitude dimensions. The location identity attribute is enforced by allowing access to the digital information only at the specific geographic location. As a first part of this enforcement process, the location of an appliance through which access to the digital information is sought is identified. The appliance location is then compared to the specific geographic location defined by the location identity attribute, and access to the digital information is allowed only if the appliance location falls within the specific geographic location. There are many ways to identify the location of the appliance, including: (1) resolving the appliance location from a street address for the appliance; (2) retrieving the appliance location from a file stored within the appliance; (3) recovering the appliance location from a GPS receiver embedded in the appliance; and (4) recovering the appliance location by triangulating RF signals received by the appliance.

Claims

1. A system for controlling access to digital information, comprising:

a first information processing device adapted to process digital information for access only at a specific geographic location, the first information processing device including a processor having suitable memory adapted to store software instructions operable to cause said processor to perform the functions of;

retrieving a location value that identifies a specific geographic location at which access to digital information is authorized;

generating an area parameter defining a shape of the specific geographic location without identifying the specific geographic location;

combining the location value and the area parameter to provide a first location identity key;

encrypting the digital information using the first location identity key;

sending the area parameter and the encrypted digital information; and

a second information processing device adapted to access the encrypted digital information, the second information processing device including a processor having suitable memory adapted to store software instructions operable to cause said processor to perform the functions of;

receiving the area parameter and the encrypted digital information;

determining a current location of the second information processing device;

combining the current location and the area parameter to generate a second location identity key; and

decrypting the digital information using the second location identity key.

2. The system of claim 1, wherein the retrieving function performed by the first information processing device further comprises retrieving a proximity value defining a zone that encompasses the specific geographic location.

3. The system of claim 2, wherein the zone comprises at least one of a rectangular region, a polygonal region, a circular region, and an elliptical region.

4. The system of claim 2, wherein the zone comprises at least one of a postal zip code, a state, a city, a county, a telephone area code, and a country.

5. The system of claim 1, wherein the retrieving function performed by the first information processing device further comprises retrieving a temporal value.

6. The system of claim 1, wherein the location value further defines latitude and longitude measurements for the specific geographic location.

7. The system of claim 1, wherein the location value further defines an altitude measurement for the specific geographic location.

8. The system of claim 1, wherein the location determining function performed by the second information processing device further comprises resolving the location from a street address for the second information processing device.

9. The system of claim 1, wherein the location determining function performed by the second information processing device further comprises retrieving the location from a file stored within the memory of the second information processing device.

10. The system of claim 1, wherein the second information processing device further comprises a GPS receiver, and wherein the location determining function performed by the second information processing device further comprises recovering the location from the GPS receiver.

11. The system of claim 1, wherein the location determining function performed by the second information processing device further comprises recovering the location by triangulating RF signals received by the second information processing device.

12. The system of claim 1, wherein the second information processing device further performs the function of allowing access to the digital information by a software application only at the specific geographic location.

13. The system of claim 1, wherein the second information processing device further performs the function of allowing retrieval of the digital information from the memory only at the specific geographic location.

14. The system of claim 1, wherein the second information processing device further performs the function of allowing visual display of the digital information only at the specific geographic location.

15. The system of claim 1, wherein the first information processing device further performs the function of appending the area parameter to the encrypted digital information.

16. The system of claim 15, wherein the receiving function performed by the second information processing device further comprises recovering the appended area parameter.

17. The system of claim 1, wherein the receiving function performed by the second information processing device further comprises receiving the area parameter and encrypted digital information from the first information processing device.

18. The system of claim 1, wherein the first information processing device further performs the function of communicating the area parameter and the encrypted digital information to the second information processing device.

19. An information processing device, comprising:

a processor having suitable memory adapted to store software instructions operable to cause the processor to perform the functions of;

retrieving a location value that identifies a specific geographic location at which access to digital information is authorized;

generating an area parameter defining a shape of the specific geographic location without identifying the specific geographic location;

combining the location value and the area parameter to provide a first location identity key;

encrypting the digital information using the first location identity key; and

sending the area parameter and the encrypted digital information to a recipient device, wherein the encrypted digital information can only be decrypted by the recipient device located at the specific geographic location and having access to the area parameter.

20. The information processing device of claim 19, wherein the retrieving function further comprises retrieving a proximity value defining a zone that encompasses the specific geographic location.

21. The information processing device of claim 20, wherein the zone comprises at least one of a rectangular region, a polygonal region, a circular region, and an elliptical region.

22. The information processing device of claim 20, wherein the zone comprises at least one of a postal zip code, a state, a city, a county, a telephone area code, and a country.

23. The information processing device of claim 19, wherein the retrieving function further comprises retrieving a temporal value.

24. The information processing device of claim 19, wherein the location value further defines latitude and longitude measurements for the specific geographic location.

25. The information processing device of claim 19, wherein the processor further performs the function of communicating the encrypted digital information to a recipient device.

26. The information processing device of claim 25, wherein the processor further performs the function of appending the area parameter to the encrypted digital information prior to performing the communicating function.

27. The information processing device of claim 19, wherein the processor further performs the function of storing the encrypted digital information on a suitable storage medium.

28. An information processing device, comprising:

a processor having suitable memory adapted to store software instructions operable to cause the processor to perform the functions of;

receiving digital information that has been encrypted using a location identity key comprising a location value defining a specific geographic location combined with an area parameter defining a shape of the specific geographic location without identifying the specific geographic location;

receiving the area parameter;

determining a current location of the information processing device;

combining the current location and the area parameter to generate a second location identity key; and

decrypting the digital information using the second location identity key, wherein the digital information can only be decrypted if the information processing device is located at the specific geographic location.

29. The information processing device of claim 28, wherein the location value further defines latitude and longitude measurements for the specific geographic location.

30. The information processing device of claim 28, wherein the location value further defines an altitude measurement for the specific geographic location.

31. The information processing device of claim 28, wherein the location determining function further comprises resolving the location from a street address for the information processing device.

32. The information processing device of claim 28, wherein the location determining function further comprises retrieving the location from a file stored within the memory of the information processing device.

33. The information processing device of claim 28, further comprising a GPS receiver, and wherein the location determining function further comprises recovering the location from the GPS receiver.

34. The information processing device of claim 28, wherein the location determining function further comprises recovering the location by triangulating RF signals received by the information processing device.

35. The information processing device of claim 28, wherein the processor further performs the function of allowing access to the digital information by a software application executed by the processor only at the specific geographic location.

36. The information processing device of claim 28, wherein the processor further performs the function of allowing retrieval of the digital information from the memory only at the specific geographic location.

37. The information processing device of claim 28, further comprising a visual display monitor operatively coupled to the processor, and wherein the processor further performs the function of allowing visual display of the digital information on the visual display monitor only at the specific geographic location.