Location-based security for a portable computer

• US 7,051,196 B2
• Filed: 12/05/2001
• Issued: 05/23/2006
• Est. Priority Date: 12/05/2001
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Angelo, Michael F., Olarig, Sompong P.
• Primary Examiner(s): Barrón, Jr., Gilberto
• Assistant Examiner(s): SANDOVAL, KRISTIN D
• Application Number:
  US10/006,331
• Publication Number:
  US 20030105971A1
• Time in Patent Office: 1,630 Days
• Field of Search: 713/201, 380/258
• US Class Current: 713/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS

Abstract

An electronic system embodies a security system which provides varying levels of security based on the location of the system. As such, the system includes a location module, such as a geosynchronous positioning system (“GPS”) receiver that permits the system to determine its location relative to a plurality of preset location areas. Such location areas might be programmed to include the user'"'"'s office, home, predetermined location for a business trip and the like. Based on the location area in which the system is located, the system invokes a security mode associated with that particular location area. Different location areas may have different security modes.

Claims

1. A computer system, comprising:

a processor;

a communication port through which the computer system can communicate with a remote network; and

a location module coupled to said processor;

wherein said processor receives a signal from the location module to determine at boot-up the location of the computer system relative to a plurality of pre-programmed location areas and, invokes an operating mode for said computer system based on the location area in which the computer system is located.

2. The computer system of claim 1 wherein said location module includes using a geosynchronous positioning system receiver.

3. The computer system of claim 1 wherein said location module includes using a low earth orbit satellite receiver.

4. The computer system of claim 1 wherein said location module includes using a cellular telephone transceiver.

5. The computer system of claim 1 wherein said operating mode includes precluding access to the remote network.

6. The computer system of claim 1 wherein said operating mode includes permitting access to the remote network, but with limited access privileges.

7. The computer system of claim 1 wherein said operating mode includes permitting access to the remote network, but the computer system cannot run at least one application running on said remote network.

8. The computer system of claim 1 wherein said operating mode includes permitting access to the remote network, but the computer system cannot access at least one data set stored on said remote network.

9. The computer system of claim 1 wherein each of said plurality of location areas has an associated operating mode and at least two of said operating modes differs.

10. The computer system of claim 1 wherein said location areas includes a first location area and a second location, and said first location area has a first operating mode and said second location area has a second a operating mode, said first operating permits full access to a remote network and said second operating mode permits only limited access to said remote network.

11. The computer system of claim 1 wherein said location areas includes six location areas each having its own operating mode.

12. The computer system of claim 1 wherein said operating mode includes restrictions on the operation of the computer system itself.

25. The computer system of claim 1, wherein said processor re-evaluates the location of the computer system at predetermined time intervals.

26. The computer system of claim 25 wherein said processor invokes an operating mode for said computer based on said re-evaluated location at said predetermined time intervals.

13. A method of providing security for a computer, comprising:

(a) determining the location of the computer;

(b) comparing the location determined in (a) against a plurality of location areas;

(c) determining in which location area the computer is located; and

(d) at boot-up, invoking an operating mode preset for the location area determined in (c).

14. The method of claim 13 wherein (a) includes using a geosynchronous positioning system receiver.

15. The method of claim 13 wherein (a) includes using a low earth orbit satellite receiver.

16. The method of claim 13 wherein (a) includes using a cellular telephone transceiver.

17. The method of claim 13 wherein said operating mode includes precluding access to a remote network.

18. The method of claim 13 wherein said operating mode includes permitting access to a remote network, but with limited access privileges.

19. The method of claim 13 wherein said operating mode includes permitting access to a remote network, but the computer cannot run at least one application running on said remote network.

20. The method of claim 13 wherein said operating mode includes permitting access to a remote network, but the computer cannot access at least one data set stored on said remote network.

21. The method of claim 13 wherein each of said plurality of location areas has an associated operating mode and at least two of said operating modes differs.

22. The method of claim 13 wherein said location areas includes a first location area and a second location, and said first location area has a first operating mode and said second location area has a second operating mode, said first operating mode permits full access to a remote network and said second operating mode permits only limited access to said remote network.

23. The method of claim 13 wherein said location areas includes six location areas each having its own operating mode.

24. The method of claim 13 wherein said operating mode restricts operation of the computer.

27. The method of claim 13 further comprising, at predetermined time Intervals, re-evaluating the location of the computer.

28. The method of claim 27 further comprising invoking an operating mode preset for the re-evaluated location.

29. A computer system, comprising:

a processor;

a communication port through which the computer can communicate with a remote network; and

a location module coupled to said processor;

wherein said processor receives a signal from the location module to determine, at predetermined time intervals, the location of the computer system relative to a plurality of pre-programmed location areas and, to invoke at each such predetermined time interval an operating mode for said computer based on the location area in which the computer is located.

30. The computer system of claim 29 wherein said processor also determines the boot-up location of the computer system during boot-up and, also at boot-up, invokes an operating mode based on the boot-up location.