Location based data

• US 7,092,943 B2
• Filed: 02/28/2003
• Issued: 08/15/2006
• Est. Priority Date: 03/01/2002
• Status: Expired due to Term

• Current Assignee: Extreme Networks, Inc.
• Original Assignee: Enterasys Networks Incorporated (Extreme Networks, Inc.)
• Inventors: Harrington, David, Frattura, David, Graham, Richard W., Roese, John J.
• Primary Examiner(s): Mofiz, Apu M.
• Application Number:
  US10/377,177
• Publication Number:
  US 20030217151A1
• Time in Patent Office: 1,264 Days
• Field of Search: 707/101, 707/104.1, 370/353, 375/130, 380/240, 455/456.1, 455/456.3, 709/219, 709/225
• US Class Current: 1/1
• CPC Class Codes: G01S 5/02 using radio waves using satellite radio beacon systems for determining position G01S19/00
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 61/10 of different types
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/20 Services signaling; Auxiliary data signalling, i.e. transmitting data via a non-traffic channel
• CPC Class Codes: H04W 4/50 : Service provisioning or reconfiguring
• CPC Class Codes: H04W 64/00 : Locating users or terminals or network equipment for network management purposes, e.g. mobility management
• CPC Class Codes: H04W 8/26 : Network addressing or numbering for mobility support
• CPC Class Codes: Y10S 707/99932 : Access augmentation or optimizing
• CPC Class Codes: Y10S 707/99939 : Privileged access

Abstract

Data is provided with location-based access control information. Access to the data at a physical location is then limited according to the location-based access control information. A physical location of a device accessing the data can be determined, and the limiting of the access is then according to the determined physical location. The data can be provided in encrypted form, and limiting access to the data includes enabling decryption of the data according to the physical location.

Claims

1. A computer-implemented method comprising:

determining a transmission medium type, wherein the transmission medium type is one of a cable-based transmission medium or a wireless transmission medium;

providing data that includes location-based access control information, wherein the manner in which the location-based access control information is determined is dependent upon the transmission medium type; and

limiting access, using a data processing device, to the data at a physical location according to the location-based access control information.

2. The computer-implemented method of claim 1 further comprising determining a physical location of a device accessing the data, and limiting the access according to the determined physical location.

3. The computer-implemented method of claim 1 wherein providing the data includes providing the data in encrypted form, and limiting access to the data includes enabling decryption of the data according to the physical location.

4. The computer-implemented method of claim 1 wherein the data comprises a computer file.

5. The computer-implemented method of claim 4 wherein limiting access to the file includes applying operating system services to limit the access.

6. The computer-implemented method of claim 4 wherein limiting access to the file includes using an application program to limit the access.

7. The computer-implemented method of claim 1 wherein the transmission medium type is a cable-based transmission medium.

8. The computer-implemented method of claim 1 wherein the transmission medium type is a wireless transmission medium.