Method for controlling access to a target application

• US 7,496,948 B1
• Filed: 02/04/2008
• Issued: 02/24/2009
• Est. Priority Date: 02/04/2008
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Hamilton, Rick A. II, Sand, Anne R., Li, Jenny S., Seaman, James W.
• Primary Examiner(s): Zia; Syed A.
• Assistant Examiner(s): Abrishamkar; Kaveh
• Application Number:
  US12/025,201
• Time in Patent Office: 386 Days
• Field of Search: None
• US Class Current: 726/1
• CPC Class Codes: F16P 3/147 using electro-magnetic technology, e.g. tags or radar
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 64/00 Locating users or terminals or network equipment for network management purposes, e.g. mobility management
• CPC Class Codes: H04W 74/00 Wireless channel access
• CPC Class Codes: H04W 8/20 Transfer of user or subscriber data

Abstract

A method for controlling access to a target application in accordance with an exemplary embodiment is provided. The method includes determining whether a user is within a predetermined distance from at least one predetermined base device. The method further includes determining whether the predetermined base device is within a predetermined geographical region. The method further includes receiving user access information associated with the user and authenticating the user access information. The method further includes authorizing a user computer only when the user is within the predetermined distance from the predetermined base device, and the predetermined base device is within the predetermined geographical region, and the user access information corresponds to predetermined user access information associated with the user. The method further includes allowing the user computer to access the target application when the user computer has been authorized.

Claims

1. A method for controlling access to a target application, comprising:

determining whether a user is within a predetermined distance from at least one predetermined base device;

determining whether the predetermined base device is within a predetermined geographical region;

receiving user access information associated with the user and authenticating the user access information, utilizing an authentication server;

authorizing a user computer only when the user is within the predetermined distance from the predetermined base device, and the predetermined base device is within the predetermined geographical region, and the user access information corresponds to predetermined access information associated with the user, utilizing the authentication server;

sending an authorization message from the authentication server through a wired or wireless network to a remote server, the authorization message indicating that the user computer has been authorized to access the target application;

allowing the user computer to access the target application on the remote server in response to the authorization message being received by the remote server;

wherein determining whether the user is within the predetermined distance from the predetermined base device, comprises;

reading a RFID tag having the user access information utilizing a RFID reader, the RFID reader being associated with the predetermined base device; and

sending the user access information and a base device identifier associated with the predetermined base device to the authentication server; and

indicating that the user is within the predetermined distance from the predetermined base device when the authentication server receives the user access information and the base identifier.

2. The method of claim 1, further comprising periodically authenticating the user access information and authorizing the user computer.

3. The method of claim 1, wherein determining whether the predetermined base device is within the predetermined geographical region, comprises:

sending GPS coordinate information indicating a location of the predetermined base device to an authentication server; and

determining whether the predetermined base device is within the predetermined geographical region based on the GPS coordinate information.