System and method for provisioning a wireless device to only be able to access network services within a specific location

• US 8,064,884 B2
• Filed: 10/14/2005
• Issued: 11/22/2011
• Est. Priority Date: 10/14/2004
• Status: Expired due to Fees

• Current Assignee: Novatel Wireless, Inc. (Inseego Corp.)
• Original Assignee: Novatel Wireless, Inc. (Inseego Corp.)
• Inventors: Wu, John Jun, Ho, Kevin
• Primary Examiner(s): Figueroa, Marisol
• Application Number:
  US11/250,679
• Publication Number:
  US 20060143438A1
• Time in Patent Office: 2,230 Days
• Field of Search: 455/410, 455/411, 455/414.2, 455/456, 455/456.1, 380/228, 380/229, 380/247, 380/259, 380/270
• US Class Current: 455/412.2
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 67/303 Terminal profiles
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed
• CPC Class Codes: H04W 48/08 Access restriction or access information delivery, e.g. discovery data delivery signalling during connection H04W76/00
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 84/14 WLL [Wireless Local Loop]; RLL [Radio Local Loop]
• CPC Class Codes: H04W 88/021 adapted for Wireless Local Loop operation
• CPC Class Codes: H04W 88/08 Access point devices
• CPC Class Codes: H04W 88/16 Gateway arrangements

Abstract

A system and method for provisioning wireless devices such that they are only capable of accessing network services when in a specified location. A device surveys the current location of the device for existing base stations and stores a corresponding network environment profile. After the profile is stored, network services will only be provided to the device if the current network profile matches the stored profile.

Claims

1. A method of permissioning access to a network based upon the location of an electronic device, comprising:

receiving signal information from a network device indicating that the network device has detected the presence of the electronic device;

triggering remote initiation of the electronic device by an encryption key received from the network device by the electronic device for comparison with a stored key on the electronic device to acknowledge the presence of the electronic device, the stored key having been stored on the electronic device during an initial setup phase of the electronic device;

in response to a match between the received encryption key and the stored key, surveying the network environment to create a current network environment profile;

comparing the current network environment profile to a predefined network environment profile, the predefined network environment profile having been stored on the electronic device during an initial setup phase of the electronic device;

if the current network environment profile matches the predefined network environment profile, receiving access to network services; and

if the current network environment profile does not match the predefined network environment profile, being denied access to network services by the network device.

2. The method of claim 1, wherein the signal information from the network device comprises an encrypted SMS message.

3. The method of claim 1, wherein the signal information from the network device comprises a system ID number.

4. The method of claim 1, wherein the signal information from the network device comprises a network ID number.

5. The method of claim 1, wherein the signal information from the network device comprises an indication of the signal strength as it is received by the electronic device.

6. The method of claim 1, wherein the network device comprises a residential gateway device.

7. The method of claim 1, wherein the predefined network profile is determined by surveying the network environment at a previous time.

8. A memory unit encoded with a computer program product, for permissioning access to a network based upon the location of an electronic device, comprising:

computer code for receiving signal information from a network device indicating that the network device has detected the presence of the electronic device;

computer code for triggering remote initiation of the electronic device by an encryption key received from the network device by the electronic device for comparison with a stored key on the electronic device to acknowledge the presence of the electronic device, the stored key having been stored on the electronic device during an initial setup phase of the electronic device;

computer code for, in response to a match between the received encryption key and the stored key, surveying the network environment to create a current network environment profile;

computer code for comparing the current network environment profile to a predefined network environment profile, the predefined network environment profile having been stored on the electronic device during an initial setup phase of the electronic device;

computer code for, if the current network environment profile matches the predefined network environment profile, receiving access to network services; and

computer code for, if the current network environment profile does not match the predefined network environment profile, being denied access to network services by the network device.

9. The memory unit of claim 8, wherein the signal information from the network device comprises an encrypted SMS message.

10. The memory unit of claim 8, wherein the signal information from the network device comprises a system ID number.

11. The memory unit of claim 8, wherein the signal information from the network device comprises a network ID number.

12. The memory unit of claim 8, wherein the signal information from the network device comprises an indication of the signal strength as it is received by the electronic device.

13. The memory unit of claim 8, wherein the network device comprises a residential gateway device.

14. The memory unit of claim 8, wherein the predefined network profile is determined by surveying the network environment at a previous time.

15. An electronic device, comprising:

a processor; and

a memory unit operatively connected to the processor and including;

computer code for receiving signal information from a network device indicating that the network device has detected the presence of the electronic device;

computer code for triggering remote initiation of the electronic device by an encryption key received from the network device by the electronic device for comparison with a stored key on the electronic device to acknowledge the presence of the electronic device, the stored key having been stored on the electronic device during an initial setup phase of the electronic device;

computer code for, in response to a match between the received encryption key and the stored key, surveying the network environment to create a current network environment profile;

computer code for comparing the current network environment profile to a predefined network environment profile, the predefined network environment profile having been stored on the electronic device during an initial setup phase of the electronic device;

computer code for, if the current network environment profile matches the predefined network environment profile, receiving access to network services; and

computer code for, if the current network environment profile does not match the predefined network environment profile, being denied access to network services by the network device.

16. The electronic device of claim 15, wherein the signal information from the network device comprises an encrypted SMS message.

17. The electronic device of claim 15, wherein the signal information from the network device comprises a system ID number.

18. The electronic device of claim 15, wherein the signal information from the network device comprises a network ID number.

19. The electronic device of claim 15, wherein the signal information from the network device comprises an indication of the signal strength as it is received by the electronic device.

20. The electronic device of claim 15, wherein the network device comprises a residential gateway device.

21. The electronic device of claim 15, wherein the predefined network profile is determined by surveying the network environment at a previous time.

22. A method of selectively granting network access to an electronic device, comprising:

transmitting signal information to the electronic device;

triggering remote initiation of the electronic device by sending an encryption key from the network device to the electronic device for comparison with a stored key on the electronic device;

the stored key having been stored on the electronic device during an initial setup phase of the electronic device;

in response to a match between the encryption key and the stored key, determining whether a current network environment profile generated by the electronic device matches a predefined network environment profile for the electronic device, the predefined network environment profile having been stored on the electronic device during an initial setup phase of the electronic device;

if the current network environment profile matches the predefined network environment profile, permitting the electronic device to access network services; and

if the current network environment profile does not match the predefined network environment profile, denying the electronic device access to network services.

23. The method of claim 22, wherein the signal information from the network device comprises an encrypted SMS message.

24. A memory unit encoded with a computer program product, for selectively granting network access to an electronic device, comprising:

computer code for transmitting signal information to the electronic device;

computer code for triggering remote initiation of the electronic device by sending an encryption key from the network device to the electronic device for comparison with a stored key on the electronic device, the stored key having been stored on the electronic device during an initial setup phase of the electronic device;

computer code for, in response to a match between the encryption key and the stored key, determining whether a current network environment profile generated by the electronic device matches a predefined network environment profile for the electronic device, the predefined network environment profile having been stored on the electronic device during an initial setup phase of the electronic device;

computer code for, if the current network environment profile matches the predefined network environment profile, permitting the electronic device to access network services; and

computer code for, if the current network environment profile does not match the predefined network environment profile, denying the electronic device access to network services.