Secure localization for 802.11 networks with fine granularity

• US 8,107,400 B2
• Filed: 07/14/2008
• Issued: 01/31/2012
• Est. Priority Date: 07/13/2007
• Status: Active Grant

• Current Assignee: Telcordia Legacy Inc.
• Original Assignee: Telcordia Technologies Incorporated (Telefonaktiebolaget LM Ericsson), Toshiba America Research Inc (Toshiba Corporation)
• Inventors: Traynor, Patrick, Kim, Byungsuk, Anjum, Farooq
• Primary Examiner(s): MARCELO, MELVIN C
• Application Number:
  US12/172,388
• Publication Number:
  US 20090022127A1
• Time in Patent Office: 1,296 Days
• Field of Search: 370/254, 370/255, 370/338
• US Class Current: 370/255
• CPC Class Codes: G01S 5/02 using radio waves using satellite radio beacon systems for determining position G01S19/00
• CPC Class Codes: G01S 5/02524 Creating or updating the radio-map
• CPC Class Codes: G01S 5/14 Determining absolute distances from a plurality of spaced points of known location
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 64/00 Locating users or terminals or network equipment for network management purposes, e.g. mobility management
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

A system and method that uses wireless-capable desktop computers in a vicinity such as to enable one to securely determine the location of an untrusted user with office level granularity.

Claims

1. A method of localizing mobile client devices within a geographical area, comprising:

a) having an Access Point Controller generate tokens and provide the tokens to a plurality of Access Points within a geographical area;

b) having the Access Points transmit said tokens for receipt by client devices within said geographical area;

c) having at least one client device within said geographical area inform the Access Point Controller of the tokens that it receives from the Access Points; and

d) having the Access Point Controller determine a Macro-Location of the client device based on the tokens received by the client device;

e) having the Access Point Controller generate new tokens for transmission to a plurality of computers distributed at least within the Macro-Location within said geographical area to wirelessly transmit to said client device;

f) having the client device inform the Access Point Controller of the new tokens that it receives from the computers distributed within said geographical area; and

g) having the Access Point Controller determine a Pico-Location of the client device based on the new tokens received by the client device.

2. The method of claim 1, wherein said computers include desk top or personal computers configured with an 802.11 wireless interface and adapted to operate as a Pico-AP.

3. The method of claim 1, further including performing access control of said client device based on the Pico-Location of the client device.

4. The method of claim 1, further including performing security functions within said client device based on the Pico-Location of the client device.

5. The method of claim 4, further including said security functions including performing or limiting performance of applications or programs on said client device based on the Pico-Location of the client device.

6. A method of localizing mobile client devices within a geographical area, comprising:

a) having an Access Point Controller generate tokens for transmission within a geographical area;

b) having computers within the geographical area configured as Pico Access Points transmit said tokens for receipt by client devices within said geographical area;

c) having client devices inform the Access Point Controller of the tokens that it receives from the computers distributed within said geographical area; and

d) having the Access Point Controller determine a Pico-Location of the client device based on the tokens received by the client device from the computers.

7. The method of claim 6, further including:

a) having the Access Point Controller initially generate tokens and provide the tokens to a plurality of Access Points within a geographical area;

b) having the Access Points transmit said tokens for receipt by client devices within said geographical area;

c) having at least one client device within said geographical area inform the Access Point Controller of the tokens that it receives from the Access Points; and

d) having the Access Point Controller determine a Macro-Location of the client device based on the tokens received by the client device.

8. The method of claim 6, further including performing location mapping for localizing mobile client devices within a geographical area which includes:

a) having the Access Point Controller generate tokens for a plurality of Access Points to transmit within a geographical area;

b) having the Access Points wirelessly transmit the tokens to computers distributed within the geographical area;

c) having the computers report to the Access Point Controller regarding the tokens received from the Access Points;

d) having the Access Point Controller develop statistical mapping of one or more regions within said geographical area based on comparisons of the tokens it sent out to Access Points to transmit and tokens reported back to the Access Point Controller.

9. The method of claim 6, further including having said computers include desk top or personal computers configured with an 802.11 wireless interface.

10. The method of claim 6, further including performing access control of a client device based on the Pico-Location of the client device by the Access Point Controller taking into account tokens reported by the client device.

11. The method of claim 6, further including performing security functions within said client device based on the Pico-Location of the client device by the Access Point Controller taking into account tokens reported by the client device.

12. A method of location mapping for localizing mobile client devices within a geographical area, comprising:

a) having an Access Point Controller generate tokens for a plurality of Access Points to transmit within a geographical area;

b) having the Access Points wirelessly transmit the tokens to computers distributed within the geographical area;

c) having the computers report to the Access Point Controller regarding the tokens received from the Access Points;

d) having the Access Point Controller develop statistical mapping of one or more regions within said geographical area based on comparisons of the transmitted tokens said Access Point Controller sent out to said Access Points to transmit to said computers and said received tokens reported back by said computers to the Access Point Controller.

13. The method of claim 12, further including having said computers include desk top or personal computers configured with an 802.11 wireless interface.

14. The method of claim 12, further including performing access control of a client device based on the Pico-Location of the client device by the Access Point Controller taking into account tokens reported by the client device and the statistical mapping.

15. The method of claim 12, further including performing security functions within said client device based on the Pico-Location of the client device by the Access Point Controller taking into account tokens reported by the client device and the statistical mapping.

16. An apparatus for localization of client devices within a geographical region, comprising:

an Access Point Controller, wherein;

said controller being configured to generate tokens for transmission to a plurality of Access Points;

said controller being configured to transmit said tokens to Access Points within a geographical area for subsequent wireless transmission to client devices within the geographical area;

said controller being configured to receive reports from said client devices within the geographical area as to the tokens received from the Access Points;

said controller being configured to perform a Macro-Localization of a client device based on the tokens received by the client device;

said controller being configured to generate new tokens for transmission to a plurality of computers within at least a macro-localized region within said geographical area for subsequent transmission to client devices;

said controller being configured to receive reports from client devices within the macro-localized region within the geographical area as to the new tokens received from the computers; and

said controller being configured to determine a Pico-Location of the client device based on the new tokens received by the client device.