Method and system for GNSS receiver login protection and prevention

• US 8,220,046 B2
• Filed: 05/18/2007
• Issued: 07/10/2012
• Est. Priority Date: 05/18/2007
• Status: Active Grant

• Current Assignee: Trimble Navigation Limited (Trimble Inc.)
• Original Assignee: Trimble Navigation Limited (Trimble Inc.)
• Inventors: Hamilton, Jeffery A., Riley, Stuart
• Primary Examiner(s): ZIA, SYED
• Application Number:
  US11/804,410
• Publication Number:
  US 20080289033A1
• Time in Patent Office: 1,880 Days
• Field of Search: None
• US Class Current: 726/19
• CPC Class Codes: G01S 19/42 Determining position
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

Embodiments of the present invention recite a method and system for implementing login protection and prevention to a Global Navigation Satellite System (GNSS) receiver. In one embodiment, a geospatial data collection device which is communicatively coupled with a GNSS receiver is authenticated. It is then determined that the geospatial data collection device is authorized to collect data from a geographic region in which the GNSS receiver is located. The geospatial data collection device is then permitted access to a control interface of the GNSS receiver.

Claims

1. A method for implementing login protection to a Global Navigation Satellite System (GNSS) receiver, said method comprising:

accessing a decryption key which is uniquely associated with at least one geospatial data collection device configured to be communicatively coupled with a second device comprising said GNSS receiver;

verifying said geospatial data collection device using said decryption key;

permitting said geospatial data collection device to access a control interface of said GNSS receiver;

receiving an identification which is assigned to said geospatial data collection device and a product identification which is assigned to said GNSS receiver; and

using said identification and said product identification to identify said decryption key and a second decryption key; and

using said second decryption key to derive a geographic region identification from said identification.

2. The method as recited in claim 1 further comprising:

conveying a randomly generated sequence to said geospatial data collection device;

receiving a response to said randomly generated sequence from said geospatial data collection device; and

verifying said response using said decryption key.

3. The method as recited in claim 1 further comprising:

using said GNSS receiver to determine a current geographic position of said GNSS receiver;

comparing said geographic region identification with said current geographic position; and

determining that said geographic region identification corresponds to said current geographic position.

4. The method as recited in claim 1 further comprising:

using an electronic device communicatively coupled with said geospatial data collection device and with said GNSS receiver to perform said accessing, said verifying, and said permitting.

5. A method for implementing login protection to a Global Navigation Satellite System (GNSS) receiver, said method comprising:

determining a geographic region identification descriptive of a geospatial data collection device configured to be communicatively coupled with a second device comprising said GNSS receiver;

verifying that said geographic region identification corresponds to a current geographic position of said GNSS receiver;

permitting said geospatial data collection device to access a control interface of said GNSS receiver; and

receiving an identification which is assigned to said geospatial data collection device and a product identification which is assigned to said GNSS receiver;

using said identification and said product identification to identify a decryption key and a second decryption key; and

using said second decryption key to derive a geographic region identification from said identification.

6. The method as recited in claim 5 further comprising:

conveying a randomly generated sequence to said geospatial data collection device in response to said receiving;

receiving a response to said randomly generated sequence from said geospatial data collection device;

and

verifying said response using said decryption key.

7. The method as recited in claim 6 wherein said verifying further comprises:

using said GNSS receiver to determine said current geographic position; and

comparing said geographic region identification with said current geographic position.

8. The method as recited in claim 5 further comprising:

using an electronic device communicatively coupled with said geospatial data collection device and with said GNSS receiver to perform said determining, said verifying, and said permitting.

9. A system for implementing login protection to a Global Navigation Satellite System (GNSS) receiver, said system comprising:

an authenticating component coupled with a communication interface for authenticating a geospatial data collection device which is configured to be communicatively coupled with a second device comprising said GNSS receiver, said authenticating component comprising;

an identification receiver for receiving an identification from said geospatial data collection device and wherein said identification is assigned to said geospatial data collection device;

a product identification receiver for receiving a product identification from said geospatial data collection device and wherein said product identification is assigned to said GNSS receiver; and

a decryption key identifier coupled with said identification receiver and with said product identification receiver, said decryption key identifier for identifying a decryption key based upon said identification and said product identification;

a geographic location verifier coupled with said authenticating component, said geographic location verifier for determining that said geospatial data collection device is authorized to collect data from a geographic region in which said GNSS receiver is located; and

a control interface enabler coupled with said authenticating component and with said geographic location verifier, said control interface enabler for permitting said geospatial data collection device to access a control interface of said GNSS receiver; and

a geographic region identification deriver for deriving said geographic region from said identification using a second decryption key which is identified by said decryption key identifier.

10. The system of claim 9 wherein said authenticating component further comprises:

a sequence generator for generating a random sequence which is conveyed to said geospatial data collection device;

a response receiver for receiving a response to said random sequence from said geospatial data collection device; and

a geospatial data collection device verifier coupled with said response receiver and with said decryption key identifier, said geospatial data collection device verifier for verifying said response using said decryption key.

11. The system of claim 10 wherein said geographic location verifier further comprises:

a geographic position input for receiving a current geographic position of said GNSS receiver; and

a geographic region comparator for comparing said geographic region identification with said current geographic position and for determining that said geographic region identification corresponds to said current geographic position.

12. The method as recited in claim 11 wherein said geographic region identification deriver further comprises:

an identification input coupled with said identification receiver and with said geographic region identification deriver; and

a decryption key input coupled with said decryption key identifier and with said geographic region identification deriver.