Methods to authenticate access and alarm as to proximity to location

• US 8,225,380 B2
• Filed: 10/31/2007
• Issued: 07/17/2012
• Est. Priority Date: 05/25/2006
• Status: Active Grant

• Current Assignee: CellTrust Corporation
• Original Assignee: CellTrust Corporation
• Inventors: Shafiezadeh, Houman, Moshir, Kevin K, Moshir, Sean
• Primary Examiner(s): Dinh, Minh
• Application Number:
  US11/932,134
• Publication Number:
  US 20080133930A1
• Time in Patent Office: 1,721 Days
• Field of Search: None
• US Class Current: 726/5
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04M 3/42348 Location-based services which utilize the location information of a target
• CPC Class Codes: H04M 3/4938 comprising a voice browser which renders and interprets, e.g. VoiceXML
• CPC Class Codes: H04W 12/088 using filters or firewalls
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements

Abstract

Methods for authenticating access and proving positional awareness using mobile phones. Embodiments for authenticating access include receiving identification indicia from a person seeking access, sending a message to a person having authority for access, and receiving either a second message indicating that the person has taken an affirmative action to indicate authorization, or a password that was provided in the first message. Access may be computer access or physical access, as examples. Methods of providing positional awareness include obtaining or storing location coordinates, monitoring the location of a mobile phone, and providing an alarm, for example, through a second mobile phone. In a number of embodiments, location coordinates are automatically obtained from Internet websites. In some embodiments, parents can monitor the location of their children to make sure they do not get too close to a reported residence of a registered sex offender, for instance.

Claims

1. A method of authenticating access, the method comprising in any order at least the acts of:

receiving from a person seeking access, identification indicia and a present password for the person seeking the access;

comparing the present password to a previous password stored in memory;

proceeding to provide the access only if the resent password matches the previous password stored in memory;

identifying a person having authority for the access;

sending a first automated message through a mobile phone network to a mobile phone of the person having authority for the access, the first automated message is encrypted and containing;

an identification of the access requested and a request for an affirmative action to indicate authorization of the access; and

a password;

receiving the password in the first automated message at the mobile phone of the person having authority for the access; and

receiving from the mobile phone of the person having authority for the access, a second message that is encrypted and containing the password and indicating that the person having authority for the access has taken the affirmative action to indicate authorization of the access.

2. The method of claim 1 wherein the sending the first automated message consists of sending the first automated message through the mobile phone network to a mobile phone of the person seeking the access.

3. The method of claim 2 comprising the acts of:

sending the first automated message through the mobile phone network to the mobile phone of the person having authority for the access, the first automated message containing the password; and

receiving the password from the person seeking the access.

4. The method of claim 3 wherein the person seeking the access is seeking computer access to electronically stored information.

5. The method of claim 3 further comprising the acts of:

asking the person seeking the access a personal question about the person having authority for the access;

receiving from the person seeking the access a present answer to the personal question;

comparing the present answer to a previous answer to the personal question provided by the person having authority for the access; and

proceeding to the sending the first automated message containing the password only if the present answer matches the previous answer.

6. The method of claim 3 wherein the first automated message comprises a personal question and the second message comprises a present answer.

7. The method of claim 1 including a second software module residing on the mobile phone of the person having authority for the access, wherein the second software is configured to provide location information of the mobile phone via the second message.

8. The method of claim 1, further comprising the acts of:

decrypting the first automated message at the mobile phone of the person having authority for the access; and

decrypting the second message after the receiving of the second message from the mobile phone of the person having authority for the access.

9. The method of claim 1 wherein upon receiving from the mobile phone of the person having authority for the access the second message indicating that the person having authority for the access has taken the affirmative action to indicate authorization of the access, at least one of providing access to a website and providing physical access to a controlled space.

10. The method of claim 1 wherein the first message is an SMS message and the second message is an SMS message received through the mobile phone network.

11. The method of claim 1 wherein the sending the first automated message consists of sending the first automated message through the mobile phone network to a mobile phone of the person seeking the access, and wherein the person seeking the access is seeking physical access to a controlled space.

12. The method of claim 1 wherein the receiving of the identification indicia for the person seeking the access comprises receiving a near-field communications signal from a mobile phone of the person seeking the access.

13. The method of claim 1 wherein the person seeking the access is a first person, the person having authority for the access is a second person, and the first automated message comprises an identification of the first person who is seeking the access.

14. The method of claim 1 further comprising the act of receiving, through at least one of an Internet website and a mobile phone network, from each of at least a plurality of persons have authority for access, an indication of a criteria for obtaining authorization for access for the person.

15. The method of claim 1 wherein the first automated message comprises at least one menu and at least one prompt to authorize the access by making a selection from the menu.

16. The method of claim 1 further comprising, after the act of receiving the identification indicia, and before the act of sending of the first automated message, the acts of:

looking up the identification indicia in a database; and

obtaining from the database a phone number for the mobile phone of the person having authority for the access.

17. A method of authenticating access, the method comprising in any order at least the acts of:

receiving from a person seeking access, identification indicia and a present password for the person seeking the access;

comparing the present password to a previous password stored in memory;

proceeding to provide the access only if the present password matches the previous password stored in memory;

identifying a person having authority for the access;

using a first software module on a server, evaluating whether a mobile phone of the person having authority for the access contains a second software module, and if the mobile phone of the person having authority for the access contains a second software module, then

sending a first automated message through a mobile phone network to a mobile phone of the person having authority for the access, the first automated message is encrypted and containing;

an identification of the access requested and a request for an affirmative action to indicate authorization of the access; and

a password;

receiving the password in the first automated message at the mobile phone of the person having authority for the access; and

receiving from the mobile phone of the person having authority for the access, a second message that is encrypted and indicating that the delivery has been accomplished.