System and method for provisioning a wireless device to only be able to access network services within a specific location

• US 8,401,519 B2
• Filed: 11/22/2011
• Issued: 03/19/2013
• Est. Priority Date: 10/14/2004
• Status: Active Grant

• Current Assignee: Novatel Wireless, Inc. (Inseego Corp.)
• Original Assignee: Novatel Wireless, Inc. (Inseego Corp.)
• Inventors: Wu, John Jun, Ho, Kevin
• Primary Examiner(s): Figueroa, Marisol
• Application Number:
  US13/303,067
• Publication Number:
  US 20120066747A1
• Time in Patent Office: 483 Days
• Field of Search: 455/410, 455/411, 455/456.1
• US Class Current: 455/410
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 67/303 Terminal profiles
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed
• CPC Class Codes: H04W 48/08 Access restriction or access information delivery, e.g. discovery data delivery signalling during connection H04W76/00
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 84/14 WLL [Wireless Local Loop]; RLL [Radio Local Loop]
• CPC Class Codes: H04W 88/021 adapted for Wireless Local Loop operation
• CPC Class Codes: H04W 88/08 Access point devices
• CPC Class Codes: H04W 88/16 Gateway arrangements

Abstract

A system and method for provisioning wireless devices such that they are only capable of accessing network services when in a specified location. A device surveys the current location of the device for existing base stations and stores a corresponding network environment profile. After the profile is stored, network services will only be provided to the device if the current network profile matches the stored profile.

Claims

1. A method of permissioning access to a network based upon the location of an electronic device, comprising:

receiving signal information from a network device indicating that the network device has detected the presence of the electronic device;

in response to receiving, surveying the network environment to create a current network environment profile;

comparing the current network environment profile to a predefined permissioned network environment profile;

if the current network environment profile matches the predefined permissioned network environment profile, receiving access to network services; and

if the current network environment profile does not match the predefined permissioned network environment profile, being denied access to network services by the network device.

2. The method of claim 1, wherein the current network environment profile is generated by the electronic device in response to receiving an encrypted initiation message.

3. The method of claim 2, wherein the encrypted initiation message includes an encryption key.

4. The method of claim 3, wherein the encryption key is specific to the electronic device to prevent tampering.

5. The method of claim 1, wherein

if the current network environment profile matches the predefined permissioned network environment profile, receiving access to all network services;

and

if the current network environment profile does not match the predefined permissioned network environment profile, receiving access to only a limited set of network services by the network device.

6. The method of claim 1, wherein

if the current network environment profile matches the predefined permissioned network environment profile, receiving access to network services at a high bit rate;

and

if the current network environment profile does not match the predefined permissioned network environment profile, receiving access to network services by the network device only at lower bit rate.

7. A computer program product, embodied on a non-transitory computer readable medium, for permissioning access to a network based upon the location of an electronic device, comprising:

computer code for receiving signal information from a network device indicating that the network device has detected the presence of the electronic device;

computer code for, in response to receiving, surveying the network environment to create a current network environment profile;

computer code for comparing the current network environment profile to a predefined permissioned network environment profile;

computer code for if the current network environment profile matches the predefined permissioned network environment profile, receiving access to network services; and

computer code for if the current network environment profile does not match the predefined permissioned network environment profile, being denied access to network services by the network device.

8. The computer program product of claim 7, wherein the current network environment profile is generated by the electronic device in response to receiving an encrypted initiation message.

9. The computer program product of claim 8, wherein the encrypted initiation message includes an encryption key.

10. The computer program product of claim 9, wherein the encryption key is specific to the electronic device to prevent tampering.

11. The computer program product of claim 7, wherein

if the current network environment profile matches the predefined permissioned network environment profile, receiving access to all network services;

and

if the current network environment profile does not match the predefined permissioned network environment profile, receiving access to only a limited set of network services by the network device.

12. The computer program product of claim 7, wherein

if the current network environment profile matches the predefined permissioned network environment profile, receiving access to network services at a high bit rate;

and

if the current network environment profile does not match the predefined permissioned network environment profile, receiving access to network services by the network device only at lower bit rate.

13. An electronic device, comprising:

a processor; and

a memory unit operatively connected to the processor and including;

computer code for receiving signal information from a network device indicating that the network device has detected the presence of the electronic device;

computer code for, in response to receiving, surveying the network environment to create a current network environment profile;

computer code for comparing the current network environment profile to a predefined permissioned network environment profile;

computer code for if the current network environment profile matches the predefined permissioned network environment profile, receiving access to network services; and

computer code for if the current network environment profile does not match the predefined permissioned network environment profile, being denied access to network services by the network device.

14. The electronic device of claim 13, wherein the current network environment profile is generated by the computer code in response to receiving an encrypted initiation message.

15. The electronic device of claim 13, wherein the encrypted initiation message includes an encryption key.

16. The electronic device of claim 13, wherein the encryption key is specific to the electronic device to prevent tampering.

17. The electronic device of claim 13, wherein

if the current network environment profile matches the predefined permissioned network environment profile, receiving access to all network services;

and

if the current network environment profile does not match the predefined permissioned network environment profile, receiving access to only a limited set of network services by the network device.

18. The electronic device of claim 13, where

if the current network environment profile matches the predefined permissioned network environment profile, receiving access to network services at a high bit rate;

and

if the current network environment profile does not match the predefined permissioned network environment profile, receiving access to network services by the network device only at lower bit rate.