Location control service

• US 8,560,648 B2
• Filed: 11/10/2010
• Issued: 10/15/2013
• Est. Priority Date: 11/10/2010
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Sinha, Suyash
• Primary Examiner(s): Whipple, Brian P
• Application Number:
  US12/943,451
• Publication Number:
  US 20120117209A1
• Time in Patent Office: 1,070 Days
• Field of Search: 709/221, 709/225, 726/34
• US Class Current: 709/221
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06F 2221/2151 Time stamp

Abstract

In embodiments of a location control service, location data that identifies the location of a device is stored in a memory module, such as secured non-volatile memory or a storage module, of the device along with a timestamp that correlates to local time at the location of the device. A determination is then made as to whether the location of the device has changed. Functionality of the device can be disabled, and access to data stored on the device restricted, when determining that a change in location of the device was not authorized. Alternatively, the location data can be updated to identify a new location of the device when determining that a change in location of the device was authorized.

Claims

1. A computer-implemented method, comprising:

storing a timestamp that correlates to local time at a location of a device, the timestamp stored in a memory module of the device;

storing location data that identifies the location of the device, the location data stored in the memory module of the device;

initiating a periodic check of the location of the device, the periodic check initialized from the timestamp;

determining whether the location of the device has changed;

requesting peer verification from one or more peer devices that indicates the change in location of the device was authorized; and

updating the location data that identifies a new location of the device responsive to receiving the peer verification.

2. A computer-implemented method as recited in claim 1, further comprising:

requesting a service authorization from a network-based service that indicates the change in location of the device was authorized; and

updating the location data that identifies a new location of the device responsive to receiving the service authorization.

3. A computer-implemented method as recited in claim 1, wherein the one or more peer devices are communicatively linked to the device for data communication.

4. A computer-implemented method as recited in claim 1, further comprising:

comparing a key-code input to the device with a stored key-code to validate the change in location of the device; and

updating the location data that identifies a new location of the device responsive to validating the key code.

5. A computer-implemented method as recited in claim 1, further comprising disabling device functionality responsive to a determination that a change in location of the device was not authorized.

6. A computer-implemented method as recited in claim 5, further comprising restricting access to data stored on the device when said disabling the device functionality.

7. A computer-implemented method as recited in claim 1, wherein the location data comprises at least one of GPS location data or regional position data that correlates to the location of the device.

8. A computer-implemented method as recited in claim 1, wherein the timestamp and the location data are stored in a Trusted Platform Module (TPM) that securely maintains the timestamp and the location data.

20. A computer-implemented method as recited in claim 5, further compromising timing-out the device after a designated duration responsive to the determination that the change in location of the device was not authorized.

9. A device, comprising:

a memory module configured to store a timestamp that correlates to local time at a location of the device, and location data that identifies the location of the device;

a processor and memory to implement a location control service configured to;

initiate a periodic check of the location of the device, the periodic check initialized from the timestamp;

determine whether the location of the device has changed;

request peer verification from one or more peer devices that indicates a change in location of the device was authorized;

disable device functionality and restrict access to data stored on the device responsive to a determination that the change in location of the device was not authorized; and

update the location data that identifies a new location of the device responsive to a determination that the change in location of the device was authorized.

10. A device as recited in claim 9, wherein the location control service is further configured to request a service authorization from a network-based service that indicates the change in location of the device was authorized.

11. A device as recited in claim 9, wherein the one or more peer devices are communicatively linked to the device for data communication.

12. A device as recited in claim 9, wherein the location control service is further configured to compare a key-code input to the device with a stored key-code to validate the change in location of the device.

13. A device as recited in claim 9, wherein the location control service is further configured to time-out the device after a designated duration responsive to a determination that the change in location of the device was not authorized.

14. A device as recited in claim 9, wherein the location data comprises at least one of GPS location data or regional position data that correlates to the location of the device.

15. A device as recited in claim 9, wherein the memory module comprises a Trusted Platform Module (TPM) that securely maintains the timestamp and the location data.

16. A networked system, comprising:

peer devices communicatively linked for data communication;

a first peer device that implements a location control service configured to;

determine whether a location of the first peer device has changed;

request peer verification from at least a second peer device that indicates a change in location of the first peer device was authorized; and

update location data that identifies a new location of the first peer device responsive to a determination that the change in location of the first peer device was authorized.

17. A system as recited in claim 16, wherein the location control service is further configured to disable device functionality and restrict access to data stored on the first peer device responsive to a determination that a change in location of the first peer device was not authorized.

18. A system as recited in claim 16, wherein the location control service is further configured to at least one of:

request a service authorization from a network-based service that indicates the change in location of the first peer device was authorized;

or

compare a key-code input to the first peer device with a stored key-code to validate the change in location of the first peer device.

19. A system as recited in claim 16, wherein the location control service is further configured to time-out the first peer device after a designated duration responsive to a determination that the change in location of the first peer device was not authorized.