Mobile phone and IP address correlation service

• US 8,683,609 B2
• Filed: 12/04/2009
• Issued: 03/25/2014
• Est. Priority Date: 12/04/2009
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Bravo, Jose F., Crume, Jeffery L.
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): ALMEIDA, DEVIN E
• Application Number:
  US12/630,875
• Publication Number:
  US 20110138483A1
• Time in Patent Office: 1,572 Days
• Field of Search: 726/29
• US Class Current: 726/29
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

A system, method and program product for controlling access to a restricted item. A method is provided that includes: receiving a request for access to a restricted item at a computer system associated with a provider, said request originating from a client system; determining an IP address of the client system; determining a mobile phone number of a mobile phone associated with the requester; transmitting to a third party service provider the IP address and mobile phone number; and receiving back from the third party service provider a confirmation message indicating whether or not the IP address and mobile phone are located within an acceptable range of each other.

Claims

1. A method for controlling access to a restricted item, the method comprising:

receiving a request from a requester for access to a restricted item at a computer system associated with a provider, said request originating at a client system;

determining an IP address of the client system using the computer system associated with the provider;

receiving a telephonic communication from a mobile phone associated with the requester using the computer system associated with the provider,

wherein the requester initiates the telephonic communication using the mobile phone;

determining a geographical location of the mobile phone based on the requester-initiated telephonic communication using the mobile phone;

determining a mobile phone number of the mobile phone associated with the requester using the computer system associated with the provider;

transmitting to a third party service provider, distinct from the computer system associated with the provider, the IP address, the mobile phone number, the geographical location of the mobile phone and an acceptable range,

wherein the acceptable range includes a predetermined distance between the mobile phone and the client system; and

receiving back from the third party service provider a confirmation message indicating whether the IP address and the mobile phone are located within the acceptable range of each other, wherein the third party service provider determines whether the IP address and the mobile phone are located within the acceptable range of each other based on the transmitted IP address, the geographical location of the mobile phone and the mobile phone number.

2. The method of claim 1, further comprising:

providing a token via the client system to the requester;

prompting the requester to transmit said token via the mobile phone associated with the requester;

verifying that the token was transmitted by the mobile phone associated with the requester.

3. The method of claim 1, further comprising verifying a user ID and password of the requester.

4. The method of claim 1, further comprising:

ensuring that a privacy policy is in place to guarantee that no location data of the mobile phone associated with the requester will be provided to the provider.

5. The method of claim 1, wherein the mobile phone number of the mobile phone associated with the requester is pre-registered with the provider.

6. The method of claim 1, further comprising authenticating the requester to allow access to the restricted item in response to a confirmation message that verifies that the mobile phone and IP address are located within the acceptable range of each other.

7. A computer system comprising:

at least one computing device configured to control access to a restricted item, by performing actions including;

receiving a request from a requester to a restricted item, said request originating from a client system;

determining an IP address of the client system;

receiving a telephonic communication from a mobile phone associated with the requester using the computer system associated with the provider,

wherein the requester initiates the telephonic communication using the mobile phone;

determining a geographical location of the mobile phone based on the requester-initiated telephonic communication using the mobile phone;

determining a mobile phone number of the mobile phone associated with the requester;

transmitting to a third party service provider, distinct from the at least one computing device, the IP address, the mobile phone number, the geographical location of the mobile phone and an acceptable range,

wherein the acceptable range includes a predetermined distance between the mobile phone and the client system; and

receiving, from the third party service provider, a confirmation message indicating whether the IP address and the mobile phone are located within the acceptable range of each other, wherein the third party service provider determines whether the IP address and the mobile phone are located within the acceptable range of each other based on the transmitted IP address, the geographical location of the mobile phone and the mobile phone number.

8. The computer system of claim 7, further comprising:

providing a token to the requester via the client system;

prompting the requester to transmit said token via the mobile phone associated with the requester; and

verifying that the token was transmitted by the mobile phone associated with the requester.

9. The computer system of claim 7, further comprising verifying a user ID and password of the requester.

10. The computer system of claim 7, further comprising:

a privacy policy that guarantees that no location data of the mobile phone associated with the requester will be provided to the provider.

11. The computer system of claim 7, wherein the mobile phone number of the mobile phone associated with the requester is pre-registered with the provider.

12. The computer system of claim 7, further comprising authenticating the requester to allow access to the restricted item in response to a confirmation message that verifies that the mobile phone and IP address are located within the acceptable range of each other.

13. A non-transitory computer readable medium having a program product for controlling access to a restricted item, which when executed by at least one computing device, causes the at least one computing device to perform actions including:

receiving a request from a requester to a restricted item, said request originating from a client system;

determining an IP address of the client system;

receiving a telephonic communication from a mobile phone associated with the requester using the computer system associated with the provider,

wherein the requester initiates the telephonic communication using the mobile phone;

determining a geographical location of the mobile phone based on the requester-initiated telephonic communication using the mobile phone;

determining a mobile phone number of the mobile phone associated with the requester;

transmitting to a third party service provider the IP address, the mobile phone number, the geographical location of the mobile phone and an acceptable range,

wherein the acceptable range includes a predetermined distance between the mobile phone and the client system; and

receiving from the third party service provider a confirmation message indicating whether the IP address and the mobile phone are located within the acceptable range of each other, wherein the third party service provider determines whether the IP address and the mobile phone are located within the acceptable range of each other based on the transmitted IP address, the geographical location of the mobile phone and the mobile phone number.

14. The non-transitory computer readable medium of claim 13, further causing the at least one computing device to perform actions including:

providing a token to the requester via the client system;

prompting the requester to transmit said token via the mobile phone associated with the requester; and

verifying that the token was transmitted by the mobile phone associated with the requester.

15. The non-transitory computer readable medium of claim 13, further causing the at least one computing device to perform actions including:

verifying a user ID and password of the requester.

16. The non-transitory computer readable medium of claim 13, further causing the at least one computing device to perform actions including:

a privacy policy that guarantees that no location data of the mobile phone associated with the requester will be provided to the provider.

17. The non-transitory computer readable medium of claim 13, wherein the mobile phone number of the mobile phone associated with the requester is pre-registered with the provider.

18. The non-transitory computer readable medium of claim 13, further causing the at least one computing device to perform actions including:

authenticating the requester to allow access to the restricted item in response to a confirmation message that verifies that the mobile phone and IP address are located within the acceptable range of each other.

19. A method for deploying a system for controlling access to a restricted item, comprising:

providing a computer infrastructure being operable to;

receive a request from a requester for access to a restricted item at a computer system associated with a provider, said request originating from a client system;

determine an IP address of the client system;

receive a telephonic communication from a mobile phone associated with the requester using the computer system associated with the provider,

wherein the requester initiates the telephonic communication using the mobile phone;

determine a geographical location of the mobile phone based on the requester- initiated telephonic communication using the mobile phone;

determine a mobile phone number of the mobile phone associated with the requester;

transmit to a third party service provider, distinct from the computer infrastructure, the IP address, the mobile phone number, the geographical location of the mobile phone, and an acceptable range,

wherein the acceptable range includes a predetermined distance between the mobile phone and the client system; and

receive back from the third party service provider a confirmation message indicating whether the IP address and the mobile phone are located within the acceptable range of each other, wherein the third party service provider determines whether the IP address and the mobile phone are located within the acceptable range of each other based on the transmitted IP address, the geographical location of the mobile phone and the mobile phone number.