Credential tracking

• US 8,775,807 B1
• Filed: 10/26/2012
• Issued: 07/08/2014
• Est. Priority Date: 10/26/2012
• Status: Active Grant

• Current Assignee: Microstrategy Incorporated
• Original Assignee: Microstrategy Incorporated
• Inventors: Vazquez, Hector, Chen, Gang
• Primary Examiner(s): Mehedi, Morshed
• Application Number:
  US13/661,904
• Time in Patent Office: 620 Days
• Field of Search: 726/1, 726/6, 713/168
• US Class Current: 713/168
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/023 using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data

Abstract

In one implementation, a credential associated with a user identifier and a location is stored at a client device. A request to output a representation of the credential in a manner that enables a credential authority to validate the representation is received. Responsive to receiving the request to render the representation of the credential, a location of the client device is obtained and a determination that the location of the client device is within a predefined distance of the location associated with the credential is made. Responsive to determining that the location of the client device is within the predefined distance of the location associated with the credential, data indicating that the user has entered the location associated with the credential is stored in a memory of the client device.

Claims

1. A non-transitory computer-readable medium storing instructions executable by one or more computers that, upon execution, cause the one or more computers to perform operations comprising:

storing, at a client device, a credential identifier associated with a user identifier and a location;

receiving, at the client device, a request to output a graphical representation of the credential in a manner that enables a credential authority to validate the graphical representation;

responsive to receiving the request to output the graphical representation of the credential;

obtaining, at the client device, a time measured by a timing device of the client device;

generating, at the client device, the graphical representation of the credential based on the credential identifier and the time;

outputting, to a display of the client device, the generated graphical representation in a manner that enables the credential authority to validate the credential by visual inspection of the generated graphical representation;

obtaining a location of the client device;

determining that the location of the client device is within a predefined distance of the location associated with the credential;

responsive to determining that the location of the client device is within the predefined distance of the location associated with the credential, storing, in a memory of the client device, data indicating that the user has entered the location associated with the credential.

2. The computer-readable medium of claim 1, wherein the operations further comprise transmitting, from the client device to a server, a message indicating that the user has entered the location associated with the credential.

3. The computer-readable medium of claim 1, wherein storing, at a client device, a credential associated with a user identifier and a location comprises storing, at a client device, a credential associated with a user identifier, a location, and a time;

wherein the operations further comprise;

obtaining a time at the client device responsive to receiving the request to render the representation of the credential;

determining that the time at the client device is within a predefined time period associated with the credential; and

responsive to determining that the location of the client device is within the predefined distance of the location associated with the credential and determining that the time at the client device is within the predefined amount of time of the time associated with the credential, storing data indicating that the user has entered the location associated with the credential at the time associated with the credential.

4. The computer-readable medium of claim 3, wherein the operations further comprise transmitting, from the client device to a server, a message indicating that the user has entered the location associated with the credential.

5. The computer-readable medium of claim 1,

wherein determining that the location of the client device is within a predefined distance of the location associated with the credential comprises determining that the location of the client device is within a first predefined distance of the location associated with the credential;

wherein responsive to determining that the location of the client device is within the predefined distance of the location associated with the credential, storing, in a memory of the client device, data indicating that the user has entered the location associated with the credential comprises responsive to determining that the location of the client device is within the first predefined distance of the location associated with the credential, storing, in a memory of the client device, data indicating that the user has entered the location associated with the credential; and

wherein the operations further comprise;

after determining that the location of the client device is within the first predefined distance of the location associated with the credential, determining that the location of the client device is beyond a second predefined distance of the location associated with the credential; and

responsive to determining that the location of the client device is beyond the second predefined distance of the location associated with the credential, storing, in a memory of the client device, data indicating that the user has left the location associated with the credential.

6. The computer-readable medium of claim 5, wherein the operations further comprise transmitting, from the client device to a server, a message indicating that the user has left the location associated with the credential.

7. The computer-readable medium of claim 5, wherein the first predefined distance is the same as the second predefined distance.

8. The computer-readable medium of claim 1, wherein the operations further comprise:

determining that the client device lacks network connectivity;

responsive to determining that the client device lacks network connectivity, caching a message indicating that the user has entered the location associated with the credential for subsequent transmission to a server when network connectivity is restored;

determining that network connectivity has been reestablished; and

responsive to determining that network connectivity has been reestablished, sending the cached message to the server.

9. The computer-readable medium of claim 1, wherein the operations further comprise outputting, at the client device, the representation of the credential in a manner that enables the credential authority to validate the representation.

10. A computer-implemented method comprising:

storing, at a client device, a credential identifier associated with a user identifier and a location;

receiving, at the client device, a request to output a graphical representation of the credential in a manner that enables a credential authority to validate the graphical representation;

responsive to receiving the request to output the graphical representation of the credential;

obtaining, at the client device, a time measured by a timing device of the client device;

generating, at the client device, the graphical representation of the credential based on the credential identifier and the time;

outputting, to a display of the client device, the generated graphical representation in a manner that enables the credential authority to validate the credential by visual inspection of the generated graphical representation;

obtaining a location of the client device;

determining that the location of the client device is within a predefined distance of the location associated with the credential;

responsive to determining that the location of the client device is within the predefined distance of the location associated with the credential, storing, in a memory of the client device, data indicating that the user has entered the location associated with the credential.

11. The method of claim 10, further comprising transmitting, from the client device to a server, a message indicating that the user has entered the location associated with the credential.

12. The method of claim 10, wherein storing, at a client device, a credential associated with a user identifier and a location comprises storing, at a client device, a credential associated with a user identifier, a location, and a time;

the method further comprising;

obtaining a time at the client device responsive to receiving the request to render the representation of the credential;

determining that the time at the client device is within a predefined time period associated with the credential; and

responsive to determining that the location of the client device is within the predefined distance of the location associated with the credential and determining that the time at the client device is within the predefined amount of time of the time associated with the credential, storing data indicating that the user has entered the location associated with the credential at the time associated with the credential.

13. The method of claim 12, further comprising transmitting, from the client device to a server, a message indicating that the user has entered the location associated with the credential.

14. The method of claim 10,

wherein determining that the location of the client device is within a predefined distance of the location associated with the credential comprises determining that the location of the client device is within a first predefined distance of the location associated with the credential;

wherein responsive to determining that the location of the client device is within the predefined distance of the location associated with the credential, storing, in a memory of the client device, data indicating that the user has entered the location associated with the credential comprises responsive to determining that the location of the client device is within the first predefined distance of the location associated with the credential, storing, in a memory of the client device, data indicating that the user has entered the location associated with the credential; and

the method further comprising;

after determining that the location of the client device is within the first predefined distance of the location associated with the credential, determining that the location of the client device is beyond a second predefined distance of the location associated with the credential; and

responsive to determining that the location of the client device is beyond the second predefined distance of the location associated with the credential, storing, in a memory of the client device, data indicating that the user has left the location associated with the credential.

15. The method of claim 14, further comprising transmitting, from the client device to a server, a message indicating that the user has left the location associated with the credential.

16. The method of claim 14, wherein the first predefined distance is the same as the second predefined distance.

17. The method of claim 10, further comprising:

determining that the client device lacks network connectivity;

responsive to determining that the client device lacks network connectivity, caching a message indicating that the user has entered the location associated with the credential for subsequent transmission to a server when network connectivity is restored;

determining that network connectivity has been reestablished; and

responsive to determining that network connectivity has been reestablished, sending the cached message to the server.

18. The method of claim 10, further comprising outputting, at the client device, the representation of the credential in a manner that enables the credential authority to validate the representation.

19. A system comprising:

one or more computers and one or more storage devices storing instructions that are operable, when executed by the one or more computers, to cause the one or more computers to perform operations comprising;

storing, at a client device, a credential identifier associated with a user identifier and a location;

receiving, at the client device, a request to output a graphical representation of the credential in a manner that enables a credential authority to validate the graphical representation;

responsive to receiving the request to output the graphical representation of the credential;

obtaining, at the client device, a time measured by a timing device of the client device;

generating, at the client device, the graphical representation of the credential based on the credential identifier and the time;

outputting, to a display of the client device, the generated graphical representation in a manner that enables the credential authority to validate the credential by visual inspection of the generated graphical representation;

obtaining a location of the client device;

determining that the location of the client device is within a predefined distance of the location associated with the credential;

responsive to determining that the location of the client device is within the predefined distance of the location associated with the credential, storing, in a memory of the client device, data indicating that the user has entered the location associated with the credential.

20. The system of claim 19, wherein the operations further comprise transmitting, from the client device to a server, a message indicating that the user has entered the location associated with the credential.