Limiting services based on location

• US 8,832,792 B2
• Filed: 08/03/2005
• Issued: 09/09/2014
• Est. Priority Date: 08/03/2005
• Status: Active Grant

• Current Assignee: AT&T Mobility II LLC (AT&T, Inc.)
• Original Assignee: AT&T Mobility II LLC (AT&T, Inc.)
• Inventors: Mikan, Jeffrey Clinton
• Primary Examiner(s): Hirl, Joseph P.
• Assistant Examiner(s): BELL, KALISH K
• Application Number:
  US11/196,005
• Publication Number:
  US 20070030973A1
• Time in Patent Office: 3,324 Days
• Field of Search: 726 2- 7, 726/11, 726 26- 27, 380/270, 709217-219, 709/225, 709/229, 709/232
• US Class Current: 726/3
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/14 Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed
• CPC Class Codes: H04W 64/00 Locating users or terminals or network equipment for network management purposes, e.g. mobility management
• CPC Class Codes: H04W 80/00 Wireless network protocols or protocol adaptations to wireless operation

Abstract

A system for authorizing services in wireless devices based on a type of service requested and a location of the wireless device. For example, in a wireless telephony system, when a session is set up via an Internet Protocol-based system, an application server queries a location service for the location of the handset requesting the service. If the handset or the receiving handset is in a location that is not authorized for the requested service based on the position of the handset, the connection is not enabled. A message may be transmitted to the sending handset to inform a user that the service is not authorized for the location.

Claims

1. A method comprising:

receiving, by a subsystem of a wireless network, a request for a service in connection with two separate wireless devices using the wireless network and based upon locations of the two separate wireless devices, the request being received from a first wireless device and pertaining to a second wireless device that is distinct from the first wireless device;

comparing, by the subsystem of the wireless network a location of the first wireless device and a location of the second wireless device to location data stored within a database of the wireless network, the location data including a geographic location at which the service is not authorized;

determining, by the subsystem of the wireless network, whether a current time matches a predetermined time of restriction;

determining, by the subsystem of the wireless network, whether the service relates to a first type of communication;

determining, by the subsystem of the wireless network, based on a result of the comparing whether the service pertaining to the first wireless device and the second wireless device is authorized, wherein the service is authorized if the results indicate that both the first wireless device and the second wireless device are not located at the geographic location at which the service is not authorized;

in response to determining that the service is authorized, provisioning, by the subsystem of the wireless network, the service in connection with the two separate wireless devices; and

in response to determining that the service is not authorized,

blocking, by the subsystem of the wireless network, access to the service if it is determined that the service relates to the first type of communication, there is a restriction on the service at the current location, and the current time matches the predetermined time, and

sending, by the subsystem of the wireless network, a text message to the first wireless device, the text message indicating;

that the service is not authorized at the geographic location,

that the service is not authorized for the type of communication, and

that the service is not authorized for the current time.

5. The method of claim 1, further comprising receiving, by the subsystem of the wireless network, a session initiation protocol invite message.

6. The method of claim 5, wherein the subsystem comprises an internet protocol multimedia subsystem of the wireless network.

7. The method of claim 6, further comprising setting up a session via the internet protocol multimedia subsystem.

2. A wireless network system comprising:

a database having a geographic location at which a service is not authorized;

a processor; and

a computer-readable medium comprising computer-executable instructions that, when executed by the processor, cause the processor to perform operations comprising;

receiving a request for the service from a first wireless device, the request pertaining to a second wireless device, the second wireless device being distinct from the first wireless device;

determining whether a current time matches a predetermined time of restriction;

determining whether the service relates to a first type of communication;

comparing a location of the first wireless device and a location of the second wireless device to location data stored within the database, the location data including the geographic location at which the service is not authorized;

determining, based on a result of the comparing whether the service pertaining to the first wireless device and the second wireless device is authorized, wherein the service is authorized if both the first wireless device and the second wireless device are not located at the geographic location at which the service is not authorized;

in response to determining that the service is authorized, provisioning the service in connection with the two separate wireless devices; and

in response to determining that the service is not authorized,

blocking access to the service if it is determined that the service relates to the first type of communication, there is a restriction on the service at the current location, and the current time matches the predetermined time, and

sending a text message to the first wireless device, the text message indicating;

that the service is not authorized at the geographic location,

that the service is not authorized for a type of communication, and

that the service is not authorized for the current time.

3. The system of claim 2, wherein the request includes a session initiation protocol invite message.

4. A method comprising:

receiving, by a mobile station, a message comprising data regarding a restriction to accessing a service, the data regarding the restriction to accessing the service comprising a location of restriction, a predetermined time of restriction, and a first type of communication;

determining, by the mobile station whether a current location of the mobile station is within the location of restriction;

determining, by the mobile station whether a current time matches the predetermined time of restriction;

determining, by the mobile station whether the service relates to a first type of communication;

blocking, by the mobile station, access to the service if it is determined that

the service relates to the first type of communication,

there is a restriction on the service at the current location, and

the current time matches the predetermined time;

in response to blocking access to the service, sending a text message to the mobile station, the text message indicating;

that the service is not authorized for the first type of communication;

that there is the restriction on the service at the current location; and

that the service is not authorized for the current time; and

allowing, by the mobile station, access to the service if it is determined that;

there is no restriction on the requested service at the current location; and

the current time does not match the predetermined time.