Location privacy enforcement in a location-based services platform

• US 8,855,665 B2
• Filed: 06/12/2009
• Issued: 10/07/2014
• Est. Priority Date: 12/17/2008
• Status: Active Grant

• Current Assignee: Avaya Incorporated
• Original Assignee: Avaya Incorporated
• Inventors: Buford, John, Krishnaswamy, Venkatesh, Wu, Xiaotao
• Primary Examiner(s): Bost, Dwayne
• Assistant Examiner(s): MUMMALANENI, MRUNALINI YERNENI
• Application Number:
  US12/484,094
• Publication Number:
  US 20100151885A1
• Time in Patent Office: 1,943 Days
• Field of Search: 455/456.3, 455/456.2, 455/456.1, 455/456.5, 455/456.6, 455/457, 455/404.1, 455/404.2, 455/414.1, 705/51, 705/10, 707/1
• US Class Current: 455/456.1
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/20 Services signaling; Auxiliary data signalling, i.e. transmitting data via a non-traffic channel

Abstract

A method for determining the privacy settings for location-based services without some of the disadvantages of the prior art is disclosed. This is done by establishing a session between the location generator and the location recipient. The session is created by a validator that is capable of keeping track of the rules for a stream of location objects created by a location generator. The validator determines what information to send to the location recipient without having to determine the rules for each location object and each location recipient every time a new location object is received by the location server.

Claims

1. A method comprising:

receiving, by a location server, a request from a first device for current location information of a second device at an instance in time;

receiving, by the location server, the current location information from the second device, the current location information comprising location coordinates of the second device;

accessing by the location server, rules associated with the first device and the second device, the rules comprising (i) permissions for the first device and the second device for dissemination of location information, (ii) granularity of the location information based on a relationship between the first device and the second device, and (iii) a predetermined time duration comprising a start time and a stop time during which the location information can be disseminated;

when the first device has permission to access the location information, the second device has permission to share the location information with the first device, and the instance in time is within the start time and the stop time;

establishing an active session between the first device and the second device when, based on the location coordinates, a distance between the first device and the second device is within a threshold distance;

granting the first device access to the location coordinates of the second device when, based on the rules, the first device satisfies a first relationship with the second device;

granting the first device access to general location information of the second device when, based on the rules, the first device satisfies a second relationship with the second device; and

restricting the first device from accessing the currently location information of the second device when, based on the rules, the first device satisfies a third relationship with the second device;

maintaining the active session and the access to the current location information when the distance is outside the threshold distance; and

revoking the access and terminating the active session upon meeting the stop time;

when (i) the first device does not have permission to access the location information, (ii) the second device does not have permission to share the location information with the first device, or (iii) the instance in time is outside the time duration;

not establishing an active session between the first device and the second device and denying the first device access to the current location information of the second device.

2. The method of claim 1, wherein granting the first device the access to the location coordinates comprises:

allowing the first device to receive exact location coordinates of the second device.

3. The method of claim 1, wherein the access is restricted based on an identity associated with the first device.

4. The method of claim 1, wherein the predetermined time duration further comprises one of an allowed time or a not allowed time.

5. The method of claim 1, wherein the first device belongs to a member of a business organization.

6. A system comprising:

a processor operable;

to perform operations comprising;

receiving, by a location server, a request from a first device for current location information of a second device at an instance in time;

receiving, by the location server, the current location information from the second device, the current location information comprising location coordinates of the second device;

accessing by the location server, rules associated with the first device and the second device, the rules comprising (i) permissions for the first device and the second device for dissemination of location information, (ii) granularity of the location information based on a relationship between the first device and the second device, and (iii) a predetermined time duration comprising a start time and a stop time during which the location information can be disseminated;

when the first device has permission to access the location information, the second device has permission to share the location information with the first device, and the instance in time is within the start time and the stop time;

establishing an active session between the first device and the second device when, based on the location coordinates, a distance between the first device and the second device satisfies is within a threshold distance;

granting the first device access to the location coordinates of the second device when, based on the rules, the first device satisfies a first relationship with the second device;

granting the first device access to general location information of the second device when, based on the rules, the first device satisfies a second relationship with the second device; and

restricting the first device from accessing the current location information of the second device when, based on the rules, the first device satisfies a third relationship with the second device;

maintaining the active session and the access to the current location information when the distance is outside the threshold distance; and

revoking the access and terminating the active session upon meeting the stop time;

when (i) the first device does not have permission to access the location information, (ii) the second device does not have permission to share the location information with the first device, or (iii) the instance in time is outside the time duration;

not establishing an active session between the first device and the second device and denying the first device access to the current location information of the second device.

7. The system of claim 6, wherein the access is restricted based on an identity associated with the first device.

8. The system of claim 6, wherein the first device is associated with a business.