Location-sensitive security levels and setting profiles based on detected location

• US 8,886,217 B2
• Filed: 12/31/2012
• Issued: 11/11/2014
• Est. Priority Date: 12/31/2012
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Reitter, Alexander, Amm, David, Missig, Julian, Walsh, Raymond
• Primary Examiner(s): Gelin, Jean
• Application Number:
  US13/731,893
• Publication Number:
  US 20140187200A1
• Time in Patent Office: 680 Days
• Field of Search: 455/456.1, 455/456.2, 455/456.3, 455/456.5, 455/456.6
• US Class Current: 455/456.1
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/67 Risk-dependent, e.g. selecting a security level depending on risk profiles
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/30 Services specially adapted for particular environments, situations or purposes

Abstract

The security level and/or other device behavior, configurations, or settings on a mobile device can be modified based on the location of the mobile device. The location of the mobile device can be determined by analyzing location aspects present at a location, where any parameters or attributes of a location that can assist in identifying a particular location may be used as location aspects. In a setup process, the mobile device identifies available aspects at a location and can use the available aspects to determine a location context associated with a location. In a use example, the device identifies available aspects at a location and determines whether the available aspects match a previously defined location context. If the available aspects match the previously defined location context, device behavior, configurations, or settings on a mobile device can be modified.

Claims

1. A method of managing security levels, the method comprising:

implementing, at a mobile device, a baseline security level;

detecting, by the mobile device, a plurality of location aspects available at a location of the mobile device, wherein each of the location aspects indicate an attribute of the location;

determining, by the mobile device, a first location context of the mobile device based on the detected plurality of location aspects;

associating, by the mobile device, the first location context with a first location for modified security; and

implementing, by the mobile device, a first security level based on the first location context.

2. The method of claim 1, wherein one of the plurality of location aspects includes geographic location information.

3. The method of claim 1, wherein one of the plurality of location aspects includes proximity to a particular device.

4. The method of claim 1, wherein one of the plurality of location aspects includes detection of a particular network.

5. The method of claim 4, wherein one of the plurality of location aspects includes detection of a particular access point associated with the particular network.

6. A non-transitory computer readable storage medium having program code stored thereon, the program code including instructions that, when executed by a processor in a mobile device, cause the processor to execute operations comprising:

implementing a baseline security level;

detecting a plurality of location aspects available at a location of the mobile device, wherein each of the location aspects indicate an attribute of the location;

determining a first location context of the mobile device based on the detected plurality of location aspects;

associating the first location context with a first location for modified security; and

implementing a first security level based on the first location context.

7. The computer readable storage medium of claim 6, wherein one of the plurality of location aspects includes geographic location information.

8. The computer readable storage medium of claim 6, wherein one of the plurality of location aspects includes proximity to a particular device.

9. The computer readable storage medium of claim 6, wherein one of the plurality of location aspects includes detection of a particular network.

10. The computer readable storage medium of claim 9, wherein one of the plurality of location aspects includes detection of a particular access point associated with the particular network.

11. A method of initializing location-based security levels, the method comprising:

receiving, at a mobile device, an instruction to set up a modified security level associated with a first location;

analyzing a plurality of location aspects available at the first location, wherein each of the location aspects indicate an attribute of the location;

selecting one or more available location aspects to associate with the first location; and

assigning a first security level to the first location; and

implementing, by the mobile device, the first security level based on detecting one or more location aspects associated with the first location.

12. The method of claim 11, wherein the first security level requires an increased or decreased security requirement.

13. The method of claim 11, wherein analyzing the plurality of location aspects available at the first location includes detecting available wireless networks.

14. The method of claim 11, wherein analyzing the plurality of location aspects available at the first location includes detecting proximate devices using a short-range wireless communication technology.

15. The method of claim 11 further comprising:

displaying the plurality of location aspects available at the first location on a display of the mobile device; and

receiving, from a user input, a modification of the selected one or more available location aspects to associate with the first location.

16. A non-transitory computer readable storage medium having program code stored thereon, the program code including instructions that, when executed by a processor in a mobile device, cause the processor to execute operations comprising:

receiving an instruction to set up a modified security level associated with a first location;

analyzing a plurality of location aspects available at the first location, wherein each of the location aspects indicate an attribute of the location;

selecting one or more available location aspects to associate with the first location; and

assigning a first security level to the first location; and

implementing, by the mobile device, the first security level based on detecting one or more location aspects associated with the first location.

17. The computer readable storage medium of claim 16, wherein the first security level requires an increased or decreased security requirement.

18. The computer readable storage medium of claim 16, wherein analyzing the plurality of location aspects available at the first location includes identifying available wireless networks.

19. The computer readable storage medium of claim 16, wherein analyzing the plurality of location aspects available at the first location includes identifying for proximate devices using a short-range wireless communication technology.

20. The computer readable storage medium of claim 16, wherein the method further comprises:

displaying the plurality of location aspects available at the first location on a display of the mobile device; and

receiving, from a user input module, a modification of the selected one or more available location aspects to associate with the first location.

21. A mobile device comprising:

one or more hardware modules for detecting location aspects;

an interface configured to communicate with the one or more hardware modules; and

control logic coupled to the interface, the control logic being configured to;

implement a first security level;

detect one or more location aspects available at a current location of the mobile device, wherein each of the location aspects indicate an attribute of the location;

determine a location context of the mobile device based on the one or more location aspects detected;

determine whether the location context is associated with a location for modified security;

if the location context is associated with a location for modified security, implement a second security level at the location for modified security; and

if the location context is not associated with a location for modified security, continue to implement the first security level.

22. The mobile device of claim 21, wherein the hardware modules include a GPS unit.

23. The mobile device of claim 21, wherein the hardware modules include one or more of the following:

a long-range wireless transceiver, a medium-range wireless transceiver, or a short-range wireless transceiver.

24. The mobile device of claim 23, wherein the control logic is further configured to:

determine whether one more or more wireless networks or wireless devices are available using at least one of the long-range wireless transceiver, the medium-range wireless transceiver, or the short-range wireless transceiver.

25. The mobile device of claim 21, wherein the first security level is a baseline security level and the second security level is an increased security level.