Zone policy administration for entity tracking and privacy assurance

• US 8,893,224 B2
• Filed: 08/29/2006
• Issued: 11/18/2014
• Est. Priority Date: 08/29/2006
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Horvitz, Eric, Panabaker, Ruston John David, Westerinen, William Jefferson, Frank, Alexander, Klein, Johannes
• Primary Examiner(s): Hoffman, Brandon
• Assistant Examiner(s): Woldemariam, Nega
• Application Number:
  US11/468,039
• Publication Number:
  US 20080072284A1
• Time in Patent Office: 3,003 Days
• Field of Search: 726/17, 726/4.2, 726/34, 726/22, 709/223, 709/229, 709/238, 707/200, 707/204, 707/100, 380/255, 380/229, 380/232, 380/239
• US Class Current: 726/2
• CPC Class Codes: G06F 16/29 Geographical information databases
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 30/00 Computer-aided design [CAD]

Abstract

The present invention includes entity tracking, privacy assurance, and zone policy administration technologies allowing for the creation of zone policies, including the definition of zones and managed entities, the zone policies including rules that apply to the managed entities within or in relation to the zones, and privacy policies assuring privacy of sensitive data. The technologies also provide for the definition of sensors, rule event objects, and default event objects, and for the establishment of associations between rules and managed entities, sensors, and rule event objects so as to create zone policies. Event objects may generate zone policy events or actions upon compliance with or violation of various rules of zone policy. Managed entities are defined as entities associated with mobile devices capable of location tracking and communication with zone policy servers. Entities may be persons, vehicles, animals, or any other object for which tracking and zone policy administration is of value. Zone policy may include privacy policy that may restrict access to or set access conditions for data or information. Privacy policies may be used to ensure individual managed entities and their data remain anonymous to a desired degree and that sensitive data is appropriately protected.

Claims

1. A system for tracking a managed entity and administering a zone policy, the system comprising:

a zone policy server coupled via a network to a mobile device that is associated with an entity, the entity and the mobile device together considered the managed entity, the zone policy server configured for receiving, via the network, a current physical location of the managed entity, and where the entity is a person, animal, or other living creature; and

a zone policy database coupled to the zone policy server, the zone policy database storing a zone policy that includes zone information defining the zone, entity information defining the entity, and an association between the zone and the entity, where the zone information of the zone policy stored in the zone policy database is configured for defining a zone that is a mobile entity, and further configured for defining physical borders of the mobile zone.

2. The system of claim 1 wherein the zone policy database further comprises an event object defining a zone policy event.

3. The system of claim 1 further comprising a sensor that is distinct from the mobile device and the zone policy server and that is coupled to the mobile device and the zone policy server via the network, wherein the sensor is configured to monitor conditions relevant to the zone policy, and wherein the zone policy database further comprises sensor information defining the sensor.

4. The system of claim 1 wherein the zone policy includes a rule.

5. The system of claim 1 wherein the zone policy is automatically applied to the managed entity when the managed entity is within the zone.

6. The system of claim 1 further comprising a zone policy configuration module configured for creating the zone policy, for defining the zone, for defining the entity, or for associating the selected managed entity definition with the defined rule.

7. The system of claim 1 further comprising a zone policy configuration module configured for associating the mobile device with the entity in the zone information.

8. The system of claim 1 where the zone policy includes a privacy policy that restricts access to the zone information or the entity information.

9. A method performed on a computing device, the method comprising:

selecting a zone definition from one or more zone definitions, where the zone definition defines at least a mobile zone that is a mobile entity, and where the zone definition describes physical borders of the mobile zone;

defining a rule that applies to the zone definition;

selecting a managed entity definition from one or more managed entity definitions, where the selected managed entity definition defines a managed entity, where an entity and a mobile device are together considered the managed entity, and where the entity is a person, animal, or other living creature;

associating the selected managed entity definition with the defined rule;

creating the zone policy to include the zone definition, and the description of the physical borders of the mobile zone, and the rule, and the managed entity definition; and

storing the zone policy in a zone policy database.

10. The method of claim 9 where a sensor definition that is associated with the rule is included in the zone policy.

11. The method of claim 9 where a default event object is included in the zone policy.

12. The method of claim 9 where a rule event object that is associated with the rule is included in the zone policy.

13. The method of claim 9 where a sub-rule that is associated with the rule or with another sub-rule is included in the zone policy.

14. The method of claim 9 where a privacy policy is included in the zone policy.

15. A computer-readable device including computer-executable instructions that, when executed by a computer, cause the computer to implement a zone policy framework comprising:

a rule;

a zone definition that defines at least a mobile zone that is a mobile entity, and that describes physical borders of the mobile zone;

a managed entity definition associated with the rule, where the managed entity definition defines a managed entity, where an entity and a mobile device are together considered the managed entity, and where the entity is a person, animal, or other living creature; and

a zone policy including the rule, the zone definition, the description of the physical borders of the mobile zone, and the managed entity definition, where the zone policy is stored in a zone policy database.

16. The computer-readable device of claim 15, the zone policy framework further comprising a privacy profile included in the zone policy.

17. The computer-readable device of claim 15, the zone policy framework further comprising a sub-zone definition included in the zone policy.

18. The computer-readable device of claim 15, the zone policy framework wherein the zone policy is a crawler management policy.