Location-based system permissions and adjustments at an electronic device

• US 8,961,619 B2
• Filed: 01/06/2009
• Issued: 02/24/2015
• Est. Priority Date: 01/06/2009
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Gum, Arnold Jason
• Primary Examiner(s): SIMITOSKI, MICHAEL J
• Application Number:
  US12/349,236
• Publication Number:
  US 20100175116A1
• Time in Patent Office: 2,240 Days
• Field of Search: 726/6, 726/35, 380/258
• US Class Current: 726/35
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 21/81 by operating on the power supply, e.g. enabling or disabling power-on, sleep or resume operations
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 2221/2147 Locking files
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed

Abstract

Securing access to a portable electronic device (PED), securing e-commerce transactions at an electronic device (ED) and dynamically adjusting system settings at a PED are disclosed. In an example, usage or mobility characteristics of the PED or ED (e.g., a location of the ED or PED, etc.) are compared with current parameters of the PED or ED. A determination as to whether to permit an operation (e.g., access, e-commerce transaction, etc.) at the ED or PED can be based at least in part upon a degree to which the current parameters conform with the usage or mobility characteristics. In another example, at least a current location of a PED can be used to determine which system settings to load at the PED.

Claims

1. A method of managing permission and authorization for actions and information access on a portable electronic device, comprising:

detecting an attempt to access the portable electronic device;

determining a security level associated with the detected access attempt based at least in part on a given location characteristic of the portable electronic device;

selecting one of a plurality of usage profiles of the portable electronic device based on the determined security level;

determining that one or more usage characteristics associated with the detected attempt do not conform with the selected usage profile of the portable electronic device, the selected usage profile including one or more pre-defined usages of the portable electronic device, each pre-defined usage associated with a location characteristic of the portable electronic device;

responsive to the determination that the one or more usage characteristics do not conform with the selected usage profile, performing an authentication procedure to authorize the detected attempt, wherein a type of authentication required by the authentication procedure is variable based on the determined security level;

responsive to authorizing the detected attempt, updating the selected usage profile to include the one or more usage characteristics among the pre-defined usages for the selected usage profile; and

permitting access to the portable electronic device.

2. The method of claim 1, further comprising:

entering a learn mode, the learn mode permitting access to the portable electronic device and bypassing the determining that usage characteristics associated with the detected attempt do not conform with the selected usage profile and the performing the authentication procedure; and

adding usage characteristics of the portable electronic device to the usage profile while the portable electronic device remains in the learn mode.

3. The method of claim 2, further comprising:

exiting the learn mode; and

repeating the detecting, the determining that usage characteristics associated with the detected attempt do not conform with the selected usage profile, and the performing the authentication procedure for a subsequent access attempt.

4. The method of claim 3, wherein the exiting exits the learn mode after a given amount of time that is either based on user input or defaulted at the portable electronic device.

5. The method of claim 1, wherein the attempt to access the portable electronic device includes at least one of powering-up the portable electronic device, accessing information on the portable electronic device or requesting that the portable electronic device perform a given action.

6. The method of claim 1, wherein determining the security level is further based on at least one non-location characteristic in addition to the location characteristic.

7. The method of claim 1, wherein the performing the authentication procedure includes:

prompting a user of the portable electronic device for authentication.

8. The method of claim 7, wherein a first level of authentication associated with the user prompt is higher than a second level of authentication that would be required if the usage characteristics conform with the usage profile.

9. The method of claim 7, wherein the permitting access permits access to the portable electronic device if the user provides adequate authentication in response to the prompting.

10. The method of claim 9, wherein the updating comprises:

updating the usage profile with the usage characteristics associated with the detected attempt if (i) the usage characteristics do not conform with the usage profile and (ii) the user provides adequate authentication in response to the prompting.

11. The method of claim 9, further comprising:

if the user fails to provide adequate authentication in response to the user prompt, performing one or more of locking the portable electronic device, sending a notification indicating an access violation of the portable electronic device, encrypting information on the portable electronic device or deleting information on the portable electronic device.

12. The method of claim 1, further comprising:

if the authentication procedure fails, performing one or more of locking the portable electronic device, sending a notification indicating an access violation of the portable electronic device, encrypting information on the portable electronic device or deleting information on the portable electronic device.

13. The method of claim 1, wherein the usage characteristics of the portable electronic device used in the comparison include a current location of the portable electronic device.

14. The method of claim 13, wherein the usage characteristics further includes environmental information that describes an operating environment of the portable electronic device.

15. The method of claim 14, wherein the environmental information includes one or more of detectable wireless signals or received sound.

16. The method of claim 15, wherein the environmental information includes signals received at the portable electronic device.

17. The method of claim 16, wherein the received signals include one or more of cellular signals, WiFi signals or satellite positioning system (SPS) signals.

18. The method of claim 1, wherein the location characteristic corresponds to at least one of a geographic location of the portable electronic device, whether the portable electronic device resides in a given geographic range or signals received at the portable electronic device.

19. The method of claim 18, wherein the received signals include one or more of cellular signals, WiFi signals or satellite positioning system (SPS) signals.

20. A portable electronic device, comprising:

a processor configured to detect an attempt to access the portable electronic device;

the processor configured to determine a security level associated with the detected access attempt based at least in part on a given location characteristic of the portable electronic device;

logic for selecting one of a plurality of usage profiles of the portable electronic device based on the determined security level;

the processor configured to determine that usage characteristics associated with the detected attempt do not conform with the selected usage profile, the selected usage profile including one or more pre-defined usages of the portable electronic device, each pre-defined usage associated with a location characteristic of the portable electronic device;

logic for performing, responsive to the determination that the usage characteristics do not conform with the selected usage profile, an authentication procedure to authorize the detected attempt, wherein a type of authentication required by the authentication procedure is variable based on the determined security level;

logic for updating, responsive to authorizing the detected attempt, the selected usage profile to include the one or more usage characteristics among the pre-defined usages for the selected usage profile; and

logic for permitting access to the portable electronic device.

21. The portable electronic device of claim 20, further comprising:

logic for performing, if the authentication procedure fails, one or more of locking the portable electronic device, sending a notification indicating an access violation of the portable electronic device, encrypting information on the portable electronic device or deleting information on the portable electronic device.

22. The portable electronic device of claim 20, wherein the location characteristic corresponds to at least one of a geographic location of the portable electronic device, whether the portable electronic device resides in a given geographic range or signals received at the portable electronic device.

23. A portable electronic device, comprising:

a processor configured to detect an attempt to access the portable electronic device;

the processor configured to determine a security level associated with the detected access attempt based at least in part on a given location characteristic of the portable electronic device;

the processor configured to select one of a plurality of usage profiles of the portable electronic device based on the determined security level;

the processor configured to determine that usage characteristics associated with the detected attempt do not conform with the selected usage profile, the selected usage profile including one or more pre-defined usages of the portable electronic device, each pre-defined usage associated with a location characteristic of the portable electronic device;

the processor configured to perform, responsive to the determination that the usage characteristics do not conform with the selected usage profile, an authentication procedure to authorize the detected attempt, wherein a type of authentication required by the authentication procedure is variable based on the determined security level;

the processor configured to update, responsive to authorizing the detected attempt, the selected usage profile to include the one or more usage characteristics among the pre-defined usages for the selected usage profile; and

the processor configured to permit access to the portable electronic device.

24. The portable electronic device of claim 23, further comprising:

logic configured to perform, if the authentication procedure fails, one or more of locking the portable electronic device, sending a notification indicating an access violation of the portable electronic device, encrypting information on the portable electronic device or deleting information on the portable electronic device.

25. The portable electronic device of claim 23, wherein the location characteristic corresponds to at least one of a geographic location of the portable electronic device, whether the portable electronic device resides in a given geographic range or signals received at the portable electronic device.

26. A non-transitory computer-readable medium comprising instructions, which, when executed by a portable electronic device, cause the portable electronic device to perform operations, the instructions comprising:

program code to detect an attempt to access the portable electronic device;

program code to determine a security level associated with the detected access attempt based at least in part on a given location characteristic of the portable electronic device;

program code to select one of a plurality of usage profiles of the portable electronic device based on the determined security level;

program code to determine that one or more usage characteristics associated with the detected attempt do not conform with the selected usage profile of the portable electronic device, the selected usage profile including one or more pre-defined usages of the portable electronic device, each pre-defined usage associated with a location characteristic of the portable electronic device;

program code to perform, responsive to the determination that the one or more usage characteristics do not conform with the selected usage profile, an authentication procedure to authorize the detected attempt, wherein a type of authentication required by the authentication procedure is variable based on the determined security level;

program code to update, responsive to authorizing the detected attempt, the selected usage profile to include the one or more usage characteristics among the pre-defined usages for the selected usage profile; and

program code to permit access to the portable electronic device.

27. The non-transitory computer-readable medium of claim 26, further comprising:

program code to perform, if the authentication procedure fails, one or more of locking the portable electronic device, sending a notification indicating an access violation of the portable electronic device, encrypting information on the portable electronic device or deleting information on the portable electronic device.

28. The non-transitory computer-readable medium of claim 26, wherein the location characteristic corresponds to at least one of a geographic location of the portable electronic device, whether the portable electronic device resides in a given geographic range or signals received at the portable electronic device.