Proximity-based authorization

• US 9,031,534 B2
• Filed: 10/29/2013
• Issued: 05/12/2015
• Est. Priority Date: 07/15/2004
• Status: Active Grant

• Current Assignee: Arlington Technologies, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: Avaya Incorporated
• Inventors: Sammon, Michael J., Brotman, Lynne Shapiro, Seligmann, Doree Duncan
• Primary Examiner(s): Patel, Ajit
• Application Number:
  US14/065,653
• Publication Number:
  US 20140051389A1
• Time in Patent Office: 560 Days
• US Class Current: 455/410
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/54 Presence management, e.g. monitoring or registration for receipt of user log-on information, or the connection status of the users
• CPC Class Codes: H04M 1/72457 according to geographic location
• CPC Class Codes: H04M 1/72463 to restrict the functionality of the device
• CPC Class Codes: H04M 2242/14 with services dependent on location
• CPC Class Codes: H04M 2242/30 Determination of the location of a subscriber
• CPC Class Codes: H04M 3/38 Graded-service arrangements, i.e. some subscribers prevented from establishing certain connections queuing arrangements H04Q3/64
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 24/00 Supervisory, monitoring or testing arrangements

Abstract

Methods and apparatuses are disclosed for enabling the response to a command from a wireless terminal to be based at least partially on the presence or absence of other users nearby, and possibly the identity of those users. In the illustrated embodiment, a server maintains an updated list of the locations of fixed and wireless terminals within an area (e.g., an IEEE 802.11 wireless access point'"'"'s area of coverage, a CDMA base station'"'"'s cell, etc.). When a user issues a command to his or her wireless terminal, the command is transmitted to the server. The server determines whether there are any other nearby wireless terminals (and inferentially, the users associated with these terminals), and then determines whether the command is authorized in that environment.

Claims

1. A method comprising:

receiving a request from a first communications terminal to execute a command;

based on a distance between the first communications terminal and a second communications terminal, authorizing, via a processor, execution of the command to yield a product;

based on the distance, encrypting the product to yield an encrypted product; and

transmitting the encrypted product to the first communications terminal.

2. The method of claim 1, wherein authorizing the execution is further based on a threshold distance.

3. The method of claim 2, wherein the execution of the command is authorized when the first communications terminal is within the threshold distance of the second communications terminal.

4. The method of claim 2, wherein the execution of the command is authorized when the first communications terminal is beyond the threshold distance of the second communications terminal.

5. The method of claim 1, wherein authorizing the execution is further based on a geographic perimeter associated with the first communications terminal.

6. The method of claim 1, wherein authorizing the execution is further based on a hierarchy of users comprising a first user associated with the first communications terminal and a second user associated with the second communications terminal.

7. The method of claim 1, wherein authorizing the execution is further based on a list of pre-authorized commands.

8. A system comprising:

a processor; and

a computer-readable storage device storing instructions which, when executed by the processor, cause the processor to perform operations comprising;

receiving a request from a first communications terminal to execute a command;

based on a distance between the first communications terminal and a second communications terminal, authorizing execution of the command to yield a product;

based on the distance, encrypting the product to yield an encrypted product; and

transmitting the encrypted product to the first communications terminal.

9. The system of claim 8, wherein authorizing the execution is further based on a threshold distance.

10. The system of claim 9, wherein the authorization to execute the command is denied when the first communications terminal is within the threshold distance of the second communications terminal.

11. The system of claim 9, wherein the execution of the command is authorized when the first communications terminal is within the threshold distance of the second communications terminal.

12. The system of claim 8, wherein the execution of the command is authorized when the first communications terminal is beyond the threshold distance of the second communications terminal.

13. The system of claim 8, wherein authorizing the execution is further based on a hierarchy of users comprising a first user associated with the first communications terminal and a second user associated with the second communications terminal.

14. A computer-readable storage device storing instructions which, when executed by the processor, cause the processor to perform operations comprising:

receiving a request from a first communications terminal to execute a command;

based on a distance between the first communications terminal and a second communications terminal, authorizing, execution of the command to yield a product;

based on the distance, encrypting the product to yield an encrypted product; and

transmitting the encrypted product to the first communications terminal.

15. The computer-readable storage device of claim 14, wherein authorizing the execution is further based on a threshold distance.

16. The computer-readable storage device of claim 14, wherein the execution of the command is authorized when the first communications terminal is within the threshold distance of the second communications terminal.

17. The computer-readable storage device of claim 14, wherein the execution of the command is authorized when the first communications terminal is beyond the threshold distance of the second communications terminal.

18. The computer-readable storage device of claim 14, wherein authorizing the execution is further based on a geographic perimeter associated with the first communications terminal.

19. The computer-readable storage device of claim 14, wherein authorizing the execution is further based on a hierarchy of users comprising a first user associated with the first communications terminal and a second user associated with the second communications terminal.

20. The computer-readable storage device of claim 14, wherein authorizing the execution is further based on a list of pre-authorized commands.