Systems and methods for providing conditional access to transmitted information

• US 9,390,279 B2
• Filed: 08/26/2013
• Issued: 07/12/2016
• Est. Priority Date: 09/11/2012
• Status: Active Grant

• Current Assignee: NextNav, LLC
• Original Assignee: NextNav, LLC
• Inventors: Raghupathy, Arun, Meiyappan, Subramanian, Joseph, Deepak, Vajjhala, Varaprasad
• Primary Examiner(s): Revak, Christopher
• Application Number:
  US14/010,437
• Publication Number:
  US 20140075181A1
• Time in Patent Office: 1,051 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G01S 19/05 providing aiding data
• CPC Class Codes: G01S 5/0236 Assistance data, e.g. base station almanac
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/06 Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]
• CPC Class Codes: H04W 4/90 Services for handling of emergency or hazardous situations, e.g. earthquake and tsunami warning systems [ETWS]

Abstract

Systems, methods and computer program products for controlling access to position information at a receiver based on various considerations, including a requested service type, a user type, a device type, a software application type, and/or other characteristics associated with a particular software application at the receiver from which the position information was requested.

Claims

1. A computer-implemented method for controlling access to position information by one or more location applications on a computing device, said method comprising:

decrypting, during a first service-level decryption step, the position information using a first service-level decryption key to obtain first decrypted position information, wherein the first service-level decryption key is associated with a first location application;

processing, using a computing device, the first decrypted position information based on a first set of one or more limitations related to location services provided by the first location application;

determining a position estimate of the computing device based on the processing of the first decrypted position information;

providing the position estimate to the first location application;

determining, prior to the decrypting during the first service-level decryption step, whether the first service-level decryption key is stored on the computing device;

upon determining that the first service-level decryption key is not stored on the computing device, accessing a first developer key that is associated with the first service-level decryption key and the first location application;

sending the first developer key to a network; and

receiving the first service-level decryption key from the network in response to sending the first developer key.

2. The computer-implemented method of claim 1, further comprising:

receiving the position information from a remote transmitter, wherein the position information is encrypted; and

decrypting, prior to the decrypting during the first service-level decryption step, the position information using a first system-level decryption key associated with the transmitter.

3. The computer-implemented method of claim 1, wherein the first set of one or more limitations specify one or more of a maximum level of position location accuracy available to the first location application, a coverage area within which the position information may be provided to the first location application, or a time period during which the position information may be provided to the first location application.

4. The method of claim 1, wherein the first set of limitations specify one or more of a maximum level of position location accuracy available to a user of the computing device, a coverage area within which the position information may be provided to the user, or a time period during which the position information may be provided to the user.

5. The computer-implemented method of claim 1, wherein the position information comprises latitude, longitude and altitude information.

6. A computer-implemented method for controlling access to position information b one or more location applications on a computing device, the method comprising:

decrypting, during a first service-level decryption step, the position information using a first service-level decryption key to obtain first decrypted position information, wherein the first service-level decryption key is associated with a first location application;

processing, using a computing device, the first decrypted position information based on a first set of one or more limitations related to location services provided by the first location application;

determining a position estimate of the computing device based on the processing of the first decrypted position information;

providing the position estimate to the first location application;

decrypting, during a second service-level decryption step, the position information using a second service-level decryption key to obtain second decrypted position information, wherein the second service-level decryption key is associated with a second location application;

processing the second decrypted position information based on a second set of one or more limitations related to location services provided by the second location application;

determining a second position estimate of the computing device based on the processing of the second decrypted position information; and

providing the second position estimate to the second location application.

7. The computer-implemented method of claim 6, wherein the second set of one or more limitations specify one or more of a maximum level of position accuracy available to the second location application, a coverage area within which the position information may be provided to the second location application, or a time period during which the position information may be provided to the second location application, said method further comprising:

determining, prior to the decrypting during the second service-level decryption step, whether the second service-level decryption key is stored on the computing device;

upon determining that the second service-level decryption key is not stored on the computing device, accessing a second developer key that is associated with the second service-level decryption key and the second location application;

sending the second developer key to a network; and

receiving the second service-level decryption key from the network in response to sending the second developer key.

8. A computer-implemented method for controlling access to position information by one or more location applications on a computing device the method comprising:

decrypting, during a first service-level decryption step, the position information using a first service-level decryption key to obtain first decrypted position information, wherein the first service-level decryption key is associated with a first location application;

processing, using a computing device, the first decrypted position information based on a first set of one or more limitations related to location services provided by the first location application;

determining a position estimate of the computing device based on the processing of the first decrypted position information;

providing the position estimate to the first location application;

determining whether a second location application on the computing device may access the position information based on whether a second service-level decryption key is stored on the computing device;

upon determining that the second service-level decryption key is not stored on the computing device, denying access to the position —

information by the second location application; and

upon determining that the second service-level decryption key is stored on the computing device, providing the position —

information to the second location application.

9. A system for controlling access to position information by one or more location applications on a computing device, the system comprising one or more processors or other devices that:

decrypt, during a first service-level decryption step, the position information using a first service-level decryption key to obtain first decrypted position information, wherein the first service-level decryption key is associated with a first location application;

process the first decrypted position information —

based on a first set of one or more limitations related to location services provided by the first location application;

determine a position estimate of the computing device based on the processing of the first decrypted position information;

provide the position estimate to the first location application;

determine, prior to the decrypting during the first service-level decryption step, whether the first service-level decryption key is stored on the computing device;

upon determining that the first service-level decryption key is not stored on the computing device, access a first developer key that is associated with the first service-level decryption key and the first location application;

send the first developer key to a network; and

receive the first service-level decryption key from the network in response to sending the first developer key.

10. The system of claim 9, wherein the one or more processors or other devices:

receive the position information from a transmitter, wherein the position information is encrypted; and

decrypt, prior to the decrypting during the first service-level decryption step, the position information using a first system level decryption key associated with the transmitter.

11. The system of claim 9, wherein the first set of one or more limitations specify one or more of a maximum level of position location accuracy available to the first location application or to a user of the computing device, a coverage area within which the position information may be provided to the first location application or the user, or a time period during which the position information may be provided to the first location application or the user.

12. A system for controlling access to position information by one or more location applications on a computing device, the system comprising one or more processors or other devices that:

decrypt, during a first service-level decryption step, the position information using a first service-level decryption key to obtain first decrypted position information, wherein the first service-level decryption key is associated with a first location application;

process the first decrypted position information based on a first set of one or more limitations related to location services provided by the first location application;

determine a position estimate of the computing device based on the processing of the first decrypted position information;

provide the position estimate to the first location application;

decrypt, during a second service-level decryption step, the position information using a second service-level decryption key to obtain second decrypted position information, wherein the second service-level decryption key is associated with a second location application;

process the second decrypted position information based on a second set of one or more limitations related to location services provided by the second location application;

determine a second position estimate of the computing device based on the processing of the second decrypted position information; and

provide the second position estimate to the second location application.

13. The system of claim 12, wherein the second set of one or more limitations specify one or more of a maximum level of position accuracy available to the second location application, a coverage area within which the position information may be provided to the second location application, or a time period during which the position information may be provided to the second location application, wherein the one or more processors or other devices:

determine, prior to the decrypting during the second service-level decryption step, whether the second service-level decryption key is stored on the computing device;

upon determining that the second service-level decryption key is not stored on the computing device, access a second developer key that is associated with the second service-level decryption key and the second location application;

send the second developer key to a network; and

receive the second service-level decryption key from the network in response to sending the second developer key.

14. A system for controlling access to position information by one or more location applications on a computing device, the system comprising one or more processors or other devices that:

decrypt, during a first service-level decryption step, the position information using a first service-level decryption key to obtain first decrypted position information, wherein the first service-level decryption key is associated with a first location application;

process the first decrypted position information based on a first set of one or more limitations related to location services provided by the first location application;

determine a position estimate of the computing device based on the processing of the first decrypted position information;

provide the position estimate to the first location application;

determine whether a second location application on the computing device may access the position information based on whether a second service-level decryption key is stored on the computing device;

upon determining that the second service-level decryption key is not stored on the computing device, deny access to the position information by the second location application; and

upon determining that the second service-level decryption key is stored on the computing device, provide the position information to the second location application.

15. A non-transitory computer-readable medium having a computer readable program code embodied therein, said computer readable program code adapted to be executed to implement a method for controlling access to position information by one or more location applications on a computing device, the method comprising:

decrypting, during a first service-level decryption step, the position information using a first service-level decryption key to obtain first decrypted position information, wherein the first service-level decryption key is associated with a first location application;

processing the first decrypted position information based on a first set of one or more limitations related to location services provided by the first location application;

determining a position estimate of the computing device based on the processing of the first decrypted position information;

providing the position estimate to the first location application;

determining, prior to the decrypting during the first service-level decryption step, whether the first service-level decryption key is stored on the computing device;

upon determining that the first service-level decryption key is not stored on the computing device, accessing a first developer key that is associated with the first service-level decryption key and the first location application;

sending the first developer key to a network; and

receiving the first service-level decryption key from the network in response to sending the first developer key.

16. The computer-readable medium of claim 15, the method further comprising:

receiving the position information from a remote transmitter, wherein the position information is encrypted; and

decrypting, prior to the decrypting during the first service-level decryption step, the position information using a first system-level decryption key associated with the transmitter.

17. The computer-readable medium of claim 15, wherein the first set of one or more limitations specify one or more of a maximum level of position location accuracy available to the first location application or to a user of the computing device, a coverage area within which the position information may be provided to the first location application or the user, or a time period during which the position information may be provided to the first location application or the user.

18. A non-transitory computer-readable medium having a computer readable program code embodied therein, said computer readable program code adapted to be executed to implement a method for controlling access to position information by one or more location applications on a computing device, the method comprising:

decrypting, during a first service-level decryption step, the position information using a first service-level decryption key to obtain first decrypted position information, wherein the first service-level decryption key is associated with a first location application;

processing the first decrypted position information based on a first set of one or more limitations related to location services provided by the first location application;

determining a position estimate of the computing device based on the processing of the first decrypted position information;

providing the position estimate to the first location application;

decrypting, during a second service-level decryption step, the position information using a second service-level decryption key to obtain second decrypted position information, wherein the second service-level decryption key is associated with a second location application;

processing the second decrypted position information based on a second set of one or more limitations related to location services provided by the second location application;

determining a second position estimate of the computing device based on the processing of the second decrypted position information; and

providing the second position estimate to the second location application.

19. The computer-readable medium of claim 18, wherein the second set of one or more limitations specify one or more of a maximum level of position accuracy available to the second location application, a coverage area within which the position information may be provided to the second location application, or a time period during which the position information may be provided to the second location application, the method further comprising:

determining, prior to the decrypting during the second service-level decryption step, whether the second service-level decryption key is stored on the computing device;

upon determining that the second service-level decryption key is not stored on the computing device, accessing a second developer key that is associated with the second service-level decryption key and the second location application;

sending the second developer key to a network; and

receiving the second service-level decryption key from the network in response to sending the second developer key.

20. A non-transitory computer-readable medium having a computer readable program code embodied therein, said computer readable program code adapted to be executed to implement a method for controlling access to position information by one or more location applications on a computing device, the method comprising:

decrypting, during a first service-level decryption step, the position information using a first service-level decryption key to obtain first decrypted position information, wherein the first service-level decryption key is associated with a first location application;

processing the first decrypted position information based on a first set of one or more limitations related to location services provided by the first location application;

determining a position estimate of the computing device based on the processing of the first decrypted position information;

providing the position estimate to the first location application;

determining whether a second location application on the computing device may access the position information based on whether a second service-level decryption key is stored on the computing device;

upon determining that the second service-level decryption key is not stored on the computing device, denying access to the position information by the second location application; and

upon determining that the second service-level decryption key is stored on the computing device, providing the position information to the second location application.