Geospatial cryptagraphy

• US 9,654,449 B2
• Filed: 06/05/2015
• Issued: 05/16/2017
• Est. Priority Date: 10/19/2012
• Status: Active Grant

• Current Assignee: Saife Inc.
• Original Assignee: Saife Inc.
• Inventors: Lindteigen, Ty B, Jones, James Chester
• Primary Examiner(s): Hirl, Joseph P
• Assistant Examiner(s): Gyorfi, Thomas
• Application Number:
  US14/731,409
• Publication Number:
  US 20160021069A1
• Time in Patent Office: 711 Days
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 9/0872 using geo-location information, e.g. location data, time, relative position or proximity to other entities
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

The invention includes methods for authenticating access between devices when the devices are within a geospatial boundary comprising the first step of keeping track of the physical position of the devices using both low and, or high fidelity geospatial positioning techniques. Next, a first device determines whether any nearby mobile devices have entered the geospatial boundary. Next, the first device determines if any of the mobile devices are peers eligible for cryptographic authentication. After the first device authenticates that the other device within the geospatial boundary is a trusted peer, the devices may perform various data and, or dynamic policy operations.

Claims

1. A system for authenticating access between a fixed device and a mobile device comprising:

a control agent that is not enabled to decrypt or read an encrypted signal and is only enabled to send the encrypted signal to the mobile device;

the fixed device surrounded by a geospatial boundary, and the fixed device enabled to determine when the mobile device has entered the geospatial boundary;

the mobile device enabled to ascertain a geospatial position of the mobile device, and to send an encrypted signal that includes the geospatial position of the mobile device to the control agent;

wherein the control agent is enabled to determine that the mobile device is within the geospatial boundary, and to send an updated contact list to the fixed device;

wherein the fixed device is enabled to receive the updated contact list, use the updated contact list to determine that the mobile device is a peer, and transmit an encrypted signal to the fixed device via the control agent;

the mobile device enabled to decrypt the encrypted signal and access the high fidelity position of the fixed device, use the high fidelity position of the fixed device to determine that the mobile device is still within the geospatial boundary, and update the contact list to establish authenticated access with the fixed device.

2. The system of claim 1, wherein the encrypted signal includes a high fidelity position and a unique identification information of the fixed device.

3. The system of claim 1, wherein the geospatial position includes the absolute position of the mobile device.

4. The system of claim 1, wherein the geospatial position includes an Internet protocol (“

IP”

) address that can be used to calculate a relative position of the mobile device.

5. The system of claim 1, wherein the fixed device is enabled to determine that the mobile device is within the geospatial boundary when the fixed device and the mobile device use a common resource.

6. The system of claim 1, wherein the fixed device is enabled to determine that the mobile device is within the geospatial boundary when the fixed device and the mobile device each detect a same physical feature, the same physical feature is also located within the geospatial boundary.

7. The system of claim 1, wherein a shape of the geospatial boundary is enabled to change.

8. The system of claim 7, wherein the shape of the geospatial boundary is enabled to change based on a parameter including a date, duration, frequency, temperature, or detection of malicious activity.

9. A system for authenticating access between a first mobile device and a second mobile device comprising:

a geospatial boundary that moves relative to and surrounds the first mobile device;

a control agent;

the second mobile device enabled to ascertain a geospatial position of the second mobile device and use the geospatial position of the second mobile device to determine when the second mobile device is within the geospatial boundary, and to send a signal that includes the geospatial position of the second mobile device to the control agent;

wherein the control agent is enabled to determine that the second mobile device is within the geospatial boundary, to determine that the first mobile device and the second mobile device are peers, to update a first contact list including identifying information of the first mobile device and a second contact list including identifying information of the second mobile device, and to send the second contact list to the first mobile device and the first contact list to the second mobile device;

wherein the first mobile device is enabled to determine that the second mobile device is a trusted peer by recognizing that the control agent has already determined that the second mobile device is a trusted peer; and

the first mobile device and the second mobile device each enabled to update its respective contact list to finalize authenticated access with each other.

10. The system of claim 9, wherein the geospatial position includes an absolute position of the first mobile device and the second mobile device.

11. The system of claim 9, wherein the first mobile device is enabled to determine that the second mobile device is within the geospatial boundary when the first mobile device and the second mobile device use a common resource.

12. The system of claim 9, wherein the first mobile device is enabled to determine that the second mobile device is within the geospatial boundary when the first mobile device and the second mobile device each detect a same feature, wherein the same feature is also located within the geospatial boundary.

13. The system of claim 9, wherein a shape of the geospatial boundary is enabled to change.

14. The system of claim 13, wherein the shape of the geospatial boundary is enabled to change based on a parameter including a date, duration, frequency, temperature, or detection of malicious activity.

15. The system of claim 9, wherein the first mobile device and the second mobile device are enabled to perform an operation while the second mobile device is within the geospatial boundary.

16. The system of claim 9, wherein the control agent is a known trusted device.

17. The system of claim 9 wherein, the first mobile device and the second mobile device remain anonymous until a trusted authentication is established between the first mobile device and the second mobile device.

18. The system of claim 9 wherein, the first mobile device is enabled to determine that the second mobile device is a trusted peer by recognizing that the control agent has already determined that the second mobile device is a trusted peer.

19. The system of claim 9, wherein the geospatial position includes an Internet protocol (“

IP”

) address used to calculate a relative position of the second mobile device.