Dynamic profile sharing using expiring tokens

• US 9,723,011 B2
• Filed: 01/09/2017
• Issued: 08/01/2017
• Est. Priority Date: 01/17/2014
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: DeLuca, Lisa Seacat, Do, Lydia M., Lakshmanan, Geetika T.
• Primary Examiner(s): POTRATZ, DANIEL B
• Application Number:
  US15/401,399
• Publication Number:
  US 20170111366A1
• Time in Patent Office: 204 Days
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 65/403 Arrangements for multi-party communication, e.g. for conferences data switching systems for conference H04L12/18; arrangements for connecting several subscribers to a common circuit, i.e. affording conference facilities H04M3/56; television conferencing systems H04N7/15
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/146 Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 9/0872 using geo-location information, e.g. location data, time, relative position or proximity to other entities
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/029 Location-based management or tracking services

Abstract

Access to a user profile of a user device at a location may be provided to a destination device upon detecting that the location is within a proximity of a destination location. An expiring token may be generated, associated with the user profile, and communicated to the second device. Access to the user profile provided to the destination device may be terminated upon an expiration of the expiring token.

Claims

1. A computer system for dynamically sharing a user profile of a user device, comprising:

a computer having a processor and a tangible storage device;

a program embodied on the storage device for execution by the processor, the program having a plurality of program instructions, including instructions for;

providing, by the user device, to a destination device, access to the user profile of the user device, upon detecting that a location of the user device is within a proximity of the destination device, wherein providing access to the user profile comprises receiving an input from a user of the user device to select the user profile from among a plurality of user profiles, wherein providing access to the user profile comprises prompting the user to allow generation of an expiring token and receiving an input from the user indicating permission to generate the expiring token, wherein the user profile includes at least one of electronic medical records, dining preferences, driving records, or shopping preferences, wherein the proximity is configurable by the user device, wherein the location is defined as a geographic area centered on a pair of latitude and longitude coordinates;

generating, by the user device, the expiring token comprising a unique identification code, wherein expiration of the expiring token occurs upon detecting at least one of the proximity exceeding a threshold value or a defined time elapsing since generating the expiring token, wherein the defined time comprises a duration dynamically set by the user device during runtime of the method on the computer, and wherein the expiration of the token is further based on a token expiration policy defined by the user device during runtime, the token expiration policy comprising a selection by the user device of an expiration by time, location change, or both;

associating, by the user device, the expiring token with the user profile;

communicating, by the user device, the expiring token to the destination device, performing, by the user device, at least one of the following;

denying access to the user profile in response to receiving a communication from the destination device lacking the unique identification code;

or updating the user profile in response to receiving the unique identification code and information corresponding to the user profile from the destination device; and

terminating, by the user device, the access to the user profile, provided to the destination device, upon an expiration of the expiring token.