Methods, servers and systems for verifying reported locations of computing devices

• US 9,774,552 B2
• Filed: 02/27/2014
• Issued: 09/26/2017
• Est. Priority Date: 03/14/2013
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Shuman, Mohammed Ataur Rahman, Sharma, Sandeep, Goel, Amit
• Primary Examiner(s): Gilles, Jude Jean
• Application Number:
  US14/191,778
• Publication Number:
  US 20140280645A1
• Time in Patent Office: 1,307 Days
• Field of Search: 709206, 709203
• CPC Class Codes: H04L 51/222 using geographical location information, e.g. messages transmitted or received in proximity of a certain spot or area
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04M 2242/30 Determination of the location of a subscriber
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/104 Location integrity, e.g. secure geotagging
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/10 Push-to-Talk [PTT] or Push-On-Call services
• CPC Class Codes: H04W 64/003 locating network equipment

Abstract

Methods, servers and systems are disclosed for authenticating location information in a message from a sending computing device to a receiving computing device. Location information of a sending computing device at an actual location may be incorporated in the message. Location information in a message may be compared with information regarding the actual location of the sending computing device maintained by a server. The location information in the message may be authenticated based on the comparison.

Claims

1. A method for authenticating location information provided in messages, comprising:

comparing location information incorporated in a message, from a sending computing device at an actual location to a receiving computing device, with low-level information regarding the actual location of the sending computing device maintained in a server, wherein the low-level information is inaccessible to a user; and

authenticating the location information based on the comparison.

2. The method of claim 1, wherein authenticating the location information based on the comparison comprises:

determining whether a difference between the location information incorporated in the message and the low-level information regarding the actual location of the sending computing device maintained in a server is within a defined threshold; and

authenticating the location information incorporated in the message when the difference between the location information incorporated in the message and the low-level information regarding the actual location of the sending computing device maintained in the server is within the defined threshold.

3. The method of claim 1, further comprising:

receiving, in the server, a registration of the sending computing device including low-level location information regarding the actual location of the sending computing device;

receiving in the server from the sending computing device a request for the low-level information regarding the actual location of the sending computing device maintained in the server; and

sending, from the server to the sending computing device, the low-level information regarding the actual location of the sending computing device maintained in the server in response to the request,

wherein comparing location information incorporated in the message from the sending computing device with low-level information regarding the actual location of the sending computing device maintained in the server and authenticating the location information based on the comparison is performed in the sending computing device prior to transmitting the message to the receiving computing device.

4. The method of claim 1, further comprising:

receiving, in the server, a registration of the sending computing device including low-level information regarding the actual location of the sending computing device;

receiving in the server from the receiving computing device a request for the low-level information regarding the actual location of the sending computing device maintained in the server; and

sending, from the server to the sending computing device, the low-level information regarding the actual location of the sending computing device maintained in the server in response to the request,

wherein comparing location information incorporated in the message from the sending computing device with low-level information regarding the actual location of the sending computing device maintained in the server and authenticating the location information based on the comparison and authenticating the location information based on the comparison are performed in the receiving computing device.

5. The method of claim 1, further comprising:

receiving, in the server, a registration of the sending computing device including low-level location information regarding the actual location of the sending computing device;

receiving in a proxy server the message from the sending computing device;

receiving, in the server, a request from the proxy server for the low-level information regarding the actual location of the sending computing device maintained in the server;

providing, from the server to the proxy server, a response that includes the low-level information regarding the actual location of the sending computing device maintained in the server; and

providing, from the proxy server to the receiving computing device, the message from the sending computing device including the location information provided by the sending computing device and the low-level information regarding the actual location of the sending computing device maintained in the server,

wherein comparing location information incorporated in the message from the sending computing device with low-level information regarding the actual location of the sending computing device maintained in the server and authenticating the location information based on the comparison are performed in the receiving computing device based on information received from the proxy server.

6. The method of claim 1, further comprising:

receiving, in the server, a registration of the sending computing device including low-level location information regarding the actual location of the sending computing device;

receiving in a proxy server the message from the sending computing device;

receiving, in the server, a request from the proxy server for the low-level information regarding the actual location of the sending computing device maintained in the server;

sending, from the server to the proxy server, the low-level information regarding the actual location of the sending computing device maintained in the server in response to the request, wherein comparing location information incorporated in the message from the sending computing device with low-level information regarding the actual location of the sending computing device maintained in a server and authenticating the location information based on the comparison are performed in the proxy server; and

providing, from the proxy server to the receiving computing device, the message from the sending computing device including authenticated location information.

7. The method of claim 6, wherein providing, from the proxy server to the receiving computing device, the message from the sending computing device including authenticated location information comprises substituting in the message provided to the receiving computing device the location information included in the message by the sending computing device with the low-level information regarding the actual location of the sending computing device maintained in a server.

8. The method of claim 1, further comprising:

receiving, in the server, a registration of the sending computing device including low-level location information regarding the actual location of the sending computing device;

receiving, in the server, a query from the receiving computing device that includes location information incorporated in the message, wherein comparing location information incorporated in the message from a sending computing device at an actual location to a receiving computing device with low-level information regarding the actual location of the sending computing device maintained in a server comprises comparing, by the server, the location information incorporated in the message received from the receiving computing device with the low-level location information regarding the actual location of the sending computing device maintained by the server; and

authenticating the location information based on the comparison comprises providing an indication to the receiving computing device of a result of the comparison of the location information incorporated in the message with the actual location of the sending computing device maintained in the server in response to the query.

9. A proxy server for authenticating location information provided in a message sent from a sending computing device to a receiving computing device, the proxy server configured with server executable instructions to perform operations comprising:

receiving the message from the sending computing device including information regarding the sending computing device'"'"'s location;

sending a request to a server for the location information regarding an actual location of the sending computing device maintained in the server;

receiving a response from the server that includes the location information regarding the actual location of the sending computing device maintained in the server;

comparing the information regarding the sending computing device'"'"'s location included in the message received from the sending computing device to the location information regarding the actual location of the sending computing device received from the server; and

sending the message received from the sending computing device to the receiving computing device including authenticated location information.

10. The proxy server of claim 9, wherein the proxy server is configured with instructions to perform operations further comprising sending to the receiving computing device the message received from the sending computing device including information regarding the sending computing device'"'"'s location along with the location information regarding the actual location of the sending computing device maintained in the server.

11. The proxy server of claim 9, wherein the proxy server is configured with instructions to perform operations such that authenticating the location information based on the comparison comprises:

determining whether a difference between the information regarding the sending computing device'"'"'s location included in the message and the location information regarding the actual location of the sending computing device received from the server is within a defined threshold; and

authenticating the information regarding the sending computing device'"'"'s location included in the message in response to determining that the difference between the information regarding the sending computing device'"'"'s location included in the message and the location information regarding the actual location of the sending computing device received from the server is within the defined threshold.

12. The proxy server of claim 9, wherein the proxy server is configured with instructions to perform operations further comprising:

comparing the information regarding the sending computing device'"'"'s location included in the message received from the sending computing device to the location information regarding the actual location of the sending computing device received from the server;

determining whether a difference between the information regarding the sending computing device'"'"'s location included in the message received from the sending computing device to the location information regarding the actual location of the sending computing device received from the server is within a defined threshold;

substituting in the message the location information regarding the actual location of the sending computing device received from the server for the information regarding the sending computing device'"'"'s location in response to determining that the difference is not within the defined threshold; and

sending the message to the receiving computing device.

13. A computing device, comprising a processor configured with processor executable instructions to perform operations comprising:

receiving a message from a sending computing device including information regarding the sending computing device'"'"'s location;

obtaining an authentication of the information regarding the sending computing device'"'"'s location based on location information regarding an actual location of the sending computing device maintained in a server;

sending to the server a request for the location information regarding the actual location of the sending computing device maintained in the server;

receiving from the server the location information regarding the actual location of the sending computing device maintained in the server;

comparing the information regarding the sending computing device'"'"'s location included in the message to the location information regarding the actual location of the sending computing device received from the server; and

authenticating in the computing device the information regarding the sending computing device'"'"'s location included in the message based on the comparison.

14. The computing device of claim 13, wherein the processor is configured with processor executable instructions to perform operations such that authenticating in the computing device the location of the sending computing device'"'"'s location included in the message based on the comparison comprises:

determining whether a difference between the information regarding the sending computing device'"'"'s location included in the message and the location information regarding the actual location of the sending computing device received from the server is within a defined threshold; and

authenticating the location of the sending computing device'"'"'s location included in the message in response to determining that the difference between the information regarding the sending computing device'"'"'s location included in the message and the location information regarding the actual location of the sending computing device received from the server is within the defined threshold.

15. The computing device of claim 13, wherein the processor is configured with processor-executable instructions to perform operations such that obtaining an authentication of the information regarding the sending computing device'"'"'s location based on location information regarding the actual location of the sending computing device maintained in a server comprises:

sending to the server a request to authenticate the information regarding the sending computing device'"'"'s location included in the message; and

receiving from the server an authentication of the information regarding the location of the sending computing device'"'"'s location based on the location information regarding the actual location of the sending computing device maintained in the server.

16. The computing device of claim 13, wherein the processor is configured with processor executable instructions to perform operations such that obtaining an authentication of the information regarding the sending computing device'"'"'s location based on location information regarding the actual location of the sending computing device maintained in a server comprises:

receiving from a proxy server the message from the sending computing device including the information regarding the sending computing device'"'"'s location and the location information regarding the actual location of the sending computing device maintained in the server;

comparing the information regarding the location of the sending computing device'"'"'s location included in the message to the location information regarding the actual location of the sending computing device received from the proxy server; and

authenticating in the computing device the location of the sending computing device'"'"'s location included in the message based on the comparison.

17. The computing device of claim 16, wherein the processor is configured with processor executable instructions to perform operations such that authenticating in the computing device the location of the sending computing device'"'"'s location included in the message based on the comparison comprises:

determining whether a difference between the information regarding the location of the sending computing device'"'"'s location included in the message and the location information regarding the actual location of the sending computing device received from the server is within a defined threshold; and

authenticating the location of the sending computing device'"'"'s location included in the message in response to determining that the difference between the information regarding the location of the sending computing device'"'"'s location included in the message and the location information regarding the actual location of the sending computing device received from the server is within the defined threshold.

18. The computing device of claim 13, wherein the processor is configured with processor executable instructions to perform operations such that obtaining an authentication of the information regarding the sending computing device'"'"'s location based on location information regarding the actual location of the sending computing device maintained in a server comprises receiving from a proxy server the message including either the information regarding the sending computing device'"'"'s location included in the message sent by the sending computing device or the location information regarding the actual location of the sending computing device maintained in the server.