Dynamic profile sharing using expiring tokens

• US 9,894,118 B2
• Filed: 01/17/2014
• Issued: 02/13/2018
• Est. Priority Date: 01/17/2014
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: DeLuca, Lisa Seacat, Do, Lydia M., Lakshmanan, Geetika T.
• Primary Examiner(s): Potratz, Daniel
• Application Number:
  US14/157,604
• Publication Number:
  US 20150207830A1
• Time in Patent Office: 1,488 Days
• Field of Search: 726 10
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 65/403 Arrangements for multi-party communication, e.g. for conferences data switching systems for conference H04L12/18; arrangements for connecting several subscribers to a common circuit, i.e. affording conference facilities H04M3/56; television conferencing systems H04N7/15
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/146 Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 9/0872 using geo-location information, e.g. location data, time, relative position or proximity to other entities
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/029 Location-based management or tracking services

Abstract

Access to a user profile of a user device at a location may be provided to a destination device upon detecting that the location is within a proximity of a destination location. An expiring token may be generated, associated with the user profile, and communicated to the second device. Access to the user profile provided to the destination device may be terminated upon an expiration of the expiring token.

Claims

1. A computer implemented method for dynamically sharing a user profile of a mobile device, the method comprising:

providing to a destination device, access to a user profile of a user device stored on a server, upon detecting that a location of the user device is within a geographic proximity of a destination location, wherein the destination location has fixed known coordinates and the location of the user device is variable relative to the destination location;

triggering the generation of an expiring token for controlling access by the destination device to the user profile stored on the server, wherein the user device is detected within a predefined geographic proximity to the destination, wherein a user provides an input into the user device, wherein the input defines a plurality of conditions and a plurality of preferences for a token expiration policy;

associating the expiring token with the user profile;

communicating the expiring token to the destination device;

providing to the destination device, access to the user profile of the user device stored on the server, while the expiring token is valid;

triggering the expiration of the expiring token upon leaving the predefined proximity of the geographic location based on the token expiration policy; and

terminating the access to the user profile, provided to the destination device, upon the expiration of the expiring token.

2. The method of claim 1, wherein providing access to the user profile further comprises:

receiving an input from a user of the user device to select the user profile from among a plurality of user profiles.

3. The method of claim 1, wherein the user profile includes one or more of:

electronic medical records, dining preferences, driving records, and shopping preferences.

4. The method of claim 1, wherein the proximity is configurable by the user device.

5. The method of claim 1 wherein expiration of the expiring token occurs upon detecting any one or more of:

the proximity exceeding a threshold value; and

a defined time elapsing since generating the expiring token.

6. The method of claim 1, wherein the location is defined as a geographic area centered on a pair of latitude and longitude coordinates.

7. The method of claim 1, further comprising:

updating the user profile upon receiving from the destination device information corresponding to the user profile.

8. A computer system for dynamically sharing a profile of a mobile device, comprising:

a computer having a processor and a tangible storage device;

a program having a plurality of program instructions embodied on the storage device for execution by the processor, the program instructions comprising instructions to;

provide to a destination device, access to a user profile of a user device stored on a server, upon detecting that a location of the user device is within a geographic proximity of a destination location, wherein the destination location has fixed known coordinates and the location of the user device is variable relative to the destination location;

trigger the generation of an expiring token for controlling access by the destination device to the user profile stored on the server, wherein the user device is detected within a predefined geographic proximity to the destination, wherein a user provides an input into the user device, wherein the input defines a plurality of conditions and a plurality of preferences for a token expiration policy;

associate the expiring token with the user profile;

communicate the expiring token to the destination device;

provide to the destination device, access to the user profile of the user device stored on the server, while the expiring token is valid;

trigger the expiration of the expiring token upon leaving the predefined proximity of the geographic location based on the token expiration policy; and

terminate the access to the user profile, provided to the destination device, upon the expiration of the expiring token.

9. The computer system of claim 8, wherein the user device is a smart phone.

10. The computer system of claim 8, wherein the user device is a tablet computer.

11. The computer system of claim 8, wherein the computer system is a mobile network.

12. The computer system of claim 8, wherein the location is determined using global positioning satellite (GPS) coordinates of the user device.

13. The computer system of claim 8, wherein the user profile includes one or more of:

electronic medical records, dining preferences, driving records, and shopping preferences.

14. A computer program product for dynamically sharing a profile of a mobile device, comprising a tangible storage device having program code embodied therewith, the program code executable by a processor of a computer to perform a method comprising:

providing to a destination device, by the processor, access to a user profile of a user device stored on a server, upon detecting that a location of the user device is within a geographic proximity of a destination location, wherein the destination location has fixed known coordinates and the location of the user device is variable relative to the destination location;

triggering, by the processor, the generation of an expiring token for controlling access by the destination device to the user profile stored on the server, wherein the user device is detected within a predefined geographic proximity to the destination, wherein a user provides an input into the user device, wherein the input defines a plurality of conditions and a plurality of preferences for a token expiration policy;

associating, by the processor, the expiring token with the user profile;

communicating, by the processor, the expiring token to the destination device;

providing to the destination device, by the processor, access to the user profile of the user device stored on the server, while the expiring token is valid;

triggering, by the processor, the expiration of the expiring token upon leaving the predefined proximity of the geographic location based on the token expiration policy; and

terminating, by the processor, the access to the user profile, provided to the destination device, upon the expiration of the expiring token.

15. The computer program product of claim 14, wherein the program further comprises:

receiving an input, by the processor, from a user of the user device to select the user profile from among a plurality of user profiles.

16. The computer program product of claim 15, wherein the program further comprises updating the user profile, by the processor, upon receiving from the destination device information corresponding to the user profile.

17. The computer program product of claim 14, wherein communicating the expiring token to the destination device includes communicating a text message to the destination device.

18. The computer program product of claim 14, wherein expiration of the expiring token occurs upon detecting any one or more of:

the proximity exceeding a threshold value; and

a defined time elapsing since generating the expiring token.

19. The computer program product of claim 14, wherein the location is defined as a geographic area centered on a pair of latitude and longitude coordinates.

20. The computer program product of claim 14, wherein the program is a web service.