Location-based system permissions and adjustments at an electronic device

• US 9,928,500 B2
• Filed: 02/20/2015
• Issued: 03/27/2018
• Est. Priority Date: 01/06/2009
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Gum, Arnold Jason
• Primary Examiner(s): Simitoski, Michael J
• Application Number:
  US14/627,935
• Publication Number:
  US 20150170134A1
• Time in Patent Office: 1,131 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 21/81 by operating on the power supply, e.g. enabling or disabling power-on, sleep or resume operations
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 2221/2147 Locking files
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed

Abstract

Securing access to a portable electronic device (PED), securing e-commerce transactions at an electronic device (ED) and dynamically adjusting system settings at a PED are disclosed. In an example, usage or mobility characteristics of the PED or ED (e.g., a location of the ED or PED, etc.) are compared with current parameters of the PED or ED. A determination as to whether to permit an operation (e.g., access, e-commerce transaction, etc.) at the ED or PED can be based at least in part upon a degree to which the current parameters conform with the usage or mobility characteristics. In another example, at least a current location of a PED can be used to determine which system settings to load at the PED.

Claims

1. A method of securing an e-commerce transaction at an electronic device, comprising:

detecting an attempt to conduct the e-commerce transaction at the electronic device;

identifying usage characteristics associated with the detected attempt, wherein the usage characteristics include a location of the electronic device where the e-commerce transaction is being attempted, a time at which the e-commerce transaction is being attempted, and one or more parameters of the e-commerce transaction;

determining whether the usage characteristics associated with the detected attempt conform with an e-commerce usage profile associated with the electronic device or a user of the electronic device, the e-commerce usage profile including one or more locations of the electronic device where e-commerce transactions are permitted, one or more time periods during which e-commerce transactions are permitted at the one or more locations of the electronic device, and parameters of permissible e-commerce transactions, wherein the one or more locations of the electronic device where e-commerce transactions are permitted are a subset of a second set of one or more locations of the electronic device stored in an access usage profile associated with the electronic device where access to the electronic device is permitted, and wherein the e-commerce usage profile is stored on the electronic device;

determining whether to permit the e-commerce transaction at the electronic device based on whether the usage characteristics conform with the e-commerce usage profile; and

based on determining to permit the e-commerce transaction, prompting the user of the electronic device for authentication information, wherein an authentication level associated with the user prompt is based on a degree to which the usage characteristics associated with the detected attempt conform with the e-commerce usage profile.

2. The method of claim 1, wherein the one or more parameters of the e-commerce transaction include a Web Site associated with the e-commerce transaction, types of items being purchased in the e-commerce transaction or a total transaction amount of the e-commerce transaction, or any combination thereof.

3. The method of claim 1, wherein the e-commerce usage profile includes at least one of a list of locations or location ranges and a list of Web Sites, a list of item types, one or more transaction amount thresholds, or any combination thereof.

4. The method of claim 1, further comprising:

denying the electronic device permission to conduct the e-commerce transaction based on the user not providing adequate authentication in response to the user prompt.

5. The method of claim 4, further comprising:

prompting the user for manual authentication in response to the denying.

6. The method of claim 4, further comprising:

permitting the electronic device permission to conduct the e-commerce transaction based on the user providing adequate authentication in response to the user prompt.

7. The method of claim 6, further comprising:

updating the e-commerce usage profile such that, for future e-commerce transactions, the usage characteristics associated with the detected attempt indicate conformity with the e-commerce usage profile.

8. The method of claim 6, wherein the one or more locations correspond to at least one of a geographic location of the electronic device, whether the electronic device resides in a given geographic range, or signals received at the electronic device.

9. The method of claim 8, wherein the received signals include one or more of cellular signals, WiFi signals or satellite positioning system (SPS) signals.

10. An electronic device, comprising:

a logic circuit configured to detect an attempt to conduct an e-commerce transaction at the electronic device;

a logic circuit configured to identify usage characteristics associated with the detected attempt, wherein the usage characteristics include a location of the electronic device where the e-commerce transaction is being attempted, a time at which the e-commerce transaction is being attempted, and one or more parameters of the e-commerce transaction;

a logic circuit configured to determine whether the usage characteristics associated with the detected attempt conform with an e-commerce usage profile associated with the electronic device or a user of the electronic device, the e-commerce usage profile including one or more locations of the electronic device where e-commerce transactions are permitted, one or more time periods during which e-commerce transactions are permitted at the one or more locations of the electronic device, and parameters of permissible e-commerce transactions, wherein the one or more locations of the electronic device where e-commerce transactions are permitted are a subset of a second set of one or more locations of the electronic device stored in an access usage profile associated with the electronic device where access to the electronic device is permitted, and wherein the e-commerce usage profile is stored on the electronic device;

a logic circuit configured to determine whether to permit the e-commerce transaction at the electronic device based on whether the usage characteristics conform with the e-commerce usage profile; and

a logic circuit configured to prompt, based on a determination to permit the e-commerce transaction, the user of the electronic device for authentication information, wherein an authentication level associated with the user prompt is based on a degree to which the usage characteristics associated with the detected attempt conform with the e-commerce usage profile.

11. The electronic device of claim 10, wherein the one or more parameters of the e-commerce transaction include a Web Site associated with the e-commerce transaction, types of items being purchased in the e-commerce transaction or a total transaction amount of the e-commerce transaction, or any combination thereof.

12. A non-transitory computer-readable medium comprising instructions, which, when executed by an electronic device, cause the electronic device to perform operations, the instructions comprising:

program code to detect an attempt to conduct an e-commerce transaction at the electronic device;

program code to identify usage characteristics associated with the detected attempt, wherein the usage characteristics include a location of the electronic device where the e-commerce transaction is being attempted, a time at which the e-commerce transaction is being attempted, and one or more parameters of the e-commerce transaction;

program code to determine whether the usage characteristics associated with the detected attempt conform with an e-commerce usage profile associated with the electronic device or a user of the electronic device, the e-commerce usage profile including one or more locations of the electronic device where e-commerce transactions are permitted, one or more time periods during which e-commerce transactions are permitted at the one or more locations of the electronic device, and parameters of permissible e-commerce transactions, wherein the one or more locations of the electronic device where e-commerce transactions are permitted are a subset of a second set of one or more locations of the electronic device stored in an access usage profile associated with the electronic device where access to the electronic device is permitted, and wherein the e-commerce usage profile is stored on the electronic device;

program code to determine whether to permit the e-commerce transaction at the electronic device based on whether the usage characteristics conform with the e-commerce usage profile; and

program code to prompt, based on a determination to permit the e-commerce transaction, the user of the electronic device for authentication information, wherein an authentication level associated with the user prompt is based on a degree to which the usage characteristics associated with the detected attempt conform with the e-commerce usage profile.

13. The non-transitory computer-readable medium of claim 12, wherein the one or more parameters of the e-commerce transaction include a Web Site associated with the e-commerce transaction, types of items being purchased in the e-commerce transaction or a total transaction amount of the e-commerce transaction, or any combination thereof.