Logging location and time data associated with a credential

• US 10,021,106 B1
• Filed: 03/24/2016
• Issued: 07/10/2018
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: Microstrategy Incorporated
• Original Assignee: Microstrategy Incorporated
• Inventors: Saylor, Michael J., Chen, Gang
• Primary Examiner(s): Pyzocha, Michael
• Application Number:
  US15/080,126
• Time in Patent Office: 838 Days
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 10/1091 Recording time for administrative or management purposes
• CPC Class Codes: G07C 2209/08 With time considerations, e.g. temporary activation, valid time window or time limitations
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services

Abstract

Location information of a client device associated with a credential is determined to be tracked. The credential has been granted to a user of the client device by a credential granting authority to indicate a status of the user with the credential. Known location data that indicates known locations is maintained. The credential data is associated with each of the known locations, and geographic data for each of the known locations. A location of the client device associated with the credential and a particular time associated with the location is determined. A subset of the known location data that defines one or more locations that are known for the credential is accessed from the known location data. The location of the client device associated with the credential is compared with geographic data included in the accessed subset of the known location data.

Claims

1. A computer-implemented method comprising:

determining to track location information of a client device associated with a credential, the credential having been granted to a user of the client device by a credential granting authority to indicate a status of the user with the credential granting authority;

maintaining known location data that indicates (i) geographic locations and (ii) credential data that indicates one or more credentials that are associated with each of the geographic locations;

determining a current geographic location of the client device associated with the credential;

comparing the current geographic location of the client device associated with the credential with the known location data;

based on comparing the current geographic location of the client device associated with the credential with the known location data, determining that the current geographic location of the client device associated with the credential matches a particular geographic location included in the known location data;

accessing, from the known location data, particular credential data that indicates one or more credentials that are associated with the particular geographic location;

comparing the particular credential data of the particular geographic location with the credential of the client device;

based on comparing the particular credential data of the particular geographic location with the credential of the client device, determining that the credential of the client device does not correspond to one of the one or more credentials of the particular credential data of the particular geographic location;

based on determining that the credential of the client device does not correspond to one of the one or more credentials of the particular credential data of the particular geographic location, identifying a supervisor credential that was issued by the credential granting authority and that identifies a supervisor of the user;

identifying a supervisor client device that is associated with the supervisor credential;

generating a warning message that includes a selectable user interface element that, upon selection, initiates addition of the credential of the client device to the particular credential data of the particular geographic location;

sending the warning message to the supervisor client device;

receiving, from the supervisor client device, selection data indicating a selection of the selectable user interface element; and

in response to receiving, from the supervisor client device, the selection data indicating the selection of the selectable user interface element, adding, to the particular credential data of the particular geographic location, of the client device.

2. The method of claim 1, wherein the warning message includes an additional selectable user interface element that, upon selection, is configured to initiate communication between the supervisor client device and the client device.

3. The method of claim 1, wherein adding, to the particular credential data of the particular geographic location, the credential of the client device:

adding timing data indicating that the credential of the client device is included in the particular credential data of the particular geographic location during a time range that includes a current time.

4. The method of claim 1, wherein:

the known location data includes a time range and the credential data that indicates one or more credentials that are associated with each of the geographic locations during the time range and the method further comprises;

determining that a current time is within the time range,

wherein determining that the credential of the client device does not correspond one or the one or more credentials of the particular credential data of the particular geographic location is based further on determining that the current time is outside the time range.

5. The method of claim 1, wherein the credential granting authority is an employer of the user and the supervisor.

6. The method of claim 1, comprising:

generating a log entry that indicates presence of the credential of the client device at the current geographic location of the client device.

7. The method of claim 1, comprising:

based on determining that the credential of the client device does not correspond to one of the one or more credentials of the particular credential data of the particular geographic location, sending, to the client device associated with the credential, an additional warning message that indicates that the credential of the client device is not included in one of the one or more credentials of the particular credential data of the particular geographic location.

8. The method of claim 1, comprising:

receiving, from the client device associated with the credential, data indicating a user selection of a user selectable option that, upon selection, causes the client device associated with the credential to transmit a geographic location of the client device,

wherein determining to track the location information of the client device associated with a credential is based on receiving the data indicating the user selection of the user selectable option that, upon selection, causes the client device associated with the credential to transmit a geographic location of the client device.

9. A system comprising:

one or more computers and one or more storage devices storing instructions that are operable, when executed by the one or more computers, to cause the one or more computers to perform operations comprising;

determining to track location information of a client device associated with a credential, the credential having been granted to a user of the client device by a credential granting authority to indicate a status of the user with the credential granting authority;

maintaining known location data that indicates (i) geographic locations and (ii) credential data that indicates one or more credentials that are associated with each of the geographic locations;

determining a current geographic location of the client device associated with the credential;

comparing the current geographic location of the client device associated with the credential with the known location data;

based on comparing the current geographic location of the client device associated with the credential with the known location data, determining that the current geographic location of the client device associated with the credential matches a particular geographic location included in the known location data;

accessing, from the known location data, particular credential data that indicates one or more credentials that are associated with the particular geographic location;

comparing the particular credential data of the particular geographic location with the credential of the client device;

based on comparing the particular credential data of the particular geographic location with the credential of the client device, determining that the credential of the client device does not correspond to one of the one or more credentials of the particular credential data of the particular geographic location;

based on determining that the credential of the client device does not correspond to one of the one or more credentials of the particular credential permitted data of the particular geographic location, identifying a supervisor credential that was issued by the credential granting authority and that identifies a supervisor of the user;

identifying a supervisor client device that is associated with the supervisor credential;

generating a warning message that includes a selectable user interface element that, upon selection, initiates addition of the credential of the client device to the particular credential data of the particular geographic location;

sending the warning message to the supervisor client device;

receiving, from the supervisor client device, selection data indicating a selection of the selectable user interface element; and

in response to receiving, from the supervisor client device, the selection data indicating the selection of the selectable user interface element, adding, to the particular credential data of the particular geographic location, the credential of the client device.

10. The system of claim 9, wherein the warning message includes an additional selectable user interface element that, upon selection, is configured to initiate communication between the supervisor client device and the client device.

11. The system of claim 9, wherein adding, to the particular credential data of the particular geographic location, the credential of the client device:

adding timing data indicating that the credential of the client device is included in the particular credential data of the particular geographic location during a time range that includes a current time.

12. The system of claim 9, wherein:

the known location data includes a time range and the credential data that indicates one or more credentials that are associated with each of the geographic locations during the time range and the method further comprises;

determining that a current time is within the time range,

wherein determining that the credential of the client device does not correspond one or the one or more credentials of the particular credential data of the particular geographic location is based further on determining that the current time is outside the time range.

13. The system of claim 9, wherein the credential granting authority is an employer of the user and the supervisor.

14. The system of claim 9, wherein the operations further comprise:

generating a log entry that indicates presence of the credential of the client device at the current geographic location of the client device.

15. The system of claim 9, wherein the operations further comprise:

based on determining that the credential of the client device does not correspond to one of the one or more credentials of the particular credential data of the particular geographic location, sending, to the client device associated with the credential, an additional warning message that indicates that the credential of the client device is not included in one of the one or more credentials of the particular credential data of the particular geographic location.

16. A non-transitory computer-readable medium storing software comprising instructions executable by one or more computers which, upon such execution, cause the one or more computers to perform operations comprising:

determining to track location information of a client device associated with a credential, the credential having been granted to a user of the client device by a credential granting authority to indicate a status of the user with the credential granting authority;

maintaining known location data that indicates (i) geographic locations and (ii) credential data that indicates one or more credentials that are associated with each of the geographic locations;

determining a current geographic location of the client device associated with the credential;

comparing the current geographic location of the client device associated with the credential with the known location data;

based on comparing the current geographic location of the client device associated with the credential with the known location data, determining that the current geographic location of the client device associated with the credential matches a particular geographic location included in the known location data;

accessing, from the known location data, particular credential data that indicates one or more credentials that are associated with the particular geographic location;

comparing the particular credential data of the particular geographic location with the credential of the client device;

based on comparing the particular credential data of the particular geographic location with the credential of the client device, determining that the credential of the client device does not correspond to one of the one or more credentials of the particular credential data of the particular geographic location;

based on determining that the credential of the client device does not correspond to one of the one or more credentials of the particular credential data of the particular geographic location, identifying a supervisor credential that was issued by the credential granting authority and that identifies a supervisor of the user;

identifying a supervisor client device that is associated with the supervisor credential;

generating a warning message that includes a selectable user interface element that, upon selection, initiates addition of the credential of the client device to the particular credential data of the particular geographic location;

sending the warning message to the supervisor client device;

receiving, from the supervisor client device, selection data indicating a selection of the selectable user interface element; and

in response to receiving, from the supervisor client device, the selection data indicating the selection of the selectable user interface element, adding, to the particular credential data of the particular geographic location, the credential of the client device.

17. The medium of claim 16, wherein the warning message includes an additional selectable user interface element that, upon selection, is configured to initiate communication between the supervisor client device and the client device.

18. The medium of claim 16, wherein:

the known location data includes a time range and the credential data that indicates one or more credentials that are associated with each of the geographic locations during the time range and the method further comprises;

determining that a current time is within the time range,

wherein determining that the credential of the client device does not correspond one or the one or more credentials of the particular credential data of the particular geographic location is based further on determining that the current time is outside the time range.