Smart location determination

• US 10,091,311 B2
• Filed: 11/04/2014
• Issued: 10/02/2018
• Est. Priority Date: 11/04/2014
• Status: Active Grant

• Current Assignee: Micro Focus LLC (Open Text Corporation)
• Original Assignee: entIT Software LLC (Open Text Corporation)
• Inventors: Levi, Elad, Mizrahi, Avigad, Bar Zik, Ran
• Primary Examiner(s): Milord, Marceau
• Application Number:
  US15/524,473
• Publication Number:
  US 20170318100A1
• Time in Patent Office: 1,428 Days
• Field of Search: 4554561, 4554562, 4554042, 4554565, 455457
• CPC Class Codes: H04L 2101/69 using geographic information, e.g. room number
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04W 4/02 Services making use of location information

Abstract

In one example in accordance with the present disclosure, a system for smart location determination includes a session information accessor to access session information that details a session of a user system as it connects to a web technology server. The system includes a knowledge base that includes known common session information of multiple geographic locations. The system includes a session information comparator to compare the accessed session information to the knowledge base, and based on the comparison, determine a geographic location of the user system or verify an alleged geographic location.

Claims

1. A system comprising:

a processor; and

a memory to store instructions that, when executed by the processor, cause the processor to;

access session information that details a session of a user system as the user system connects to a web technology server, wherein the session information comprises data representing a version of software executing on the user system; and

compare the accessed session information to a knowledge base that includes known common session information of multiple geographic locations, and based on the comparison determine a geographic location of the user system or verify an alleged geographic location;

wherein if the geographic location of the user system is determined based on the comparison, the instructions when executed by the processor, cause the processor to determine a first similarity rating between common session information of the determined geographic location and the accessed session information, and the determined geographical location comprises one of the multiple geographical locations;

wherein if the alleged geographic location is verified, the instructions when executed by the processor, cause the processor to determine a second similarity rating between common session information of the alleged geographic location and the accessed session information, and the alleged geographical location comprises one of the multiple geographical locations.

2. The system of claim 1, wherein the determination of the geographic location includes determining which of the multiple geographic locations has associated common session information in the knowledge base that best matches the accessed session information.

3. The system of claim 1, wherein the session information used for the comparison does not include an IP (internet protocol) address.

4. The system of claim 1, wherein the accessed session information includes multiple session parameters, and wherein the accessed session information comprises a plurality of different importance ratings for the multiple session parameters.

5. The system of claim 4, wherein the comparison of the accessed session information to the knowledge base includes considering the importance ratings.

6. The system of claim 1, wherein the version of software comprises a version of a browser of the user system, and the instructions, when executed by the processor, cause the processor to determine the geographic location of the user system or verify the alleged geographic location based on the version of the browser.

7. The system of claim 1, wherein the version of software comprises a version of an operating system of the user system, and the instructions, when executed by the processor, cause the processor to determine the geographic location of the user system or verify the alleged geographic location based on the version of the operating system.

8. The system of claim 1, wherein the session information comprises data identifying a major web browser version and a minor web browser version, and the instructions, when executed by the processor, cause the processor to determine the geographic location of the user system or verify the alleged geographic location based on the major web browser version and the minor web browser version.

9. The system of claim 1, wherein the session information comprises a language setting of the user system, and the instructions, when executed by the processor, cause the processor to determine the geographic location of the user system or verify the alleged geographic location based on the language setting.

10. The system of claim 1, wherein the session information comprises data identifying a plugin of a web browser of the user system, and the instructions, when executed by the processor, cause the processor to determine the geographic location of the user system or verify the alleged geographic location based on the identification of the plugin.

11. A method comprising:

receiving a request from a user system to access a web technology;

extracting session information from the request that details a session of the user system as it sends the request, wherein extracting the session information comprises extracting data identifying a language setting of the user system;

sending the session information to a smart system to compare the session information to known common session information of multiple geographic locations;

receiving, from the smart system, based on the comparison, a geographic location of the user system or a verification of an alleged geographic location;

if the geographic location of the user system is received, receiving a first similarity rating based on the common session information of the determined geographic location and the accessed session information, wherein the determined geographical location comprises one of the multiple geographical locations; and

if the alleged geographic location is received, receiving a second similarity rating based on common session information of the alleged geographic location and the accessed session information, wherein the alleged geographical location comprises one of the multiple geographical locations.

12. The method of claim 11, wherein the session information does not include an IP (internet protocol) address, and wherein the received geographic location is not based on an IP address.

13. The method of claim 11, wherein the request is a web browser request, and wherein the session information is extracted from a user agent string of the web browser request.

14. The method of claim 13, wherein the session information includes both system information of the user system and web browser information of the requesting web browser.

15. The method of claim 11, wherein the session information includes multiple session parameters, and wherein the sending of the session information includes sending an importance rating for at least one of the session parameters.

16. A machine-readable storage medium encoded with instructions executable by a processor of a system to cause the system to:

access session information that details a session of a user system as it connects to a web technology server, wherein the session information comprises data identifying a version of software executing on the user system;

access or determine an allege geographic location related to an alleged IP address of the user system;

access a knowledge base that includes known common session information of multiple geographic locations;

compare the accessed session information to the knowledge base, and based on the comparison, determine a geographic location of the user system and determine a similarity rating between common session information of the geographic location and the accessed session information; and

determine that the geographic location is different than the alleged geographic location, and based on the determination that the geographic location is different, determine that a proxy was used to generate the alleged IP address.

17. A machine-readable storage medium of claim 16, wherein the determination that a proxy was used is further based on previous analysis of other session information for other sessions where it was determined for those sessions that the determined geographic location was different than the alleged geographic location.