Mobile user location privacy solution based on the use of multiple identities

• US 20040224664A1
• Filed: 05/07/2003
• Published: 11/11/2004
• Est. Priority Date: 05/07/2003
• Status: Active Grant

• Current Assignee: Nokia Solutions and Networks US LLC (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Guo, Yile
• Granted Patent: US 7,088,989 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 8/16 selectively restricting mobility data tracking
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support

Abstract

A mobile device (10) includes a wireless network adapter (13) for communication with a wireless access network (24), and further includes a memory (23) in the mobile device for securely storing at least one pseudo-identification (IDp) of a mobile device user in conjunction with an actual identification (ID1) of the mobile device user. The mobile device further includes a mobile device identity manager (22), coupled to the memory, for transmitting ID1 from the mobile device to a trusted wireless access network for associating ID1 with a location of the mobile device (12), and for transmitting IDp from the mobile device to an untrusted wireless access network for associating IDp with a location of the mobile device (18).

Claims

1. A method to use a location service in a wireless access network, comprising:

transmitting a pseudo-identification (IDp) from a mobile device to the wireless access network; and

in a wireless access network location server, associating the IDp with the location of the mobile device.

2. A method as in claim 1, where the IDp is transmitted to an Authentication Module of the wireless access network, further comprising forwarding the IDp from the Authentication Module to the location server.

3. A method as in claim 1, further comprising forwarding the IDp in association with the location of the mobile device to a location-based application.

4. A method as in claim 1, where the IDp is securely stored in the mobile device in conjunction with an actual identification of the mobile device.

5. A method to use a location service in a wireless access network, comprising:

securely storing in a mobile device at least one pseudo-identification (IDp) of a mobile device user in conjunction with an actual identification (ID1) of the mobile device user;

when operating with a trusted wireless access network, transmitting ID1 from the mobile device to the trusted wireless access network and associating ID1 with a location of the mobile device; and

when operating with an untrusted wireless access network, transmitting IDp from the mobile device to the untrusted wireless access network and associating IDp with a location of the mobile device.

6. A wireless access network comprising in a mobile device a transmitter for transmitting a pseudo-identification (IDp) from the mobile device to the wireless access network, and in a wireless access network location server, means for associating the IDp with the location of the mobile device.

7. A wireless access network as in claim 6, where the IDp is transmitted to an Authentication Module of the wireless access network, further comprising a first link for forwarding the IDp from the Authentication Module to the location server.

8. A wireless access network as in claim 7, further comprising a second link for forwarding the IDp in association with the location of the mobile device from the location server to a location-based application.

9. A wireless access network as in claim 6, further comprising a memory in said mobile device for securely storing the IDp in conjunction with an actual identification of the mobile device.

10. A mobile device comprising a wireless network adapter for communication with a wireless access network, further comprising a memory in the mobile device for securely storing at least one pseudo-identification (IDp) of a mobile device user and an actual identification (ID1 ) of the mobile device user, and an Identity Manager, coupled to the memory, for transmitting ID1 from the mobile device to a trusted wireless access network for associating ID1 with a location of the mobile device, and for transmitting IDp from the mobile device to an untrusted wireless access network for associating IDp with a location of the mobile device.

11. A method to use a location service in a wireless access network, comprising:

storing in a mobile device an actual identification (ID1 ) of a mobile device user;

when registering with a non-trusted wireless access network, one of generating a pseudo-identification (IDp) or accessing a stored IDp;

transmitting IDp from the mobile device to an Authentication Module of the non-trusted wireless access network;

authenticating the mobile device user based on IDp; and

providing a location of the mobile device and IDp to an application.

12. A method as in claim 11, further comprising:

when registering with a trusted wireless access network, transmitting ID1 from the mobile device to an Authentication Module of the trusted wireless access network;

authenticating the mobile device user based on ID1; and

providing a location of the mobile device and ID1 to an application.

13. A mobile device operable for using a location service in a wireless access network, comprising:

means for authenticating the mobile device comprising means for transmitting a pseudo-identification (IDp) from the mobile device to a location server of the wireless access network for associating the IDp with a location of the mobile device; and

means, responsive to the mobile device being authenticated, for executing a mobile application in cooperation with an application server.

14. A mobile device as in claim 13, where the IDp is transmitted to an Authentication Module of the wireless access network, where the Authentication Module forwards the IDp to the location server.

15. A mobile device as in claim 13, where the application server is a mobile device location-based application server, and where the IDp is forwarded in association with the location of the mobile device to the location-based application server.

16. A mobile device as in claim 13, where the IDp is securely stored in a memory means of the mobile device in conjunction with an actual identification of the mobile device.

17. A computer program product comprising program code readable by a mobile device data processor for using a location service in a wireless access network, comprising:

a program code segment for authenticating the mobile device comprising computer program code for transmitting a pseudo-identification (IDp) from the mobile device to a location server of the wireless access network for associating the IDp with a location of the mobile device; and

a program code segment, responsive to the mobile device being authenticated, for executing a mobile application in cooperation with a mobile device location-based application server.

18. A computer program product comprising program code readable by a mobile device data processor, comprising program code operable for reading a memory in the mobile device, the memory securely storing at least one pseudo-identification (IDp) of a mobile device user and an actual identification (ID1) of the mobile device user, said program code implementing an Identity Manager function for transmitting ID1 from the mobile device to a trusted wireless access network for associating ID1 with a location of the mobile device, and for transmitting IDp from the mobile device to an untrusted wireless access network for associating IDp with a location of the mobile device.

19. A computer program product comprising program code readable by a data processor comprising part of a wireless network location server coupled to the mobile device through a wireless access network, comprising program code, responsive to a receipt of a pseudo-identification (IDp) from the mobile device, for associating the IDp with a determined location of the mobile device.

20. A computer program product as in claim 19, where the IDp is received by the program code via an Authentication Module.

21. A computer program product as in claim 19, further comprising program code for forwarding the IDp in association with the determined location of the mobile device to a location-based application.