SYSTEMS AND METHODS FOR CONTROLLING SERVICE ACCESS ON A WIRELESS COMMUNICATION DEVICE

• US 20080222707A1
• Filed: 03/07/2007
• Published: 09/11/2008
• Est. Priority Date: 03/07/2007
• Status: Abandoned Application

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Chen, An Mei, Pathuri, Hanumantha Rao
• Application Number:
  US11/683,343
• Publication Number:
  US 20080222707A1
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 12/088 using filters or firewalls

Abstract

Methods, devices, systems and computer program products are provided for controlling access to services, content, applications and the like on a wireless communication device. In one aspect, wireless communication device-wide access control is provided such that unified access control may exist on the device; providing access control to more than one, and in some instances all, of the services and/or applications that are accessible on the device. Additionally, aspects provide for limiting or prohibiting access based on numerous access control factors, such as content type, service type, location of the device, time or any other device environmental characteristic. The methods, devices, systems and computer program products for content access control may be executed on the wireless communication device or they may be executed within the wireless network.

Claims

1. A method for controlling access on a wireless communication device, comprising:

receiving at least one access control privilege that includes at least one access control attribute and is associated with a wireless communication device, wherein each access control privilege controls access to a plurality of services available on the wireless communication device;

storing the at least one access control privilege in memory;

receiving a request to access one of the plurality of services available on the wireless communication device; and

controlling access to the service if it is determined that the at least one stored access control privilege applies to an access request.

2. The method of claim 1, wherein receiving at least one access control privilege that includes at least one access control attribute further defines the access control attribute as the geographic location of the wireless communication device.

3. The method of claim 1, wherein receiving at least one access control privilege that includes at least one access control attribute further defines the access control attribute as a time period.

4. The method of claim 1, wherein receiving at least one access control privilege that includes at least one access control attribute further defines the access control attribute as chosen from the group consisting of to whom communication may be transmitted, from whom communication may be received, a type of service, type of content received from a service, environmental conditions, state conditions and any combination of the aforementioned attributes.

5. The method of claim 1, wherein each access control privilege further controls access to a plurality of applications available on the wireless communication device.

6. The method of claim 1, wherein each access control privilege further controls access to a plurality of content available on the wireless communication device.

7. The method of claim 1, wherein receiving at least one access control privilege further comprises receiving, at the wireless communication device, at least one access control privilege.

8. The method of claim 1, wherein receiving at least one access control privilege further comprises receiving, at a network interface, at least one access control privilege.

9. The method of claim 1, wherein storing the at least one access control attribute in memory further comprises storing the at least one access control attribute in memory in the wireless communication device.

10. The method of claim 1, wherein storing the at least one access control attribute in memory further comprises storing the at least one access control attribute in network device memory.

11. The method of claim 1, further comprising enabling an access control function for the wireless communication device.

12. The method of claim 11, wherein enabling the access control function further comprises notifying a network entity that the access control function is enabled for the wireless communication device.

13. The method of claim 11, further comprising determining if the access control function is enabled prior to determining if the at least one stored access control attribute applies to the access attempt.

14. The method of claim 1, wherein controlling access to the service if it is determined that the at least one stored access control privilege applies to an access request further comprises determining, at the wireless communication device, if the at least one stored access control privilege applies to the access request.

15. The method of claim 1, wherein controlling access to the service if it is determined that the at least one stored access control privilege applies to an access request further comprises determining, at a network device, if the at least one stored access control privilege applies to the access request.

16. The method of claim 1, wherein receiving at least one access control privilege further defines receiving as chosen from the group consisting of user-inputting, wireless device manufacturer-inputting, and network service provider-inputting.

17. The method of claim 1, wherein controlling access to the service further comprises prohibiting access to the service.

18. The method of claim 1, wherein controlling access to the service further comprises limiting access to the service.

19. The method of claim 18, wherein limiting access to the service further defines limiting access as chosen from the group consisting of limiting a time for access to the service, limiting a geographic location for access to the service, limiting the type of content accessed, limiting the type of network services accessed, limiting to whom a communication may be transmitted and limiting from whom communication may be received.

20. At least one processor configured to control access on a wireless communication device, comprising:

a first module for receiving at least one access control privilege that includes at least one access control attribute and is associated with a wireless communication device, wherein each access control privilege controls access to a plurality of services available on the wireless communication device;

a second module for storing the at least one access control privilege in memory;

a third module for receiving a request to access one of the plurality of services available on the wireless communication device; and

a fourth module for controlling access to the service if it is determined that the at least one stored access control privilege applies to an access request.

21. A computer program product, comprising:

a computer-readable medium comprising;

a first set of codes for causing a computer to receive at least one access control privilege that includes at least one access control attribute and is associated with a wireless communication device, wherein each access control privilege controls access to a plurality of services available on the wireless communication device;

a second set of codes for causing a computer to store the at least one access control privilege in memory;

a third set of codes for causing a computer to receive a request to access one of the plurality of services available on the wireless communication device; and

a fourth set of codes for causing a computer to control access to the service if it is determined that the at least one stored access control privilege applies to an access request.

22. A device, comprising:

means for receiving at least one access control privilege that includes at least one access control attribute and is associated with a wireless communication device, wherein each access control privilege controls access to a plurality of services available on the wireless communication device;

means for storing the at least one access control privilege in memory;

means for receiving a request to access one of the plurality of services available on the wireless communication device; and

means for controlling access to the service if it is determined that the at least one stored access control privilege applies to an access request.

23. A wireless communication device, comprising:

a computer platform including a processor and a memory; and

an access control module stored in the memory and in communication with the processor that is operable to receive at least one access control privilege that includes at least one access control attribute, wherein the privilege controls access to a plurality of services available on the wireless communication device, store the at least one access control privilege in the memory, and control access to at least one of the plurality of services if it is determined that at least one of the stored access control privileges apply to an access request.

24. The wireless communication device of claim 23, wherein the access control module is further operable to receive at least one access control privilege that includes at least one access control attribute, wherein the privilege controls access to a plurality of content available on the wireless communication device, store the at least one access control privilege in the memory, and control access to at least one of the plurality of content if it is determined that at least one of the stored access control privileges apply to an access request.

25. The wireless communication device of claim 23, wherein the access control module is further operable to receive at least one access control privilege that includes at least one access control attribute, wherein the privilege controls access to a plurality of content available on the wireless communication device, store the at least one access control privilege in the memory, and control access to at least one of the plurality of content if it is determined that at least one of the stored access control privileges apply to an access request.

26. The wireless communication device of claim 23, wherein the access control module further comprises a user interface operable for receiving the at least one access control privilege.

27. The wireless communication device of claim 23, wherein the access control module is further operable to receive the at least one access control privilege from a wireless network device.

28. The wireless communication device of claim 23, wherein the access control attribute is chosen from the group consisting of to whom communication may be transmitted, from whom communication may be received, a type of service, type of content received from a service, environmental conditions, state conditions and any combination of the aforementioned attributes.

29. The wireless communication device of claim 23, wherein the access control module is further operable to receive the at least one access control attribute from at least one of the group consisting of a user, a wireless device manufacturer, and a network service provider.

30. The wireless communication device of claim 23, further comprising a location determination device in communication with the processor and operable to communicate device location information to the access control module, wherein the access control module is further operable to determine access control to the at least one of the plurality of services based on the at least one access control attribute being related to the location information.

31. The wireless communication device of claim 23, further comprising a clock device in communication with the processor and operable to communicate time information to the access control module, wherein the access control module is further operable to determine access control to the at least one of the plurality of services based on the at least one access control attribute being related to the time information.

32. The wireless communication device of claim 23, wherein the access control module that is operable to control access to the service is further operable to prohibit access to the at least one of the plurality of services.

33. The wireless communication device of claim 23, wherein the access control module that is operable to control access to the service is further operable to limit access to the at least one of a plurality of services.

34. The wireless communication device of claim 33, wherein the access control module that is operable to limit access to the service further defines limiting access as chosen from the group consisting of limiting a time for access to the service, limiting a geographic location for access to the service, limiting the type of content accessed, limiting the type of network services accessed, limiting to whom a communication may be transmitted and limiting from whom communication may be received.

35. A network device, comprising:

a computer platform including a processor and a memory;

an access control privilege database stored in the memory and operable to receive one or more access control privileges associated with a predetermined wireless communication device; and

a communication module operable to communicate access control privileges to at least one of the predetermined wireless communication device or a network device for controlling access by the wireless device to at least one of a plurality of services.

36. The network device of claim 35, wherein the access control database is further operable to receive one or more access control privileges from a third party entity in networked communication with the network device.

37. The network device of claim 35, wherein the access control database is further operable to receive one or more access control privileges from a network service provider.

38. The network device of claim 35, further comprising a network access filter module operable to wirelessly receive a request for access to a service from a wireless communication device, determine if one or more access control privileges in the database are associated with the wireless communication device and the request and control access to a service if it is determined that one or more access control privileges are associated with the wireless communication device and the request.

39. A wireless network device, comprising:

a computer platform including a processor and a memory;

a communication module executable by the processor and operable to access one or more access control privileges; and

a network access filter module stored in the memory and executable by the processor, wherein the network access filter is operable to wirelessly receive a request for access to a service from a wireless communication device, determine if the one or more access control privileges are apply to the request, and control access to the service if it is determined that one or more access control privileges are applicable to the request.

40. The wireless network device of claim 39, wherein the communication module executable by the processor and operable to access one or more access control privileges further operable to communicate with an access control server to retrieve any access control privileges that apply to the request.

41. The wireless network device of claim 39, further comprising an access control attribute database that includes a listing of access control privileges that are associated with at least one of a wireless communication device or a user.

42. The wireless network device of claim 41, wherein the communication module executable by the processor and operable to access one or more access control privileges is further operable to communicate with the access control attribute database to retrieve any access control privileges that apply to the request.

44. The wireless network device of claim 39, wherein the network access filter module that is operable to control access to the service is further operable to prohibit access to the service if it is determined that one or more access control privileges apply to the request.

45. The wireless network device of claim 39, wherein the network access filter module that is operable to control access to the service is further operable to limit access to the service if it is determined that one or more access control privileges apply to the request.

43. The wireless network device of 39, wherein the network access filter module is further operable to verify that the wireless communication device is enabled for access control.

46. A wireless communication system for controlling access to services on a wireless communication device, comprising:

an access control server including an access control privilege database operable to receive one or more access control privileges associated with a predetermined wireless communication device; and

a plurality of wireless communication devices comprising a computer platform including a processor and a memory, and an access control module stored in the memory and in communication with the processor that is operable to wirelessly receive one or more access control privileges from the access control server, store the one or more access control privileges in the memory, and control access to a service if it is determined that the stored access control privileges apply to a access request.

47. The system of claim 46, wherein the access control database is further operable to receive the one or more access control privileges from a wireless device user in networked communication with the network device.

48. The system of claim 46, wherein the access control database is further operable to receive one or more access control privileges from a third party entity.

49. A wireless communication system for controlling access to services on a wireless communication device, comprising:

a plurality of wireless communication devices; and

a first network device comprising a computer platform including a processor and a memory and a network access filter module operable to wirelessly receive an access service request from one of the plurality of wireless communication devices, determine if one or more access control privileges are associated with the request, and control access to the service if it is determined that one or more access control privileges are associated the request.

50. The system of claim 49, further comprising a second network device comprising a computer platform including a processor and a memory, and an access control attribute database stored in the memory and operable to receive one or more access control privileges associated with a predetermined wireless communication device.

51. The system of claim 50, wherein the first network device communicates with the second network device to determine if access control privileges are associated with the request.

52. The system of claim 49, further comprising a third network device comprising a computer platform including a processor and a memory, and an device-location database stored in the memory and operable to receive device-location information from the plurality of wireless communication devices.

53. The system of claim 52, wherein the third network device is operable to communicate the device-location information to the first network device if one or more of the determined access control privileges relate to device location.