LOCATION-BASED SYSTEM PERMISSIONS AND ADJUSTMENTS AT AN ELECTRONIC DEVICE

• US 20150170134A1
• Filed: 02/20/2015
• Published: 06/18/2015
• Est. Priority Date: 01/06/2009
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Gum, Arnold Jason
• Granted Patent: US 9,928,500 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 21/81 by operating on the power supply, e.g. enabling or disabling power-on, sleep or resume operations
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 2221/2147 Locking files
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed

Abstract

Securing access to a portable electronic device (PED), securing e-commerce transactions at an electronic device (ED) and dynamically adjusting system settings at a PED are disclosed. In an example, usage or mobility characteristics of the PED or ED (e.g., a location of the ED or PED, etc.) are compared with current parameters of the PED or ED. A determination as to whether to permit an operation (e.g., access, e-commerce transaction, etc.) at the ED or PED can be based at least in part upon a degree to which the current parameters conform with the usage or mobility characteristics. In another example, at least a current location of a PED can be used to determine which system settings to load at the PED.

Claims

1. A method of securing e-commerce transactions to an electronic device, comprising:

detecting an attempt to conduct an e-commerce transaction at the electronic device;

determining whether usage characteristics associated with the detected attempt conform with an e-commerce usage profile associated with the electronic device or a user of the electronic device, the e-commerce usage profile including one or more pre-defined usages of the portable electronic device, each usage associated with a location characteristic of the portable electronic device; and

determining whether to permit the e-commerce transaction at the electronic device based on whether the usage characteristics conform with the e-commerce usage profile.

2. The method of claim 1, wherein the usage characteristics include at least one of a location of the electronic device, a Web Site associated with the e-commerce transaction, types of items being purchased in the e-commerce transaction and a total transaction amount of the e-commerce transaction.

3. The method of claim 1, wherein the e-commerce usage profile includes at least one of a list of locations or location ranges, a list of Web Sites, a list of item types and one or more transaction amount thresholds.

4. The method of claim 1, further comprising:

prompting a user of the electronic device for authentication information,

wherein an authentication level associated with the user prompt is based on a degree to which the usage characteristics conform with the e-commerce usage profile.

5. The method of claim 4, further comprising:

denying the electronic device permission to conduct the e-commerce transaction if the user does not provide adequate authentication in response to the user prompt.

6. The method of claim 5, further comprising:

prompting the user for manual authentication in response to the denying step.

7. The method of claim 5, further comprising:

permitting the electronic device permission to conduct the e-commerce transaction if the user provides adequate authentication in response to the user prompt.

8. The method of claim 7, further comprising:

updating the e-commerce usage profile such that, for future e-commerce transactions, the usage characteristics associated with the detected attempt indicate conformity with the e-commerce usage profile.

9. The method of claim 2, wherein the location characteristic corresponds to at least one of a geographic location of the electronic device, whether the electronic device resides in a given geographic range and signals received at the portable electronic device.

10. The method of claim 9, wherein the received signals include one or more of cellular signals, WiFi signals and satellite positioning system (SPS) signals.

11. An electronic device, comprising:

means for detecting an attempt to conduct an e-commerce transaction at the electronic device;

means for determining whether usage characteristics associated with the detected attempt conform with an e-commerce usage profile associated with the electronic device or a user of the electronic device, the e-commerce usage profile including one or more pre-defined usages of the portable electronic device, each usage associated with a location characteristic of the portable electronic device; and

means for determining whether to permit the e-commerce transaction at the electronic device based on whether the usage characteristics conform with the e-commerce usage profile.

12. The electronic device of claim 11, wherein the usage characteristics include at least one of a location of the electronic device, a Web Site associated with the e-commerce transaction, types of items being purchased in the e-commerce transaction and a total transaction amount of the e-commerce transaction.

13. The electronic device of claim 11, further comprising:

means for prompting a user of the electronic device for authentication information,

wherein an authentication level associated with the user prompt is based on a degree to which the usage characteristics conform with the e-commerce usage profile.

14. An electronic device, comprising:

logic configured to detect an attempt to conduct an e-commerce transaction at the electronic device;

logic configured to determine whether usage characteristics associated with the detected attempt conform with an e-commerce usage profile associated with the electronic device or a user of the electronic device, the e-commerce usage profile including one or more pre-defined usages of the portable electronic device, each usage associated with a location characteristic of the portable electronic device; and

logic configured to determine whether to permit the e-commerce transaction at the electronic device based on whether the usage characteristics conform with the e-commerce usage profile.

15. The electronic device of claim 14, wherein the usage characteristics include at least one of a location of the electronic device, a Web Site associated with the e-commerce transaction, types of items being purchased in the e-commerce transaction and a total transaction amount of the e-commerce transaction.

16. The electronic device of claim 65, further comprising:

logic configured to prompt a user of the electronic device for authentication information,

wherein an authentication level associated with the user prompt is based on a degree to which the usage characteristics conform with the e-commerce usage profile.

17. A computer-readable medium comprising instructions, which, when executed by an electronic device, cause the electronic device to perform operations, the instructions comprising:

program code to detect an attempt to conduct an e-commerce transaction at the electronic device;

program code to determine whether usage characteristics associated with the detected attempt conform with an e-commerce usage profile associated with the electronic device or a user of the electronic device, the e-commerce usage profile including one or more pre-defined usages of the portable electronic device, each usage associated with a location characteristic of the portable electronic device; and

program code to determine whether to permit the e-commerce transaction at the electronic device based on whether the usage characteristics conform with the e-commerce usage profile.

18. The computer-readable medium of claim 17, wherein the usage characteristics include at least one of a location of the electronic device, a Web Site associated with the e-commerce transaction, types of items being purchased in the e-commerce transaction and a total transaction amount of the e-commerce transaction.

19. The computer-readable medium of claim 17, further comprising:

program code to prompt a user of the electronic device for authentication information,

wherein an authentication level associated with the user prompt is based on a degree to which the usage characteristics conform with the e-commerce usage profile.