Method and apparatus for authenticating the location of remote users of networked computing systems

• US 5,757,916 A
• Filed: 10/06/1995
• Issued: 05/26/1998
• Est. Priority Date: 10/06/1995
• Status: Expired due to Term

• Current Assignee: Google Inc. (Alphabet Inc.)
• Original Assignee: International Series Research Incorporated
• Inventors: Mathews, Michael B., Gold, Kenn L., MacDoran, Peter F., Anderson, Steven M., Denning, Dorothy E., Coffey, Mark A., Ziel, Fred A.
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US08/540,391
• Time in Patent Office: 963 Days
• Field of Search: 342/357, 380/23, 380/25, 340/825.34
• US Class Current: 380/258
• CPC Class Codes: G01S 19/215 issues related to spoofing
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent

Abstract

A method and apparatus for authenticating the identity of a remote user entity where the identity of such user entity is authenticated by use of information specific to geodetic location of the user entity but that changes constantly, making "spoofing" the host device extremely difficult. The invention is preferably implemented utilizing satellite positioning technology to produce the identifying information.

Claims

1. A system for determining the authenticity of a client seeking access to a host comprising:

a client authentication device, comprising;

first sensor locationally associated with the client for sensing transmissions from two or more signal sources that produce constantly changing transmissions containing information sufficient to derive a state vector that identifies the client location, said first sensor including a converter for converting the sensed transmissions into first state vector observations for communication to an authentication server associated with the host, and circuitry for communicating the first state vector observations to the host authentication server; and

wherein the host authentication server, comprises;

an authentication processor for receiving and processing the first state vector observations and for comparing one or more attributes of the state vector contained in the first state vector observations to predetermined authentication criteria, and circuitry for developing a user authentication signal when the one or more attributes of the first state vector observations satisfy the predetermined authentication criteria.

2. A system as recited in claim 1, further comprising:

second sensor at a predefined different location than the first sensor for sensing transmissions from the same two or more signal sources sensed by the first sensor that produce transmissions containing information sufficient to derive a state vector for the predefined different location, including a converter for converting the sensed transmissions to second state vector observations for communication to the host authentication server;

circuitry for communicating the second state vector observations to the host authentication server, said host authentication server having a processor for receiving and processing the second state vector observations and for preparing a differential state vector from the first and second state vector observations and comparing one or more attributes of the differential state vector to predefined authentication criteria; and

circuitry for developing a user authentication signal when the one or more attributes of the differential state vector satisfy the predefined authentication criteria.

3. A system as recited in claim 2, wherein the second sensor is located at the host.

4. A system as recited in claim 2, wherein the second sensor is located at a site different from the host.

5. A system as recited in claim 1, wherein the first sensor uses codeless techniques to convert the sensed transmissions into first state vector observations.

6. A system as recited in claim 2, wherein the second sensor uses codeless techniques to convert the sensed transmissions into first state vector observations.

7. A system as recited in claim 2, wherein the first sensor and the second sensor use codeless techniques to convert the sensed transmissions into state vector observations.

8. A system as recited in claim 1, wherein the authentication criteria comprise the geodetic location of the client.

9. A system as recited in claim 1, wherein the authentication criteria comprise the latitude and longitude of the client.

10. A system as recited in claim 1, wherein the authentication criteria comprise the latitude, longitude and height of the client.

11. A system as recited in claim 1, wherein the authentication criteria comprise the latitude, longitude and height of the client and a non-zero velocity of the client.

12. A system as recited in claim 1, wherein the authentication criteria comprise the geodetic location of the client with an offset from a standard geodetic reference system.

13. A system as recited in claim 1, wherein the authentication criteria comprise the geodetic location of the client and the authentication criteria are stored in encrypted form.

14. A system as recited in claim 1, wherein the first state vector observations are compressed relative to the transmissions actually sensed by the first sensor.

15. A system as recited in claim 1, wherein the first state vector observations are compressed relative to the transmissions actually sensed by the first sensor and the circuitry for communicating the first state vector observations to the authentication server communicates the transmissions sensed for a real time interval of X duration in a transmission to the authentication server having a real time duration less than X.

16. A system as recited in claim 1, wherein the first state vector observations are compressed relative to the transmissions actually sensed by the first sensor in a ratio of at least 100,000 to 1.

17. A system as recited in claim 1, wherein the first sensor uses code correlation techniques to convert the sensed transmissions into first state vector observations.

18. A system for applying to an electronic message existing at a client location and intended for a destination information for determining the authenticity of that message comprising:

a sensor locationally associated with the client for sensing transmissions from two or more signal sources that produce transmissions containing information sufficient to derive a state vector that identifies the client location, said sensor including a converter for converting the sensed transmissions into state vector observations for communication to the destination;

circuitry for associating with the message the sensed state vector observations from the sensor; and

circuitry for sending the message towards its destination with the sensed state vector observations.

19. A system as recited in claim 18 wherein the message with associated state vector observations is digitally signed.

20. A system as recited in claim 18 wherein the message with associated state vector observations is encrypted.

21. A system as recited in claim 18 wherein the message with associated state vector observations is digitally signed and encrypted.

22. A system as recited in claim 18 wherein the message requests a financial transaction.

23. A system as recited in claim 22 wherein the financial transaction is a transfer from one account to another.

24. A system as recited in claim 18 wherein the message is sent by a payor and requests a debit of an account of the payor.

25. A system as recited in claim 18 wherein a function of the message is used in the production of the state vector observations as these are associated with the message, whereby changes to the message cause the state vector observations to become invalid.

26. A method for determining the authenticity of a client seeking access to a host comprising:

at a client authentication device;

sensing at a first sensor locationally associated with the client transmissions from two or more signal sources that produce constantly changing transmissions containing information sufficient to derive a state vector that identifies the client location;

converting the sensed transmissions into first state vector observations for communication to an authentication server associated with the host; and

communicating the first state vector observations to the host authentication server; and

at the host authentication server;

receiving and processing the first state vector observations;

comparing one or more attributes of the state vector contained in the first state vector observations to predetermined authentication criteria; and

developing a user authentication signal when the one or more attributes of the first state vector observations satisfy the predetermined authentication criteria.

27. A method as recited in claim 26, further comprising:

at a predefined different location than the first sensor;

sensing transmissions from the same two or more signal sources sensed by the first sensor that produce transmissions containing information sufficient to derive a state vector for the predefined different location;

converting the sensed transmissions to second state vector observations for communication to the host authentication server; and

communicating the second state vector observations to the host authentication server; and

at the host authentication server;

receiving and processing the second state vector observations;

preparing a differential state vector from the first and second state vector observations;

comparing one or more attributes of the differential state vector to predefined authentication criteria; and

developing a user authentication signal when the one or more attributes of the differential state vector satisfy the predefined authentication criteria.

28. A method for applying to an electronic message existing at a client location and intended for a destination information for determining the authenticity of that message comprising:

sensing at a sensor locationally associated with the client transmissions from two or more signal sources that produce transmissions containing information sufficient to derive a state vector that identifies the client location;

converting the sensed transmissions into state vector observations for communication to the destination;

associating with the message the sensed state vector observations from the sensor; and

sending the message towards its destination with the sensed state vector observations.