Location-based security rules

• US 7,428,411 B2
• Filed: 07/21/2005
• Issued: 09/23/2008
• Est. Priority Date: 12/19/2000
• Status: Expired due to Term

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: At&T Delaware Intellectual Property, Inc. (AT&T, Inc.)
• Inventors: Zellner, Samuel
• Primary Examiner(s): Cumming, William D.
• Application Number:
  US11/187,347
• Publication Number:
  US 20050272445A1
• Time in Patent Office: 1,160 Days
• Field of Search: 709/223, 455/419, 455/427, 726/2, 726/7, 729/11, 729/15, 729/20, 705/35, 705/400, 340/5.4
• US Class Current: 455/419
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04M 1/66 with means for preventing unauthorised or fraudulent calling verifying user identity or authority in secret or secure digital communications H04L9/32
• CPC Class Codes: H04M 1/72457 according to geographic location
• CPC Class Codes: H04M 2203/6045 Identity confirmation
• CPC Class Codes: H04M 2203/609 Secret communication
• CPC Class Codes: H04M 2242/15 Information service where the information is dependent on the location of the subscriber
• CPC Class Codes: H04M 2242/22 Automatic class or number identification arrangements
• CPC Class Codes: H04M 3/42059 Making use of the calling party identifier
• CPC Class Codes: H04M 3/42136 Administration or customisation of services
• CPC Class Codes: H04M 3/42357 where the information is provided to a monitoring entity such as a potential calling party or a call processing server
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 : Location-based management or tracking services
• CPC Class Codes: H04W 4/18 : Information format or content conversion, e.g. adaptation by the network of the transmitted or received information for the purpose of wireless delivery to users or terminals

Abstract

Location based security rules are provided for preventing unauthorized access to a device, application, system, content, and/or network, etc. The location-based security rules enable a user, computing device, system, etc. to access the requested item or information when the user provides proper identification information. The proper identification information is based in part on the location of the user and/or the user'"'"'s access request.

Claims

1. A computer-readable medium containing computer readable instruction when executed by a computing device perform a method of securely accessing information, the method comprising:

receiving an access request for information from a location;

receiving location information associated with the location;

comparing the location information to a database of predefined locations;

requiring a location-based input based on a security rule associated with a comparison of the location information to the predefined locations of the database; and

providing access to the information if the location-based input satisfies an acceptable response, wherein the acceptable response provides at least one proper identifier that is dependant upon the location and the security rule.

2. The computer-readable medium of claim 1, the method further comprising administering a first location-based input by a local user and a second location-based input by a remote administrator.

3. The computer-readable medium of claim 1, the method further comprising enabling a plurality of location-based security rules, each location-based security rule corresponding to a device, network, system, application, transaction, and content associated with the access request.

4. The computer-readable medium of claim 1, the method further comprising requiring a biometric identifier when the comparison yields that the location requires a high level of security.

5. The computer-readable medium of claim 1, the method further comprising requiring a corporate identification (ID) and password when the comparison yields the location of an office location.

6. The computer-readable medium of claim 1, the method further comprising authenticating the location information.

7. The computer-readable medium of claim 1, the method further comprising informing an administrator when the location-based input is incorrect.

8. The computer-readable medium of claim 1, the method further comprising utilizing one of at least an iris scanning application, face recognition application, voice recognition application, hand/finger recognition application, fingerprint recognition application, RFID tag application, and/or smartcard application to verify the access request when the comparison yields a location that requires a high level of security.

9. The computer-readable medium of claim 1, the method further comprising requiring a user ID when the comparison yields the location of a home location.

10. A computer-readable medium having computer executable instructions when executed by a computer perform a method of secure access to information, the method comprising:

identifying a location associated with an access request; and

providing a number of location-based security rules requiring user specific identifiers based on the location of the access request, the security rules, and content of the access request, wherein each location-based security rule is associated with at least one of an access request and location of the access request.

11. The computer-readable medium of claim 10, the method further comprising requiring a biometric identifier when the location of the access request requires a high level of security.

12. The computer-readable medium of claim 10, the method further comprising requiring a corporate ID and password when the location of the access request corresponds to a corporate office.

13. The computer-readable medium of claim 10, the method further comprising utilizing one of at least an iris scanning application, face recognition application, voice recognition application, hand/finger recognition application, fingerprint recognition application, RFID tag application, and/or smartcard application to verify the access request when the location of the access request requires a high level of security.

14. The computer-readable medium of claim 10, the method further comprising requiring a user ID when the location of the access request corresponds to a home location.

15. The computer-readable medium of claim 10, the method further comprising authenticating the location of the access request.

16. The computer-readable medium of claim 10, wherein each location-based security rule corresponds to a device, network, system, application, transaction, or content associated with the access request.

17. The computer-readable medium of claim 10, the method further comprising informing an administrator when at least one of the location-based security rules is violated.

18. A system including a processor for executing computer executable instructions for performing a method of enabling access to information, the system comprising:

means for examining an access request for the information,

means for identifying a location associated with the access request,

means for providing a level of security including requiring user specific identifiers based in part on the location, wherein the level of security is based at least in part on the location associated with the access request; and

means for providing access to the information configured to provide access if the identifier is proper, wherein the identifier is dependant upon the location and a security rule.

19. The system of claim 18, further comprising means for enabling one or more location-based security rules, each location-based security rule corresponding to a device, network, system, application, transaction, or content associated with the access request.

20. The system of claim 18, further comprising utilizing one of at least an iris scanning application, face recognition application, voice recognition application, hand/finger recognition application, fingerprint recognition application, RFID tag application, and/or smartcard application when the access request requires a high level of security.