Cryptographic system and method for geolocking and securing digital information

• US 7,660,418 B2
• Filed: 10/10/2006
• Issued: 02/09/2010
• Est. Priority Date: 10/30/2000
• Status: Expired due to Term

• Current Assignee: Longbeam Technologies LLC (IP Edge LLC)
• Original Assignee: Geocodex LLC
• Inventors: Karpf, Ronald S., Seiler, Mark E., Glick, Barry J.
• Primary Examiner(s): Abrishamkar, Kaveh
• Application Number:
  US11/546,089
• Publication Number:
  US 20070030972A1
• Time in Patent Office: 1,218 Days
• Field of Search: 380/258
• US Class Current: 380/258
• CPC Class Codes: G06F 21/1013 to locations
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04N 9/8205 involving the multiplexing of an additional signal and the colour video signal

Abstract

A method and apparatus for controlling access to digital information utilizes a location identity attribute that defines a specific geographic location. The location identity attribute is associated with the digital information such that the digital information can be accessed only at the specific geographic location. The location identity attribute further includes a location value and a proximity value. The location value corresponds to a location of an intended recipient appliance of the digital information, and may be further defined in terms of latitude, longitude and altitude dimensions. The digital information is encrypted using a geolocking key based at least in part on the location identity attribute. The geolocking key is based on a shape parameter that is determined from the location identity attribute and is included with the encrypted digital information. The shape parameter describes a shape of a geographic area, but does not identify where the geographic area is located. The appliance that receives the encrypted digital information can generate the geolocking key to decrypt the digital information based on the received shape parameter and the appliance location. If the appliance location is not within the proximate area of the location identity attribute, the appliance will be unable to generate the geolocking key to decrypt the digital information.

Claims

1. An information processing device, comprising:

a geographic location determining unit;

a file storage unit; and

a processor operatively coupled to the geographic location determining unit and file storage unit, and having suitable memory adapted to store operating system instructions operable to cause the processor to manage files within the file storage unit, including the functions of;

selecting location data corresponding to a specific geographic location at which access rights for a selected file by the information processing device is permitted;

generating a location attribute value based in part on the location data;

associating the location attribute value with the selected file; and

inhibiting file management operations pertaining to the selected file, including any copying, saving and deleting of the selected file, unless a current location of the information processing device corresponds to the location attribute value;

wherein the location attribute value is based in part on an area parameter defining a shape of a region that encompasses the specific geographic location;

wherein the functions further include generating an encrypting key based on the area parameter; and

wherein the associating function further comprises encrypting the selected file using the encrypting key.

2. The information processing device of claim 1, wherein said functions further include retrieving the current location of the information processing device from the geographic location determining unit.

3. The information processing device of claim 2, wherein said functions further include recovering the location attribute value associated with the selected file.

4. The information processing device of claim 3, wherein said functions further include copying any portion of the selected file only upon a determination that the current location corresponds to the location attribute value.

5. The information processing device of claim 3, wherein said functions further include saving the selected file on the storage unit only upon a determination that the current location corresponds to the location attribute value.

6. The information processing device of claim 5, wherein said functions further include retrieving the selected file from the storage unit only upon a determination that the current location corresponds to the location attribute value.

7. The information processing device of claim 3, wherein said functions further include deleting the selected file only upon a determination that the current location corresponds to the location attribute value.

8. The information processing device of claim 1, wherein said functions further include creating the selected file.

9. The information processing device of claim 1, wherein said location value further comprises a latitude and longitude dimension.

10. The information processing device of claim 1, wherein the associating function further comprises appending the location attribute value to the selected file.

11. The information processing device of claim 1, wherein the associating function further comprises encrypting the selected file using the location attribute value.

12. A file management system for use in an information processing device, the file management system comprising executable instructions fixed in a suitable medium and operable to perform the functions of:

selecting location data corresponding to a specific geographic location at which access rights for a selected file by the information processing device is permitted;

generating a location attribute value based in part on the location data;

associating the location attribute value with the selected file; and

inhibiting file management operations pertaining to the selected file, including any copying, saving and deleting of the selected file, unless a current location of the information processing device corresponds to the location attribute value;

wherein the location attribute value is based in part on an area parameter defining a shape of a region that encompasses the specific geographic location;

wherein the functions further include generating an encrypting key based on the area parameter; and

wherein the associating function further comprises encrypting the selected file using the encrypting key.

13. The file management system of claim 12, wherein said functions further include retrieving the current location of the information processing device.

14. The file management system of claim 12, wherein said functions further include recovering the location attribute value associated with the selected file.

15. The file management system of claim 14, wherein said functions further include copying any portion of the selected file only upon a determination that the current location corresponds to the location attribute value.

16. The file management system of claim 14, wherein said functions further include saving the selected file on a storage medium only upon a determination that the current location corresponds to the location attribute value.

17. The file management system of claim 16, wherein said functions further include retrieving the selected file from the storage medium only upon a determination that the current location corresponds to the location attribute value.

18. The file management system of claim 14, wherein said functions further include deleting the selected file only upon a determination that the current location corresponds to the location attribute value.

19. The file management system of claim 12, wherein said functions further include creating the selected file.

20. The file management system of claim 12, wherein said location value further comprises a latitude and longitude dimension.

21. The file management system of claim 12, wherein the associating function further comprises appending the location attribute value to the selected file.

22. The file management system of claim 12, wherein the associating function further comprises encrypting the selected file using the location attribute value.

23. A method of managing files in an information processing device comprising the steps of:

selecting location data corresponding to a specific geographic location at which access rights for a selected file by the information processing device is permitted;

generating a location attribute value based in part on the location data;

associating the location attribute value with the selected file; and

inhibiting file management operations pertaining to the selected file, including any copying, saving and deleting of the selected file, unless a current location of the information processing device corresponds to the location attribute value;

wherein the location attribute value is based in part on an area parameter defining a shape of a region that encompasses the specific geographic location generating an encrypting key based on the area parameter

wherein the associating step further comprises encrypting the selected file using the encrypting key.

24. The method of claim 23, further including retrieving the current location of the information processing device.

25. The method of claim 23, further including recovering the location attribute value associated with the selected file.

26. The method of claim 25, further including copying any portion of the selected file only upon a determination that the current location corresponds to the location attribute value.

27. The method of claim 25, further including saving the selected file on a storage medium only upon a determination that the current location corresponds to the location attribute value.

28. The method of claim 26, further including retrieving the selected file from the storage medium only upon a determination that the current location corresponds to the location attribute value.

29. The method of claim 25, further including deleting the selected file only upon a determination that the current location corresponds to the location attribute value.

30. The method of claim 23, further including creating the selected file.

31. The method of claim 23, wherein said location value further comprises a latitude and longitude dimension.

32. The method of claim 23, wherein the associating step further comprises appending the location attribute value to the selected file.

33. The method of claim 23, wherein the associating step further comprises encrypting the selected file using the location attribute value.