Enforcing policies in wireless communication using exchanged identities

• US 7,936,736 B2
• Filed: 02/03/2009
• Issued: 05/03/2011
• Est. Priority Date: 09/08/2008
• Status: Active Grant

• Current Assignee: Secure Communication Technologies, LLC
• Original Assignee: James Arthur Proctor, III, James Arthur Proctor, Jr.
• Inventors: Proctor, Jr., James Arthur, Proctor, III, James Arthur
• Primary Examiner(s): Hoang, Thai D
• Application Number:
  US12/364,897
• Publication Number:
  US 20100061294A1
• Time in Patent Office: 819 Days
• Field of Search: 370/338, 370342-348, 455421-4262, 4554321-433, 4554351-4353, 455436-444, 4554561-4566
• US Class Current: 370/338
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06Q 10/0875 Itemisation or classification of parts, supplies or services, e.g. bill of materials
• CPC Class Codes: G06Q 20/202 Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/384 using social networks
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/386 using messaging services or messaging apps using mobile network messaging services for payment, e.g. SMS G06Q20/3255
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 30/0207 Discounts or incentives, e.g. coupons or rebates
• CPC Class Codes: G06Q 30/0222 During e-commerce, i.e. online transactions
• CPC Class Codes: G06Q 30/0226 Incentive systems for frequent usage, e.g. frequent flyer miles programs or point systems
• CPC Class Codes: G06Q 30/0242 Determining effectiveness of advertisements
• CPC Class Codes: G06Q 30/0261 based on user location
• CPC Class Codes: G06Q 30/0282 Rating or review of business operators or products
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 30/0623 Item investigation
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 61/5038 for local use, e.g. in LAN or USB networks, or in a controller area network [CAN]
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/306 : User profiles
• CPC Class Codes: H04L 67/52 : specially adapted for the location of the user terminal
• CPC Class Codes: H04L 67/54 : Presence management, e.g. monitoring or registration for receipt of user log-on information, or the connection status of the users
• CPC Class Codes: H04L 69/18 : Multiprotocol handlers, e.g. single devices capable of handling multiple protocols
• CPC Class Codes: H04W 12/02 : Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/04 : Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 4/02 : Services making use of location information
• CPC Class Codes: H04W 4/023 : using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds
• CPC Class Codes: H04W 4/029 : Location-based management or tracking services
• CPC Class Codes: H04W 4/21 : for social networking applications
• CPC Class Codes: H04W 4/80 : Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 76/11 : Allocation or use of connection identifiers
• CPC Class Codes: H04W 8/005 : Discovery of network devices, e.g. terminals
• CPC Class Codes: H04W 8/26 : Network addressing or numbering for mobility support
• CPC Class Codes: H04W 88/06 : adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

Techniques for facilitating the exchange of information and transactions between two entities associated with two wireless devices when the devices are in close proximity to each other. A first device uses a first short range wireless capability to detect an identifier transmitted from a second device in proximity, ideally using existing radio capabilities such as Bluetooth (IEEE802.15.1-2002) or Wi-Fi (IEEE802.11). The detected identifier, being associated with the device, is also associated with an entity. Rather than directly exchanging application data flow between the two devices using the short range wireless capability, a second wireless capability allows for one or more of the devices to communicate with a central server via the internet, and perform the exchange of application data flow. By using a central server to draw on stored information and content associated with the entities the server can broker the exchange of information between the entities and the devices.

Claims

1. A method for a central server utilizing one or more wireless Wide Area Network connections to exchange information between one or more applications executing on first and second wireless devices, the central server performing the steps of:

receiving first identification information from the first wireless device, the first identification information communicated from the first wireless device to the server via the wireless Wide Area Network,

wherein the first identification information is associated with one or more of an identifier of the first wireless device or an entity associated with the first wireless device,

receiving second identification information, as collected by the first wireless device from the second wireless device via a separate local wireless link between the first and second wireless devices, and wherein the second identification information is communicated from the first wireless device to the server via the wireless Wide Area Network connection,

wherein the second identification information is associated with one or more of an identifier of the second wireless device or an identifier of an entity associated with the second wireless device;

retrieving disclosure policy data associated with the second identification information, the disclosure policy data representing rules for privacy of information concerning the second wireless device or privacy of information concerning an entity associated with the second wireless device;

comparing the information disclosure policy data and the first identification information; and

providing further information to the first wireless device concerning the entity associated with second wireless device, but only to the extent that it is consistent with the step of comparing the information disclosure policy data.

2. The method of claim 1 wherein the central server performs the further steps of:

receiving information from an application operating on the first wireless device, the information also including identifier information for the first device as well as detected identifiers from other devices having applications operating on such other devices, including at least the second wireless device.

3. The method of claim 2 additionally comprising:

storing account information registered to the applications running on each wireless device, the account information including the information disclosure policy data that specifies policies related to the disclosure of that account'"'"'s stored information to other wireless devices associated with their respective accounts and hence to respective applications on those other wireless devices.

4. The method of claim 2 wherein selected steps are performed in an application layer executing on one or more mobile devices which interfaces to a device driver interface, and further wherein the device driver interface is an NDIS driver.

5. The method of claim 1 wherein the disclosure policy data defines communication preferences for the entity associated with the second wireless device that comprise one or more of:

do not allow notification of my presence;

allow notification of my presence;

disclose my name/do not disclose my name;

disclose age/do not disclose age;

or

do or do not disclose personal details.

6. The method of claim 5 wherein the step of providing further information to the first wireless device concerning the entity associated with second wireless device is based on at least one of:

a priority of the second wireless device identifier;

a class the second wireless identifier belongs to;

a list the second wireless identifier is included on; and

/or

a list the second wireless identifier is not included on.

7. The method of claim 1 wherein the step of providing further information to the first wireless device concerning the entity associated with second wireless device is based on at least one of:

a priority of the second wireless device identifier;

a class the second wireless identifier belongs to;

a list the second wireless identifier is included on; and

/or

a list the second wireless identifier is not included on.

8. The method of claim 1 additionally comprising:

returning information to the first wireless device, as a result of the step of comparing the information disclosure policy data, which causes the first wireless device to limit re-sending of identifiers already reported by the first wireless device.

9. The method of claim 1 further comprising:

receiving a request from an application layer on the first wireless device, the request including a detected identifier for the second wireless device, and the request being a request from the first wireless device, as a requesting entity, for release of further information concerning an account of the second entity, as a requested identifier;

examining both the requesting and the requested identifier'"'"'s identification information; and

making a policy decision regarding the release of the further information related to the respective requesting and requested accounts as a result of the examining step.

10. The method of claim 1 wherein the information disclosure policy data specifies what portions of and/or the circumstances under which the further information is disclosed to the first wireless device.

11. The method of claim 1 wherein the information disclosure policy specifies that the further information can be disclosed when an identifier associated with the first entity is on a friends list of the second entity.

12. The method of claim 1 wherein the second identification information is received as part of detecting a proximity of a neighboring wireless device.

13. The method of claim 1 wherein the further information specifies an extent to which further direct communications are permitted between the first and second wireless devices.

14. The method of claim 1 additionally comprising:

returning information to the first wireless device, as a result of the step of comparing the information disclosure policy data, which causes the first wireless device to limit other actions previously performed by the first wireless device.

15. A central server utilizing one or more wireless Wide Area Network connections to exchange information between one or more applications executing on first and second wireless devices, the central server comprising:

a first receiver, for receiving first identification information from the first wireless device, the first identification information communicated from the first wireless device to the server via the wireless Wide Area Network;

wherein the first identification information is associated with one or more of an identifier of the first wireless device or an entity associated with the first wireless device;

a second receiver, for receiving second identification information, as collected by the first wireless device from the second wireless device via a separate local wireless link between the first and second wireless devices, and the second identification information communicated from the first wireless device to the server via the wireless Wide Area Network connection;

wherein the second identification information is associated with one or more of an identifier of the second wireless device or an identifier of an entity associated with the second wireless device; and

a data processor for

storing and retrieving disclosure policy data associated with the second identification information, the disclosure policy data representing rules for privacy of information concerning the second wireless device or privacy of an entity associated with the second wireless device;

comparing the information disclosure policy data and the first identification information; and

providing further information to the first wireless device concerning the entity associated with second wireless device, but only to the extent that it is consistent with the step of comparing the information disclosure policy data.

16. The server of claim 15 wherein the receiver further receives information from the application operating on the first device, the information also including identifier information for the first device as well as detected identifiers from other devices having applications operating on such other devices.

17. The server of claim 15 additionally comprising:

a storage device, for storing account information registered to the applications running on each wireless device, the account information including preferences associated with the account information that specify policies related to the disclosure of that account'"'"'s stored information to other wireless devices associated with their respective accounts and hence to respective applications.

18. The server of claim 15 wherein the preferences comprise one or more of:

do not allow notification of my presence;

allow notification of my presence;

disclose my name/do not disclose my name;

disclose age/do not disclose age;

or

do or do not disclose personal details.

19. The server of claim 15 additionally comprising:

an application layer executing on one or more mobile devices which interfaces to a device driver interface, and further wherein the device driver interface is an NDIS driver.

20. The server of claim 15 additionally comprising:

a processor, for making a decision based upon the detected identifiers, the decision depending upon a policy for a selected wireless device regarding privacy for communication with other wireless devices.

21. The server of claim 20 wherein the decision is based on at least one of:

a priority of the identifier;

a class the identifier belongs to;

a list the identifier is included on; and

/or

a list the identifier is not included on.

22. The server of claim 15 additionally comprising:

a transmitter, for returning information to the first wireless device, to cause the first wireless device to limit re-sending of identifiers already reported by the first wireless device.

23. The server of claim 15 wherein the receiver further receives a request from an application layer on the first device, the request including a detected identifier;

and

a processor for examining both the requesting and the requested identifier'"'"'s identity, and making a policy decision regarding the release of the requested identifier information related to the respective requesting and requested accounts.