Enforcing policies in wireless communication using exchanged identities

• US 9,038,129 B2
• Filed: 01/18/2013
• Issued: 05/19/2015
• Est. Priority Date: 09/08/2008
• Status: Active Grant

• Current Assignee: Secure Communication Technologies, LLC
• Original Assignee: Proxicom Wireless LLC
• Inventors: Proctor, James Arthur Jr., Proctor, James Arthur III
• Primary Examiner(s): Tabor, Amare F
• Assistant Examiner(s): Zoubair, Noura
• Application Number:
  US13/744,457
• Publication Number:
  US 20130133087A1
• Time in Patent Office: 851 Days
• Field of Search: 726/1, 726/7, 726/28, 705/114, 705/16, 705/40, 705/67, 235/375, 370/338, 370/503, 445/414
• US Class Current: 726/1
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06Q 10/0875 Itemisation or classification of parts, supplies or services, e.g. bill of materials
• CPC Class Codes: G06Q 20/202 Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR
• CPC Class Codes: G06Q 20/3224 Transactions dependent on location of M-devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/384 using social networks
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/386 using messaging services or messaging apps using mobile network messaging services for payment, e.g. SMS G06Q20/3255
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G06Q 30/0207 Discounts or incentives, e.g. coupons or rebates
• CPC Class Codes: G06Q 30/0222 During e-commerce, i.e. online transactions
• CPC Class Codes: G06Q 30/0226 Incentive systems for frequent usage, e.g. frequent flyer miles programs or point systems
• CPC Class Codes: G06Q 30/0242 Determining effectiveness of advertisements
• CPC Class Codes: G06Q 30/0261 based on user location
• CPC Class Codes: G06Q 30/0282 Rating or review of business operators or products
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 30/0623 Item investigation
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 61/5038 for local use, e.g. in LAN or USB networks, or in a controller area network [CAN]
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/306 : User profiles
• CPC Class Codes: H04L 67/52 : specially adapted for the location of the user terminal
• CPC Class Codes: H04L 67/54 : Presence management, e.g. monitoring or registration for receipt of user log-on information, or the connection status of the users
• CPC Class Codes: H04L 69/18 : Multiprotocol handlers, e.g. single devices capable of handling multiple protocols
• CPC Class Codes: H04W 12/02 : Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/04 : Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 4/02 : Services making use of location information
• CPC Class Codes: H04W 4/023 : using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds
• CPC Class Codes: H04W 4/029 : Location-based management or tracking services
• CPC Class Codes: H04W 4/21 : for social networking applications
• CPC Class Codes: H04W 4/80 : Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 76/11 : Allocation or use of connection identifiers
• CPC Class Codes: H04W 8/005 : Discovery of network devices, e.g. terminals
• CPC Class Codes: H04W 8/26 : Network addressing or numbering for mobility support
• CPC Class Codes: H04W 88/06 : adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

Techniques for facilitating the exchange of information and transactions between two entities associated with two wireless devices when the devices are in close proximity to each other. A first device uses a first short range wireless capability to detect an identifier transmitted from a second device in proximity, ideally using existing radio capabilities such as Bluetooth (IEEE802.15.1-2002) or Wi-Fi (IEEE802.11). The detected identifier, being associated with the device, is also associated with an entity. Rather than directly exchanging application data flow between the two devices using the short range wireless capability, a second wireless capability allows for one or more of the devices to communicate with a central server via the internet, and perform the exchange of application data flow. By using a central server to draw on stored information and content associated with the entities the server can broker the exchange of information between the entities and the devices.

Claims

1. A method for facilitating an exchange of information between first and second wireless devices or entities, the method utilizing a server performing the steps of:

receiving a first unique identifier communicated over a wide area link from the first wireless device,

receiving a second unique identifier associated with the second wireless device, the second unique identifier associated with the second wireless device being communicated to the first wireless device over a local wireless link, and then from the first wireless device to the server over the wide area link,

comparing a disclosure policy associated with the second unique identifier with the first unique identifier from the first wireless device or with an identifier or other data derived from the first unique identifier, wherein the disclosure policy specifies data representing one or more rules for privacy of information concerning the second wireless device or privacy of information concerning an entity associated with the second wireless device; and

communicating further information to the first wireless device as permitted by a result of comparing the disclosure policy, and wherein said further information is based, at least in part, upon a stored state resulting from previous interactions utilizing said server between the entities associated with the first and second unique identifiers, and wherein said further information additionally comprises content relating to one or more of the following;

a current step of a multiple step electronic commerce transaction, wherein said current step is related to said stored state and related to feedback ratings by other entities related to an entity associated with the second wireless device,

a reward for participation in a loyalty program, wherein said reward is dependent upon said stored state and related to past purchasing behavior of an entity associated with the first wireless device, or

social network content wherein said social network content is dependent upon said stored state, wherein said stored state comprises a friends list associated with the entity associated with the second wireless device, and wherein said disclosure policy utilized in said step of comparing comprises the inclusion of an entity associated with the first wireless device being included in said friends list and resulting in access to the otherwise private social network content of the entity associated with the second wireless device.

2. The method of claim 1 wherein the first unique identifier is associated with a person and the second unique identifier is associated with a business entity.

3. The method of claim 1 wherein at least one of the first or second unique identifiers further comprises one or more of

a Media Access Control (MAC) address;

a Bluetooth Device Name;

a Bluetooth Device Address (BD_ADDR);

a Service Set Identifier (SSID);

a Basic Service Set Identifier (BSSID);

a services list provided in a LMP_features_req message or LMP_features_req ext message;

an application layer identifier;

an email address;

a username;

or

an account number.

4. The method of claim 1 wherein the data in the disclosure policy specifies one or more of the following for an entity or person associated with the second device:

allow/do not allow notification of local presence;

disclose personal name/do not disclose personal name;

disclose age/do not disclose age;

or

do or do not disclose other personal details;

or

do or do not disclose information relating an account associated with the entity or person associated with the first or second unique identifier;

or

do or do not disclose information relating status of a transaction between the entity or person associated with the first and the entity or person associated with the second unique identifier;

or

do not disclose information if the first unique identifier is not authorized;

or

the authorization status of the entity associated with the first unique identifier;

or the state of a multiple step process.

5. The method of claim 1 wherein the data in the disclosure policy specifies disclosure of information as a function of the identifier of the first wireless device as a requesting entity.

6. The method of claim 5 wherein the identifier of the requesting entity is classified as one of

may be disclosed to any requesting entity;

a requesting entity must provide input;

approving the disclosure of the information;

do not disclose information to any other entity;

or

a Information Group Disclosure Policy which may consist of two or more requesting entities on a list of contacts, friends, groups, and characteristics.

7. The method of claim 1 additionally comprising, before the step of receiving a second identifier:

setting data in the disclosure policy by an entity associated with the second wireless device.

8. The method of claim 7 wherein the data set by the entity associated with the second wireless device specifies one or more of:

they do not wish to receive any unsolicited information;

they do not wish to receive information from a broadcast;

or

they do wish to receive information from a broadcast device advertising a discount.

9. The method of claim 1 additionally comprising, before the step of communicating further information to the first wireless device:

comparing a second disclosure policy associated with the first unique identifier with the second unique identifier, wherein the second disclosure policy specifies privacy of communication concerning the entity associated with the first wireless device.

10. The method of claim 1 wherein the further information provided to the first wireless device is dependent upon:

a priority of the second wireless device identifier;

a class the second wireless identifier belongs to;

a list the second wireless identifier is included on; and

/or

a list the second wireless identifier is not included on.

11. The method of claim 1 wherein the further information provided to the first wireless device further comprises at least one of:

a visual identifier of a service or individual;

information about an available service;

an autoplay script;

device capabilities;

a content type field specifying one or more of a picture, a media file, XML/AJAX;

or

login credentials for a social network;

payment information;

or instant message credentials;

or

information relating to an electronic transaction with the entity or person associated with the first or second unique identifiers;

or

information relating to an order placed by the person or entity associated with the first unique identifier;

or

a confirmation of a step in the sending of a mobile payment or money transfer to an entity associated with the second wireless device;

or

a music file;

or

a video or movie file.

12. The method of claim 1 wherein before the step of the server comparing the disclosure policy associated with second unique identifier, the first wireless device has performed the steps of:

scanning for and receiving unique identifiers associated with two or more wireless devices associated with a merchant entity located in proximity to the first wireless device;

presenting a list of detected merchant unique identifiers to a person associated with the first wireless device; and

receiving input from the person indicating a selection of one of the wireless devices in proximity as the second unique identifier; and

sending the second unique identifier to the server.

13. The method of claim 1 additionally comprising, before the step of communicating further information to the first wireless device:

receiving a message from the server indicating an entity associated with the second wireless device has performed an action indicating approval of receiving the further information.

14. The method of claim 9 additionally comprising, before the step of communicating further information to the first wireless device:

comparing the disclosure policy associated with the first unique identifier with a second disclosure policy associated with the second unique identifier, to determine that each of the respective communication privacy preferences specifies that communication with a wireless device associated with the other respective unique identifier is permitted.

15. The method of claim 1 additionally comprising:

notifying the first and second wireless devices of common timing reference information specifying active times and non-active times for the steps of receiving the first and second unique identifiers.

16. A server apparatus for facilitating an exchange of information between first and second wireless devices or entities, the server comprising:

a receiver, for receiving a first unique identifier communicated over a wide area network from the first wireless device, and for receiving a second unique identifier associated with the second wireless device, the second unique identifier associated with the second wireless device having been prior communicated to the first wireless device over a local wireless link, and then received from the first wireless device by the server over the wide area network;

a data processor, for locating a disclosure policy associated with the second unique identifier and comparing the disclosure policy to the first unique identifier received from the first wireless device or with an identifier or other data derived from the first unique identifier, wherein the disclosure policy specifies data representing one or more rules for privacy of information concerning the first and second wireless devices; and

a transmitter, for communicating further information to the first wireless device as permitted by the disclosure policy, and wherein said further information is based, at least in part, upon a stored state resulting from previous interactions between the entities associated with the first and second unique identifiers, and wherein said further information additionally comprises content relating to one or more of the following;

a current step of a multiple step electronic commerce transaction, wherein said current step is related to said stored state and related to feedback ratings by other entities related to an entity associated with the second wireless device,

a reward for participation in a loyalty program, wherein said reward is dependent upon said stored state and related to past purchasing behavior of an entity associated with the first wireless device, or

social network content wherein said social network content is dependent upon said stored state, wherein said stored state comprises a friends list associated with the entity associated with the second wireless device, and wherein said disclosure policy utilized in said step of comparing comprises the inclusion of an entity associated with the first wireless device being included in said friends list and resulting in access to the otherwise private social network content of the entity associated with the second wireless device.

17. The apparatus of claim 16 wherein the first unique identifier is associated with a person and the second unique identifier is associated with a business entity.

18. The apparatus of claim 16 wherein at least one of the first or second unique identifiers further comprises one or more of

a Media Access Control (MAC) address;

a Bluetooth Device Name;

a Bluetooth Device Address (BD_ADDR);

a Service Set Identifier (SSID);

a Basic Service Set Identifier (BSSID);

a services list provided in a LMP_features_req message or LMP_features_req ext message;

an application layer identifier;

an email address,

a user name, or

an account number.

19. The apparatus of claim 16 wherein the data in the disclosure policy specifies one or more of the following for an entity or person associated with the second device:

allow/do not allow notification of local presence;

disclose personal name/do not disclose personal name;

disclose age/do not disclose age;

or

do or do not disclose other personal details;

or

do or do not disclose information relating an account associated with the entity or person associated with the first or second unique identifier;

or

do or do not disclose information relating status of a transaction between the entity or person associated with the first and the entity or person associated with the second unique identifier;

or

do not disclose information if the first unique identifier is not authorized;

or

the authorization status of the entity associated with the first unique identifier;

or the state of a multiple step process.

20. The apparatus of claim 16 wherein the data in the disclosure policy specifies disclosure of information as a function of the identifier of the first wireless device as a requesting entity.

21. The apparatus of claim 20 wherein the identifier of the requesting entity is classified as one of

may be disclosed to any requesting entity;

a requesting entity must provide input;

approving the disclosure of the information;

do not disclose information to any other entity;

or

a Information Group Disclosure Policy which may consist of two or more requesting entities on a list of contacts, friends, groups, characteristics, circles, or followers.

22. The apparatus of claim 16 wherein the processor:

receives data for the disclosure policy from a person associated with the second wireless device.

23. The apparatus of claim 22 wherein the data from the person associated with the second wireless device specifies one or more of:

they do not wish to receive any unsolicited information;

they do not wish to receive information from a broadcast;

or

they do wish to receive information from a broadcast device advertising a discount.

24. The apparatus of claim 16 additionally wherein the processor further compares a second disclosure policy associated with the first unique identifier with the second unique identifier, and wherein the second disclosure policy specifies privacy of communication for the first wireless device.

25. The apparatus of claim 16 wherein the further information provided to the first wireless device is dependent upon:

a priority of the second wireless device identifier;

a class the second wireless identifier belongs to;

a list the second wireless identifier is included on; and

/or

a list the second wireless identifier is not included on.

26. The apparatus of claim 16 wherein the further information provided to the first wireless device comprises at least one of:

a visual identifier of a service or individual;

information about an available service;

an autoplay script;

device capabilities;

a content type field specifying one or more of a picture, a media file, XML/AJAX;

or

login credentials for a social network;

payment information;

or instant message credentials;

or

information relating to an electronic transaction with the entity or person associated with the first or second unique identifiers;

or

information relating to an order placed by the person or entity associated with the first unique identifier;

or

a confirmation of a step in the sending of a mobile payment or money transfer to an entity associated with the second wireless device;

or

a music file;

or

a video or movie file.

27. The apparatus of claim 16 wherein the server receives the first wireless identifier from a first wireless device that further comprises:

a scanner for receiving unique identifiers associated with two or more wireless devices associated with a merchant entity located in proximity to the first wireless device;

a display for presenting a list of detected merchant unique identifiers to a person associated with the first wireless device;

a receiver for receiving input from the person indicating a selection of one of the wireless devices in proximity as the second unique identifier; and

a transmitter for sending the second unique identifier to the server.

28. The apparatus of claim 16 wherein the processor additionally:

receives a message from the first wireless device indicating a person associated with the first wireless device has performed an action indicating approval of receiving the further information.

29. The apparatus of claim 24 wherein the processor further compares, a disclosure policy associated with the first unique identifier with a second disclosure policy associated with the second unique identifier to determine that the each of the respective communication privacy preferences specifies that communication with a wireless device associated with the other respective unique identifier is permitted.

30. The apparatus of claim 16 wherein the transmitter further sends, to the first and second wireless devices, common timing reference information specifying active times and non-active times for the steps of receiving the first and second unique identifiers.