Proximity-based system that secures linked wireless-enabled devices

• US 9,794,789 B1
• Filed: 10/21/2016
• Issued: 10/17/2017
• Est. Priority Date: 08/06/2014
• Status: Active Grant

• Current Assignee: Bruce Corporation
• Original Assignee: Bruce Corporation
• Inventors: Coney, Lillie Bruce
• Primary Examiner(s): Bhattacharya, Sam
• Application Number:
  US15/331,583
• Time in Patent Office: 361 Days
• Field of Search: 455410, 455411, 4554561-4563, 340 574, 34053912, 340541, 3409322
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 76/10 Connection setup

Abstract

The proliferation of networked, wireless-enabled devices is challenged by the reliance upon password management and user knowledge of privacy and security techniques to maintain control over data that is personal, proprietary or restricted. This disclosure enables a geo-proximity security and privacy system for assuring control and non-repudiation for wireless-enabled devices by relying upon location and trusted network relationships among a set of wireless-enabled devices, where one or more devices may act as a control or master key. Security in a digital society may be benefitted by the establishment of digital walls that are as flexible as the world of cyberspace to be erected whenever and wherever wireless-enabled technology is in use. The security protocol may be configured to secure a protected device or the data they contain from loss, theft, abuse or misuse.

Claims

1. A central programming device, comprising:

a processing device;

a memory device having instructions stored thereon, wherein the instructions, in response to execution by the processing device, cause the processing device to;

identify a plurality of wireless-enabled devices;

assign a relational link among at least two of the plurality of wireless-enabled devices;

generate a geo-proximity fence that encompasses an area;

define a rule for the at least two wireless-enabled devices, the rule based, at least in part, on positions of the at least two wireless-enabled devices relative to the geo-proximity fence;

determine, based on the positions of the at least two wireless-enabled devices relative to the geo-proximity fence, whether the rule is satisfied; and

grant, in response to determining that the rule is satisfied, access to secure data or to a secure location.

2. The central programming device of claim 1, wherein, to determine whether the rule is satisfied, the instructions, in response to execution by the processing device, cause the processing device to:

query the at least two wireless-enabled devices for the positions of the at least two wireless-enabled devices; and

compare the positions of the at least two wireless-enabled devices to the area encompassed by the geo-proximity fence.

3. The central programming device of claim 1, wherein the rule is satisfied by the positions of the at least two wireless-enabled devices being within the area encompassed by the geo-proximity fence.

4. The central programming device of claim 1, wherein the at least two wireless-enabled devices are associated with a user, and wherein the instructions, in response to execution by the processing device, further cause the processing device to:

determine, in response to granting access to the secure data or to the secure location, the user based on the at least two wireless-enabled devices; and

add the user to a log of users that accessed the secure data or the secure location.

5. The central programming device of claim 1, wherein the instructions, in response to execution by the processing device, further cause the processing device to:

in response to determining that the rule is not satisfied, limit functionality of the at least two wireless-enabled devices.

6. A central programming device, comprising:

a processing device; and

a memory device having instructions stored thereon, wherein the instructions, in response to execution by the processing device, cause the processing device to;

detect a plurality of wireless-enabled devices within a communication area of the central programming device;

track locations and operations of the plurality of wireless-enabled devices during an initialization period;

generate, in response to termination of the initialization period, a relational link among at least two wireless-enabled devices of the plurality of wireless-enabled devices based on the tracked locations and the tracked operations of the plurality of wireless-enabled devices; and

generate, in response to generation of the relational link among the at least two wireless-enabled devices, a rule for the at least two wireless-enabled devices based on the tracked locations and the tracked operations of the plurality of wireless-enabled devices.

7. The central programming device of claim 6, wherein the instructions, in response to execution by the processing device, further cause the processing device to:

generate a geo-proximity fence based, at least in part, on the tracked locations, wherein the geo-proximity fence encompasses an area, and wherein the rule defines an operation to be performed by the central programming device based, at least in part, on post-initialization period locations of the at least two wireless-enabled devices as compared to the area encompassed by the geo-proximity fence.

8. The central programming device of claim 7, wherein the geo-proximity fence encompasses one of the at least two wireless-enabled devices, and wherein a border of the geo-proximity fence is a certain distance from the one of the at least two wireless-enabled devices.

9. The central programming device of claim 7, wherein the instructions, in response to execution by the processing device, further cause the processing device to:

query, after the initialization period, the at least two wireless-enabled devices for the post-initialization period locations of the at least two wireless-enabled devices;

compare the post-initialization period locations to the area encompassed by the geo-proximity fence;

determine whether the at least two wireless-enabled devices are within the area based on the comparison; and

perform the operation based on the determination of whether the at least two wireless-enabled devices are within the area.

10. The central programming device of claim 9, wherein the processing device determines that the at least two wireless-enabled devices are within the area, and wherein the operation includes granting access to secure data or to a secure location in response to determining that the at least two wireless-enabled devices are within the area.

11. The central programming device of claim 9, wherein the processing device determines that one or more of the at least two wireless-enabled devices are outside of the area, and wherein the operation includes limiting functionality of the one or more of the at least two wireless-enabled devices in response to determining that the one or more of the at least two wireless-enabled devices are outside of the area.

12. The central programming device of claim 11, wherein the operation further includes identifying locations of the one or more of the at least two wireless-enabled devices that are outside of the area.

13. The central programming device of claim 11, wherein the operation further includes displaying a message on the one or more of the at least two wireless-enabled devices that are outside of the area.

14. The central programming device of claim 6, wherein the instructions, in response to execution by the processing device, further cause the processing device to:

authenticate a certain wireless-enabled device of the at least two wireless-enabled devices based on proof of authority received from the certain wireless-enabled device;

identify a request to modify the rule received from the certain wireless-enabled device; and

modify the rule based on the request.

15. The central programming device of claim 14, wherein the proof of authority includes entry of an authorized pass code or authorized biometric data.