Secure beacon-based location systems and methods

• US 9,980,137 B2
• Filed: 12/09/2016
• Issued: 05/22/2018
• Est. Priority Date: 12/11/2015
• Status: Active Grant

• Current Assignee: Patrocinium Systems, LLC
• Original Assignee: Patrocinium Systems, LLC
• Inventors: South, John A., Schiller, Michael
• Primary Examiner(s): Bhattacharya, Sam
• Application Number:
  US15/374,543
• Publication Number:
  US 20170171754A1
• Time in Patent Office: 529 Days
• Field of Search: 4554041, 4554042, 4554561, 4554562, 455521
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/90 Services for handling of emergency or hazardous situations, e.g. earthquake and tsunami warning systems [ETWS]

Abstract

A method for secure, beacon-based emergency location is disclosed. The method includes detecting, with an app instance executing on a user device, a signal from a beacon disposed in a geographical location physically proximate to the user device, and transmitting in response to the detecting app instance verification information to the beacon. Further, the method includes receiving, with the app instance executing on the user device, beacon verification information from the beacon, the beacon verification information being based at least partially on the app instance verification information, and transmitting the beacon verification information to an emergency information server. The method also includes authenticating, with the emergency information server, the beacon verification information to verify that the user device is physically proximate to the beacon and, if the beacon verification information is authentic, determining the geographical location of the user device based on the geographical location of the beacon.

Claims

1. A method for secure, beacon-based emergency location, which comprises:

detecting, with an app instance executing on a user device associated with an individual, a signal from a beacon disposed in a geographical location physically proximate to the user device;

transmitting in response to the detecting, with the app instance executing on the user device, app instance verification information to the beacon;

receiving, with the app instance executing on the user device, beacon verification information from the beacon, the beacon verification information being based at least partially on the app instance verification information;

transmitting, with the app instance executing on the user device, the beacon verification information to an emergency information server;

authenticating, with the emergency information server, the beacon verification information to verify that the user device is physically proximate to the beacon; and

if the beacon verification information is authentic, determining, with the emergency information server, the geographical location of the user device based on the geographical location of the beacon.

2. The method of claim 1,

wherein the signal from the beacon includes a beacon identifier uniquely identifying the beacon;

wherein the beacon verification information includes the beacon identifier; and

wherein determining the geographical location of the user device includes retrieving the geographical location of the beacon based on the beacon identifier.

3. The method of claim 1,

wherein the beacon verification information includes a digest digitally signed with a private key uniquely associated with the beacon;

and

wherein authenticating the beacon verification information includes authenticating the digest with a public key corresponding to the private key uniquely associated with the beacon.

4. The method of claim 3, wherein the digest includes at least a portion of the app instance verification information.

5. The method of claim 4, wherein the portion of the app instance verification information includes a random number digitally signed with a private key uniquely associated with the app instance.

6. The method of claim 5, wherein authenticating the beacon verification information includes authenticating the random number with a public key corresponding to the private key uniquely associated with the app instance.

7. The method of claim 4, wherein the digest includes a timestamp concatenated with the portion of the app instance verification information.

8. The method of claim 1, wherein the signal from the beacon is a Bluetooth low energy signal.

9. The method of claim 1, which further comprises transmitting, with the emergency information server, information related to an emergency situation to the app instance based on the determined geographical location of the user device.

10. A method for secure detection of beacon tampering, which comprises:

determining, with a sensor in a beacon disposed in a geographical location, a tamper status of the beacon, the tamper status indicating whether the beacon has been physically tampered with;

detecting, with an app instance executing on a user device disposed in a geographical location physically proximate to the beacon, a signal from the beacon;

receiving, with the app instance executing on the user device, the tamper status from the beacon;

transmitting, with the app instance executing on the user device, the tamper status from the user device to an emergency information server; and

authenticating, with the emergency information server, the tamper status to verify that tamper status was generated by the beacon.

11. The method of claim 10, which further comprises, if the tamper status is authentic and indicates the beacon has not been tampered with, determining, with the emergency information server, the geographical location of the user device based on the geographical location of the beacon.

12. The method of claim 11, which further comprises transmitting, with the emergency information server, information related to an emergency situation to the user device based on the determined geographical location of the user device.

13. The method of claim 10,

wherein the tamper status includes a digest digitally signed with a private key uniquely associated with the beacon;

and

wherein authenticating the tamper status includes authenticating the digest with a public key corresponding to the private key uniquely associated with the beacon.

14. The method of claim 13, wherein the digest is a concatenation of the tamper status and at least one additional value.

15. The method of claim 14, wherein the at least one additional value includes a random number and a timestamp.

16. The method of claim 10,

further comprising transmitting in response to the detecting, with the app instance executing on the user device, app instance verification information to the beacon;

wherein the tamper status is based at least partially on the app instance verification information; and

wherein authenticating the tamper status includes authenticating the app instance information.

17. The method of claim 10, wherein the signal from the beacon is a Bluetooth low energy signal.

18. A system for secure, beacon-based emergency location, comprising:

a beacon physically disposed in a geographical location, the beacon configured to;

broadcast a signal;

determine, with a sensor in the beacon, a tamper status of the beacon, the tamper status indicating whether the beacon has been physically tampered with;

an app instance executing on a user device physically proximate to the beacon, the application instance configured to;

detect the signal from the beacon; and

receive the tamper status from the beacon; and

an emergency information server communicatively coupled to the user device, the emergency information server being configured to;

receive, from the app instance executing on the user device, the tamper status; and

authenticate the tamper status to verify that tamper status was generated by the beacon.

19. The system of claim 18, wherein the emergency information server is further configured to determine, if the tamper status package is authentic and indicates the beacon has not been tampered with, the geographical location of the user device based on the geographical location of the beacon.

20. The system of claim 19, wherein the emergency information server is further configured to transmit information related to an emergency situation to the user device based on the determined geographical location of the user device.

21. The system of claim 18,

wherein the tamper status includes a digest digitally signed with a private key uniquely associated with the beacon;

and

wherein the emergency information server is further configured to authenticate the digest with a public key corresponding to the private key uniquely associated with the beacon.

22. The system of claim 21, wherein the digest is a concatenation of the tamper status and a random number and a timestamp.

23. A computer-implemented method for secure, beacon-based emergency location, which comprises:

receiving, with an emergency information server, emergency location information describing a geographical location of an emergency;

receiving, with the emergency information server, first device location information from a user device associated with an individual;

determining, with the emergency information server, whether the user device is located within a geo-fence based on the first device location information, the geo-fence encompassing a geographical area including the geographical location of the emergency;

if the user device is determined to be in the geo-fence, transmitting, with the emergency information server, a request for second device location information to the user device, the second device location information being different than the first device location information;

receiving, with the emergency information server and in response to the request for the second device location information, a beacon identifier from the user device, the beacon identifier being associated with a beacon disposed within a subsection of a structure; and

determining, with the emergency information server, in which subsection of the structure the user device is located based on the beacon identifier and a known location of the beacon.

24. The method of claim 23, wherein the structure is a multi-floor structure and the subsection is a floor of the structure.

25. The method of claim 24, wherein the beacon identifier comprises a first component representing the structure and a second component representing the floor of the structure.

26. The method of claim 23, wherein the known location of the beacon is stored in a database accessible by the emergency information server.

27. The method of claim 23, wherein the beacon is a Bluetooth beacon.

28. The method of claim 23, wherein the beacon identifier is broadcast by the beacon and received by the user device when the user device is within broadcast range of the beacon.

29. The method of claim 23, wherein the first device location information is based on GPS signals received by the user device.

30. The method of claim 23, further comprising receiving, with the emergency information server and in response to the request for the second device location information, range information representing a distance from the beacon to the user device.

31. The method of claim 30, further comprising determining the location of the user device within the subsection based on the range information.