Systems, devices, and methods for protecting user devices

Abstract

According to a first aspect of the present disclosure, there is provided a system comprising: a user device whose unauthorized displacement is monitored; an Ultra-Wide Band (UWB) communication unit configured to establish a UWB communication channel with an external positioning device and to perform at least one positioning operation over said UWB communication channel; and a processing unit configured to detect said unauthorized displacement of said user device by analyzing an output of said positioning operation. According to a second aspect of the present disclosure, there is provided a positioning device comprising: an Ultra-Wide Band (UWB) communication unit configured to establish a UWB communication channel with an external system and to perform at least one positioning operation over said UWB communication channel; and a processing unit configured to detect an unauthorized displacement of a user device comprised in said external system by analyzing an output of said positioning operation. According to further aspects of the present disclosure, corresponding methods and corresponding computer programs are contemplated and provided.

Description

Technical Field

[0001] This disclosure relates to a system, positioning device, corresponding method, and corresponding computer program for protecting a user device from unauthorized displacement. Background Technology

[0002] Many user equipments need to be protected against theft, or more generally, against unauthorized relocation. This protection can be achieved, for example, using radio frequency identification (RFID) tags attached to the user equipment, by means of which the movement of the user equipment can be tracked. It may be necessary to increase the level of protection against unauthorized relocation of user equipment. Summary of the Invention

[0003] According to a first aspect of this disclosure, a system is provided comprising: a user device whose unauthorized displacement is monitored; an ultra-wideband (UWB) communication unit configured to establish a UWB communication channel with an external positioning device and perform at least one positioning operation through the UWB communication channel; and a processing unit configured to detect the unauthorized displacement of the user device by analyzing the output of the positioning operation.

[0004] In one or more embodiments, the user equipment includes the UWB communication unit and the processing unit, or the UWB communication unit and the processing unit are attached to the user equipment.

[0005] In one or more embodiments, the UWB communication unit and the processing unit are physically attached to the user device.

[0006] In one or more embodiments, the processing unit is further configured to disable one or more functions of the user device or one or more applications executed by the user device in response to detecting the unauthorized shift.

[0007] In one or more embodiments, the processing unit is configured to detect the unauthorized displacement by comparing the location data output by the positioning operation with one or more predefined location datasets that indicate the authorized location of the user device.

[0008] In one or more embodiments, the predefined location dataset represents a region or zone within a building.

[0009] In one or more embodiments, the processing unit is a security element.

[0010] According to a second aspect of this disclosure, a positioning device is provided, comprising: an ultra-wideband (UWB) communication unit configured to establish a UWB communication channel with an external system and perform at least one positioning operation through the UWB communication channel; and a processing unit configured to detect unauthorized displacement of a user device included in the external system by analyzing the output of the positioning operation.

[0011] In one or more embodiments, the processing unit is further configured to activate an alarm or transmit a warning signal in response to detecting the unauthorized shift.

[0012] In one or more embodiments, the processing unit is configured to transmit instructions for disabling one or more functions or applications of the user device to the external system via the UWB communication channel or via an out-of-band communication channel.

[0013] According to a third aspect of this disclosure, a method is provided comprising: establishing a UWB communication channel with an external positioning device by an ultra-wideband (UWB) communication unit of a system including a user device and performing at least one positioning operation through the UWB communication channel; and detecting unauthorized displacement of the user device by a processing unit of the system by analyzing the output of the positioning operation.

[0014] In one or more embodiments, the processing unit may additionally disable one or more functions of the user device or one or more applications executed by the user device in response to detecting the unauthorized shift.

[0015] According to a fourth aspect of this disclosure, a method is conceived comprising: establishing a UWB communication channel with an external system by an ultra-wideband (UWB) communication unit of a positioning device and performing at least one positioning operation through the UWB communication channel; and detecting, by a processing unit of the positioning device, an unauthorized displacement of a user device included in the external system by analyzing the output of the positioning operation.

[0016] In one or more embodiments, the processing unit may additionally activate an alarm or transmit a warning signal in response to detecting the unauthorized shift.

[0017] According to a fifth aspect of this disclosure, a computer program including instructions is provided that, when executed by a system of the described type or by a positioning device of the described type, performs the method of the described type. Attached Figure Description

[0018] The embodiments will be described in more detail with reference to the accompanying drawings, in which:

[0019] Figure 1 Examples of attack scenarios are shown;

[0020] Figure 2A A schematic embodiment of a system for protecting user devices is shown;

[0021] Figure 2B A schematic embodiment of a method for protecting a user device is shown;

[0022] Figure 3A A schematic embodiment of the positioning device is shown;

[0023] Figure 3B Another illustrative embodiment of a method for protecting a user device is shown;

[0024] Figure 4 A schematic embodiment of an anti-theft system is shown;

[0025] Figure 5 This illustrates a schematic embodiment of a UWB extension system;

[0026] Figure 6 A schematic embodiment of the ground floor of a building is shown. Detailed Implementation

[0027] As mentioned above, many user devices need to be protected against theft, or more generally, against unauthorized relocation. This protection can be achieved, for example, using radio frequency identification (RFID) tags attached to the user device, by means of which the movement of the user device can be tracked. It may be necessary to increase the level of protection against unauthorized relocation of the user device.

[0028] Figure 1 An example of attack scenario 100 is shown. In this scenario 100, user device 104 is protected by a supervisory multi-antenna system 102, by which the location of user device 104 can be determined and its movement tracked. For this purpose, a positioning device 106 is attached to user device 104. This positioning device 106 may be, for example, an RFID tag. In this case, the supervisory multi-antenna system 102 can establish a communication channel with the RFID tag, making it possible to determine the location of the tag and the attached user device 104. However, if a signal blocking element 110 is placed between the positioning device 106 and the multi-antenna system 102, the latter may not be able to receive the signal from the former, making it impossible to determine the location of the user device. Alternatively, attack device 108 can simulate positioning device 108 by sending similar signals. This type of attack is commonly referred to as a replay attack or relay attack.

[0029] Specifically, systems typically used for positioning devices employ Phase Difference of Arrival (PDOA), Received Signal Strength Indication (RSSI), Time Difference of Arrival (TDOA), or Time of Flight (TOF) measurement techniques to determine the device's location within a room. Figure 1 An example of a laboratory system that can be used to locate a device is shown. The system includes a monitoring system 102 that tracks devices within a room and a user device 104 (a laboratory computer referred to as "Device 1") that should be tracked. In this given example, the channel between the monitoring system 102 and the laboratory computer 104 is blocked by an attacker. Each time the monitoring system 102 attempts to locate Device 1, the attacker receives a signal and forwards it to Device 1. Device 1's response is also forwarded by the attacker to the monitoring system 102. As a result, system 102 concludes that Device 1 exists in the location of the attacking device, which can still be an authorized location (i.e., a location where Device 1 can reasonably exist). Therefore, as long as communication is still forwarded by the attacker, Device 1 can be stolen. Furthermore, if the device responsible for locating or preventing theft (i.e., Figure 1 The so-called positioning device 106 shown is only attached to the user device that needs to be protected, making it easier to steal the user device because the positioning device can be easily disconnected. As long as the positioning device is powered on and operating, the monitoring system cannot determine whether the attached device has been stolen.

[0030] Figure 2A A schematic embodiment of a system 200 for protecting a user device 202 is shown. The system 200 includes a user device 202, an ultra-wideband (UWB) communication unit 204, and a processing unit 206. The UWB communication unit 204 is configured to establish a UWB communication channel with an external positioning device (not shown) and perform at least one positioning operation through the UWB communication channel 204. Furthermore, the processing unit 206 is configured to detect unauthorized displacement of the user device 202 by analyzing the output of the positioning operation. In this way, the level of protection against unauthorized displacement of the user device can be improved.

[0031] Specifically, UWB is a technology that utilizes high signal bandwidth, particularly for transmitting digital data over a wide frequency spectrum with extremely low power. For example, UWB technology can use a spectrum from 3.1 to 10.6 GHz and can feature high-frequency bandwidths greater than 500 MHz and very short pulse signals, resulting in high data rates. UWB technology enables communication devices to achieve high data throughput and high-precision device positioning. The inventors have recognized that this latter characteristic of UWB can be used to advantageously, accurately, and reliably detect unauthorized movement of user devices. Specifically, UWB can be used for distance measurement that is resistant to replay attacks or relay attacks, thereby improving security levels.

[0032] It should be noted that the UWB communication unit 204 can be, for example, a UWB transceiver that can be easily integrated into a user device or plugged into a power outlet. System 200 can provide secure location and theft prevention by combining it with a UWB-based infrastructure including one or more anchor points. Furthermore, this system can be used for non-secure location. Additionally, the system may include a security element that can, for example, automatically disable device functions or applications when the device is stolen, making it practically unusable by the thief.

[0033] It should be noted that unauthorized displacement can be considered as a violation of predefined rules governing the locations where a user device is legally permitted to exist (i.e., locations where the user device is authorized to exist). Therefore, according to the predefined rules, unauthorized displacement means that the user device moves to a location where it is not legally permitted to exist. Furthermore, a positioning operation can be considered as an operation that determines the location of a specific device.

[0034] Figure 2B Showing with Figure 2A The illustrated system 200 corresponds to an illustrative embodiment of a method 208 for protecting a user device. Method 208 includes the following steps: At 210, the UWB communication unit of the system including the user device establishes a UWB communication channel with an external positioning device and performs at least one positioning operation through the UWB communication channel. Furthermore, at 212, the system's processing unit detects unauthorized movement of the user device by analyzing the output of the positioning operation. In this way, the level of protection against unauthorized movement of the user device can be improved.

[0035] In one or more embodiments, the user equipment includes a UWB communication unit and a processing unit, or the UWB communication unit and processing unit are attached to the user equipment. Therefore, the UWB communication unit can be integrated into the user equipment. This further enhances the level of protection because it makes it difficult for an attacker to decouple the UWB communication unit and processing unit from the user equipment. Alternatively, the UWB communication unit and processing unit can be attached to the user equipment. In this way, the user equipment does not need to be adapted, resulting in backward compatibility with existing user equipment and providing a suitable solution for user equipment where additional components cannot be easily integrated. It should be noted that in both cases, the UWB communication unit and processing unit can be combined into a single functional unit or implemented as separate functional units. Furthermore, in one or more embodiments, the UWB communication unit and processing unit are attached to the user equipment via physical bonding. This produces a practical implementation that provides a sufficient level of protection even when the UWB communication unit and processing unit are attached to the user equipment.

[0036] In one or more embodiments, the processing unit is further configured to disable one or more functions of the user device or one or more applications executed by the user device in response to the detection of the unauthorized shift. In this way, the level of protection against unauthorized shifts of the user device can be further enhanced. Specifically, if a processing unit integrated into or attached to the user device has detected an authorized shift, the user device's functions or applications can be automatically disabled. For example, the user device may then become virtually unusable by a thief. Another advantage of automatically disabling functions or applications is that the user device autonomously (i.e., by means of the embedded processing unit or a processing unit attached thereto) detects the authorized shift and takes effect upon the detection, for example, without requiring explicit instructions from an external positioning device.

[0037] In a practical implementation, the processing unit is configured to detect unauthorized movement by comparing location data output from the positioning operation with one or more predefined location datasets that indicate the authorized location of the user device. For example, the predefined location datasets may represent areas or zones within a building. In this way, authorized and unauthorized movement can be readily associated with areas where the user device is reasonably located (e.g., the workplace) and areas where the user device is not reasonably located (e.g., outside the workplace if the user device has not yet checked out or paid).

[0038] Furthermore, in one or more embodiments, the processing unit is a secure element. Obtaining physical access to this secure element is relatively difficult. Therefore, since the operations performed by the secure element are not easily manipulated, the level of protection against unauthorized shifting of the user device can be further enhanced. It should be noted that the secure element can be implemented as an embedded chip. More specifically, the secure element can be a tamper-proof integrated circuit with an installed or pre-installed application, such as a payment application, having specified functions and a specified security level. Furthermore, the secure element can implement security functions, such as cryptographic and authentication functions.

[0039] Figure 3A A schematic embodiment of a positioning device 300 is shown. The positioning device 300 includes a UWB communication unit 302 configured to establish a UWB communication channel with an external system (not shown) and perform at least one positioning operation through the UWB communication channel. Furthermore, the positioning device 300 includes a processing unit 304 configured to detect unauthorized displacement of a user device included in the external system by analyzing the output of the positioning operation. In this way, the level of protection against unauthorized displacement of the user device can be improved. Specifically, as... Figure 2AAlternatives to, or supplements to, the illustrated embodiments may be implemented in the positioning device (e.g., supplemented by UWB technology, and...) Figure 1 The monitoring system shown detects authorized movement of the user device from the side (rather than the side of the user device itself, i.e., the side of the object to be positioned) rather than from the side of the user device. This monitoring system can, for example, issue an alarm when unauthorized movement is detected.

[0040] Figure 3B Showing with Figure 3A Another illustrative embodiment of the method 306 for protecting a user device, corresponding to the positioning device 300 shown. The method 306 includes the following steps: At 308, a UWB communication unit included in the positioning device establishes a UWB communication channel with an external system and performs at least one positioning operation through the UWB communication channel. Furthermore, at 310, a processing unit included in the positioning device detects unauthorized displacement of the user device included in the external system by analyzing the output of the positioning operation. In this way, the level of protection against unauthorized displacement of the user device can be improved.

[0041] In one or more embodiments, the processing unit is further configured to activate an alarm or transmit a warning signal in response to the detection of the unauthorized movement. In this way, supervisors or monitoring systems can effectively address unauthorized movement of the user device. For example, a warning signal can be transmitted to a guard's mobile device or to the aforementioned monitoring system. The monitoring system can then perform any appropriate action, such as automatically alerting the authorities.

[0042] Furthermore, in one or more embodiments, the processing unit is configured to transmit instructions for disabling one or more functions or applications of the user device to an external system via a UWB communication channel or an out-of-band communication channel. In this way, if unauthorized displacement is detected on the side of the positioning device, the user device can still be notified to take appropriate action, such as rendering the user device practically unusable by a thief. It should be noted that the out-of-band communication channel can be any suitable communication channel, such as Wi-Fi or Bluetooth. The use of an out-of-band communication channel reduces the overhead on the UWB communication channel.

[0043] Figure 4A schematic embodiment of an anti-theft system 400 is shown. System 400 includes an anti-theft positioning system 402 (i.e., an example of a positioning device of the type illustrated) and a user device 404 to be protected against theft. User device 404 includes a UWB controller 406 (i.e., an example of a UWB communication unit of the type illustrated), a security element 408 (i.e., an example of a processing unit of the type illustrated), and an application 410 executable by user device 404 (e.g., a computer program executable by a host processor included in user device 404). It should be noted that the security element 408 is inherently a protected environment, while the host processor (not shown) may be relatively unprotected.

[0044] Specifically, system 400 includes a central anti-theft positioning system 402 to be protected and at least one user device 404 (referred to as "device 1"). In this embodiment, device 1 404, in addition to having hardware for executing device application 410, also has an internal UWB controller 406 and a security element 408. When device 1 404 is used, the internal UWB controller 406 can continuously perform ranging operations with the central anti-theft positioning system 402. For ranging operations, both the UWB controller 406 and the anti-theft positioning system 402 can use secure preambles, making it difficult for attackers to alter the estimated location of device 1 404 based on relay attacks or replay attacks. In the system of device 1 404, the security element 408 is also capable of communicating with and controlling application 410 executed by the host processor of device 1 404. If device 1 404 leaves an area where it is not permitted to use (i.e., if it moves to a location where it is not legitimately present), security element 408 can disable (e.g., interrupt or stop) application 410 until device 1 404 enters an area where it is permitted to use (i.e., if it moves back to a location where it is legitimately present). Furthermore, if the connection to device 1 404 is lost, the central anti-theft positioning system 402 can issue an alarm based on detected unauthorized movement. For example, if an attacker attempts to block signals transmitted by the UWB controller 406 of device 1 404, multiple messages will be lost and the corresponding ranging operation will fail. The unsuccessful ranging operation can lock device 1 404 and notify security personnel overseeing the anti-theft positioning system 402 that device 404 has disappeared.

[0045] It should be noted that if the UWB controller 406 and the security element 408 are powered by a battery (not shown), it is also possible to locate device 1 404 even when no power is received from an external source (e.g., a power outlet). Device 1 404 can also report battery information and additional information via the UWB controller 406. Therefore, if device 1 404 has a critical battery state and should be replaced or recharged before the battery is depleted, the anti-theft positioning system 402 can be alerted. This further enhances the level of protection. Additional data, such as the maintenance interval of device 1 404, can also be transmitted via the UWB controller 406. Furthermore, if device 1 404 is not maintained for a given period of time, an alarm can be triggered in the system to prevent the device from being neglected.

[0046] Figure 5 A schematic embodiment of a UWB extension system 500 is shown. System 500 includes a user device 502, also referred to as device 1, and a UWB extension module 508. The UWB extension module 508 is attached to device 1 502, for example, by means of a physical bond. It should be noted that the UWB extension module 508 provides ranging functionality to device 1 502 without requiring adaptation of device 1 502. Device 1 502 is configured to execute at least one application 504, for example, by means of a host processor (not shown). Furthermore, device 1 502 includes a power management unit 506 configured to manage the power available in device 1 502. The UWB extension module 508 includes a UWB controller 510 (i.e., an example of a UWB communication unit of the type described), a security element 512 (i.e., an example of a processing unit of the type described), a power management unit 514 for managing the power available in the UWB extension module 508, and a battery 516.

[0047] Specifically, Figure 5 A user device 502 is shown, extended by a UWB-based anti-theft module 508. An application 504 executed by device 1502 operates independently of the UWB extension module 508, as it is not designed for tracking and protection. Therefore, when the UWB extension module 508 is attached to device 1502, it should notify the positioning device of the described type, for example, that the attachment has been broken or removed. Furthermore, the UWB extension module 508 should perform ranging operations with the positioning device so that if unauthorized displacement of device 1502 is detected, the positioning device can trigger an alarm to a supervisor. Similarly, the positioning device can trigger an alarm upon loss of connection to the UWB extension module 508. Thus, as long as the UWB extension module 508 remains powered, theft of device 1502 will be notified to the supervisory positioning device.

[0048] It should be noted that the UWB expansion module 508 can use the same power source as device 1502; that is, it can be powered by the same power outlet used for device 1502. In this case, the UWB expansion module 508 provides an additional power outlet into which the bundled device (i.e., device 1502) can be inserted. Because the UWB expansion module 508 has its own battery 516 and power management unit 514, it is also usable even if it is not inserted into a power outlet. Therefore, the UWB expansion module 508 also provides anti-theft protection when device 1502 is not powered. Furthermore, by transmitting the battery status via the UWB communication channel, the positioning device can be alerted when the battery 516 is nearly depleted. Therefore, the battery 516 can be charged, for example, by inserting the UWB expansion module 508 into a power outlet, or the battery 516 can be replaced with another battery. It should be noted that the security level of the types of UWB extension modules described can depend on two layers: the UWB layer that provides location functionality against relay attacks and the physical binding (layer) that ensures the UWB extension module remains attached to the user device to be protected.

[0049] Figure 6A schematic embodiment of a building's ground floor 600 is shown. Ground floor 600 comprises multiple zones, namely, a first zone 602, a second zone 604, and a third zone 606. In a given example, a first user device D1 is reasonably present in the second zone 604, a second user device D2 is not reasonably present in the third zone 606 (i.e., due to unauthorized displacement), and a third device D3 is reasonably present in the first zone 602. Positioning devices of the illustrated type (not shown) track the position and movement of devices D1, D2, and D3 on the building's ground floor 600. Since devices D1 and D3 are reasonably present in zones 602 and 604, movement of these devices will not trigger an alarm as long as they remain in these zones or move to another zone where they are reasonably present. However, since device D2 is located in zone 606 due to unauthorized displacement, an alarm is triggered and / or one or more functions or applications of device D2 are automatically disabled. More specifically, the processing unit of device D2 can disable the function or application in response to the detection of unauthorized displacement, and / or the processing unit of the positioning device can trigger an alarm in response to the detection of unauthorized displacement. If only the UWB extension module is used, an alarm can only be issued to the positioning device. The positioning device can then decide, for example, whether a security alarm notification should be triggered. It should be noted that for non-security device tracking, a security element is not required. Furthermore, device binding may be less relevant to non-security applications. However, it should be noted that the internal UWB communication unit (i.e., the UWB communication unit embedded in the user device) facilitates the user device's autonomous disabling of functions and / or applications. This internal UWB communication unit also prevents the unit from being disconnected or removed from the user device and its applications. Furthermore, it should be noted that for each user device, areas of reasonable and unreasonable device presence can be defined. For example, this can be used to prevent devices belonging to different rooms (e.g., offices) from mixing without alerting the monitoring system.

[0050] The systems and methods described herein can be implemented, at least in part, by one or more computer programs, which may exist in various forms, either active or inactive, within a single computer system or across multiple computer systems. For example, the computer program may exist as a software program consisting of program instructions for performing some of these steps, in the form of source code, object code, executable code, or other formats. Any of these formats may be implemented in compressed or uncompressed form on a computer-readable medium, which may include storage devices and signals.

[0051] As used herein, the term "computer" refers to any electronic device that includes a processor, such as a general-purpose central processing unit (CPU), a dedicated processor, or a microcontroller. A computer is capable of receiving data (input), performing a series of predetermined operations on the data, and thereby producing results (output) in the form of information or signals. Depending on the context, the term "computer" will specifically refer to a processor or more generally to a processor associated with a combination of related elements housed within a single housing or enclosure.

[0052] The term "processor" or "processing unit" refers to a data processing circuit, which can be a microprocessor, coprocessor, microcontroller, microcomputer, central processing unit, field-programmable gate array (FPGA), programmable logic circuit, and / or any circuit that controls signals (analog or digital signals) based on operation instructions stored in memory. The term "memory" refers to one or more storage circuits, such as read-only memory, random access memory, volatile memory, non-volatile memory, static memory, dynamic memory, flash memory, cache memory, and / or any circuit that stores digital information.

[0053] As used herein, "computer-readable medium" or "storage medium" can be any component capable of containing, storing, transmitting, propagating, or transmitting a computer program for use by or in conjunction with an instruction execution system, device, or apparatus. A computer-readable medium can be, for example, but not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices, apparatuses, or propagation media. More specific examples of computer-readable media (a non-exhaustive list) may include: electrical connections having one or more wires, portable computer disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable optical disc read-only memory (CDROM), digital versatile optical disc (DVD), Blu-ray disc (BD), and memory cards.

[0054] It should be noted that the above embodiments have been described with reference to different subjects. Specifically, some embodiments may have been described with reference to claims of the method class, while others may have been described with reference to claims of the device class. However, those skilled in the art will understand from the foregoing that, unless otherwise indicated, any combination of features related to different subjects, in particular combinations of features of claims of the method class and features of claims of the device class, are also considered to be disclosed with this document, except for any combination of features belonging to one type of subject matter.

[0055] Furthermore, it should be noted that the drawings are illustrative. Similar or identical elements are represented by the same reference numerals in different drawings. Additionally, it should be noted that, in order to provide a concise description of illustrative embodiments, details of implementations that are customary to those skilled in the art may not be described. It should be understood that in the development of any such implementation, as in any engineering or design project, numerous implementation-specific decisions must be made to achieve the developer's specific goals, such as complying with system-related and business-related constraints, which may differ in different implementations. Furthermore, it should be understood that such development work can be complex and time-consuming, but remains a routine task for those skilled in the art in designing, manufacturing, and producing.

[0056] Finally, it should be noted that those skilled in the art should be able to devise numerous alternative embodiments without departing from the scope of the appended claims. Any reference numerals placed between parentheses in the claims should not be construed as limiting the claims. The word "comprising" does not exclude the presence of elements or steps other than those listed in the claims. The words "a" or "an" preceding an element do not exclude the presence of a plurality of such elements. The measures recited in the claims can be implemented by means of hardware comprising several different elements and / or by means of a processor appropriately programmed. In a device claim listing several components, several of these components may be embodied by the same object in the hardware. The mere fact that certain measures are recited in different appendix claims does not indicate that combinations of these measures cannot be advantageously used.

[0057] List of reference numerals

[0058] 100 Attack Scenarios

[0059] 102 Regulatory Multi-Antenna Systems

[0060] 104 User Equipment

[0061] 106 Attached positioning device

[0062] 108 attack devices

[0063] 110 Signal blocking element

[0064] 200 Systems for protecting user equipment

[0065] 202 User Equipment

[0066] 204 UWB communication units

[0067] 206 processing units

[0068] 208 Methods for protecting user equipment

[0069] 210 A UWB communication channel is established between the UWB communication unit of the system including the user device and an external positioning device, and at least one positioning operation is performed through the UWB communication channel.

[0070] 212 The processing unit of the system detects unauthorized displacement of the user device by analyzing the output of the positioning operation.

[0071] 300 Positioning Device

[0072] 302 UWB Communication Unit

[0073] 304 Processing Unit

[0074] 306 Methods for protecting user equipment

[0075] 308 The positioning device establishes a UWB communication channel with an external system via its UWB communication unit and performs at least one positioning operation through the UWB communication channel.

[0076] 310 The processing unit of the positioning device detects unauthorized displacement of the user device included in the external system by analyzing the output of the positioning operation.

[0077] 400 Anti-theft System

[0078] 402 Anti-theft Positioning System

[0079] 404 User Equipment

[0080] 406 UWB Controller

[0081] 408 Safety Components

[0082] 410 Device Application

[0083] 500 UWB Extended System

[0084] 502 User Equipment

[0085] 504 device application

[0086] 506 Unit Power Management Unit

[0087] 508 UWB Extension

[0088] 510 UWB Controller

[0089] 512 Safety Components

[0090] 514 UWB Power Management Unit

[0091] 516 battery

[0092] 600 Ground floor of building

[0093] 602 First District

[0094] 604 Second District

[0095] 606 Third District.

Claims

1. A system, characterized in that, include: User equipment, whose unauthorized displacement is monitored, wherein the unauthorized displacement refers to the user equipment moving to a position that the user equipment is not authorized to be in according to predefined rules; An ultra-wideband (UWB) communication unit is configured to establish a UWB communication channel with an external positioning device and perform at least one positioning operation through the UWB communication channel using a UWB communication protocol. A processing unit configured to detect the unauthorized displacement of the user device by analyzing the output of the positioning operation, and Instructions for disabling one or more functions or applications of the user device are transmitted to the external positioning device via an out-of-band communication channel using a second communication protocol different from the UWB communication protocol.

2. The system according to claim 1, characterized in that, The user equipment includes the UWB communication unit and the processing unit, or the UWB communication unit and the processing unit are attached to the user equipment.

3. The system according to claim 2, characterized in that, The UWB communication unit and the processing unit are physically attached to the user device.

4. The system according to any one of the preceding claims, characterized in that, The processing unit is further configured to disable one or more functions of the user device or one or more applications executed by the user device in response to detecting the unauthorized shift.

5. The system according to any one of the preceding claims, characterized in that, The processing unit is configured to detect the unauthorized displacement by comparing the location data output by the positioning operation with one or more predefined location datasets that indicate the authorized location of the user device.

6. The system according to any one of the preceding claims, characterized in that, The processing unit is a safety element.

7. A positioning device, characterized in that, include: An ultra-wideband (UWB) communication unit is configured to establish a UWB communication channel with an external system and perform at least one positioning operation through the UWB communication channel. A processing unit is configured to detect unauthorized movement of a user device included in the external system by analyzing the output of the positioning operation, wherein the unauthorized movement refers to the user device moving to a location where the user device is not authorized to be located according to predefined rules, and Instructions for disabling one or more functions or applications of the user device are transmitted to the external system via an out-of-band communication channel different from the UWB communication channel.

8. A method, characterized in that, include: The system, including a user device, establishes a UWB communication channel with an external positioning device through an ultra-wideband (UWB) communication unit and performs at least one positioning operation through the UWB communication channel. The system's processing unit detects unauthorized movement of the user device by analyzing the output of the positioning operation, wherein unauthorized movement refers to the user device moving to a position that the user device is not authorized to be in according to predefined rules; and Instructions for disabling one or more functions or applications of the user device are transmitted to an external system via an out-of-band communication channel different from the UWB communication channel.

9. A method, characterized in that, include: The positioning device establishes a UWB communication channel with an external system through its ultra-wideband (UWB) communication unit and performs at least one positioning operation through the UWB communication channel. The processing unit of the positioning device detects unauthorized movement of a user device included in the external system by analyzing the output of the positioning operation, wherein the unauthorized movement refers to the user device moving to a position that the user device is not authorized to be in according to predefined rules; and Instructions for disabling one or more functions or applications of the user device are transmitted to an external system via an out-of-band communication channel different from the UWB communication channel.

10. A non-transitory computer-readable storage medium storing computer instructions thereon, characterized in that, The instructions, when executed by the system according to any one of claims 1 to 6 or by the positioning device according to claim 7, implement the method according to any one of claims 8 to 9.

Images