Geographic and Time-based Access Control for Wireless Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access control systems lack effective mechanisms to restrict access to sensitive information and systems based on geographical location and time, leading to potential unauthorized access and security breaches.
Innovation Solution
A Geographic- and Time-based Access Control System (GTACS) that monitors the location of User Equipment (UE) using network-determined location techniques, applying policies to grant or revoke access to applications, services, and devices based on geographical region and time-based criteria, ensuring secure access only within permitted areas and time frames.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access control is implemented without geographical and time-based restrictions, then ease of operation is improved, but security is worsened
Solution Approach 1:
The access control system dynamically adjusts access permissions based on real-time location and time parameters. The system transitions from static access control to dynamic control where access rights are granted or revoked automatically as users move between geographical zones or outside permitted time windows, resolving the contradiction by making security adaptive rather than restrictive
Solution Approach 2:
The system continuously monitors user location through GPS or network-based positioning and compares it against predefined safe zones and time schedules. This feedback mechanism automatically grants or denies access permissions without manual intervention, maintaining high security while preserving ease of operation through automated decision-making
2Reliability
If location monitoring is continuously performed, then security is improved, but use of energy is worsened
Solution Approach 1:
Instead of continuous monitoring, the system performs location checks periodically or event-triggered (e.g., when crossing zone boundaries or at scheduled times). This periodic approach maintains security by detecting location changes at critical moments while significantly reducing energy consumption compared to uninterrupted monitoring
Solution Approach 2:
The system leverages existing location services already running on user devices (such as GPS for navigation apps) to obtain location data without requiring dedicated high-power monitoring hardware. The device's own location infrastructure serves the access control function, minimizing additional energy expenditure
Data Source
AI summary
A system described herein may provide a technique for selectively granting or revoking/denying access to applications, services, data, etc. to a User Equipment (“UE”) based on location-based policies and a network-determined location of the UE. The network-determined location may be determined by elements of a wireless network, such as a Mobility Management Entity (“MME”), Access and Mobility Management Function (“AMF”), or other suitable element.


