Intermediary System Location-Based Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for controlling access to local devices connected to a local network are cumbersome, particularly when managing permissions for user equipment connected to a public network, as they often require changing passwords or laborious manual management of permissions.
Innovation Solution
An intermediary system that uses location-based access control, allowing access to local devices based on the user equipment's location, using techniques such as GPS, network-based localization, and proximity conditions, to provide flexible and automated permission management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If password-based access control is used for local network, then access security is provided, but permission management becomes cumbersome and requires password changes
Solution Approach 1:
The patent changes the access control parameter from static password-based authentication to dynamic location-based authentication. The intermediary system evaluates real-time location parameters (GPS coordinates, network location) to dynamically grant or deny access permissions, eliminating the need for password changes while maintaining security.
Solution Approach 2:
The patent introduces an intermediary system that acts as a mediator between user equipment and local devices. This intermediary receives location information, evaluates access conditions, and automatically manages permissions without requiring users to manually change passwords or configure access settings.
2Adaptability or versatility
If user equipment connects to public network for remote access, then accessibility is improved, but access control complexity increases
Solution Approach 1:
The intermediary system simplifies access control complexity by centralizing the evaluation logic. It receives location information from user equipment connected via public network, evaluates whether access conditions are met, and automatically manages permissions, thereby reducing the complexity burden from the user side.
Solution Approach 2:
The system implements automated self-service access control where the intermediary system automatically evaluates location conditions and grants or denies access without requiring user intervention or complex configuration. The system serves itself by automatically managing permission states based on location evaluations.
3Adaptability or versatility
If location-based access control is implemented, then permission management flexibility is improved, but system complexity increases
Solution Approach 1:
The intermediary system is designed as a universal platform that handles multiple functions: receiving location information from various sources (GPS, network location), evaluating different access conditions, and managing permissions for multiple local devices. This multi-functionality reduces the need for separate specialized systems for each function.
4Device complexity
If manual permission management is used, then system simplicity is maintained, but time consumption for access control increases
Solution Approach 1:
The intermediary system implements automated self-service permission management by continuously monitoring location information and automatically evaluating access conditions. When location conditions are met, access is automatically granted; when not met, access is automatically denied, eliminating manual intervention and reducing time consumption.
Solution Approach 2:
The system implements continuous feedback loops where the intermediary system receives real-time location information, evaluates access conditions, and automatically adjusts permission states. This feedback mechanism enables automated real-time access control without manual intervention, significantly reducing time consumption for permission management.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a method for controlling access for a user equipment to at least one local device via an intermediary system that is configured to connect to a local network and to a public network. The user equipment is connected to the public network and the at least one local device is connected to the local network. The method comprises a number of steps in the intermediary system. One of these steps is storing one or more location conditions for access for the user equipment to the at least one local device. Another step is receiving first location information of the user equipment over the public network, the first location information indicating a location of the user equipment. Yet another step is controlling access for the user equipment to the at least one local device by verifying whether the first location information satisfies the one or more location conditions. The invention further relates to the intermediary system used in the method.