Location-Based Access Control for Mobile Data Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing mobility of devices and wireless access to the internet has heightened the risk of unauthorized access to sensitive information, as traditional geographic limitations are no longer applicable, leading to increased incidents of identity theft and data breaches.
Innovation Solution
A system utilizing a Global Positioning Authority (GPA) to control access to resources based on location-aware protocols and security policies, ensuring that only authorized devices can access sensitive information by determining the device's position and enforcing access policies, thereby securing data on laptops and handheld devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If wireless and remote access is enabled to allow Internet access from anywhere at any time, then accessibility and convenience are improved, but security risk and vulnerability to unauthorized access increase
Solution Approach 1:
The patent applies local quality by making security policies location-specific. Different geographic locations have different access policies - some locations allow access while others deny it. The system evaluates the requestor's geographic position and applies location-appropriate security rules, allowing convenient access from authorized locations while blocking access from unauthorized locations.
Solution Approach 2:
The patent introduces a geographic information system (GIS)-based intermediary layer between the requestor and the protected resource. This intermediary evaluates the requestor's location, determines compliance with security policies, and mediates whether to grant or deny access. This mediator resolves the contradiction by enabling access when location is appropriate while blocking it when location poses a security risk.
2Adaptability or versatility
If mobile devices with wireless capabilities are used to remove physical grounding, then mobility and access flexibility are improved, but the risk of information falling into wrong hands increases
Solution Approach 1:
The patent implements dynamic security that adapts to the device's changing location. As mobile devices move to different geographic positions, the security system dynamically evaluates each location against stored policies and adjusts access permissions in real-time. This allows legitimate mobility while maintaining security by denying access when the device reaches unauthorized locations.
Solution Approach 2:
The patent changes the security parameter from static authentication to dynamic location-based authentication. Instead of relying solely on passwords or access credentials, the system incorporates geographic position as a dynamic parameter that determines access rights. This allows the same device to have different access levels depending on its location, maintaining reliability while enabling mobility.
3Reliability
If traditional password and access protocols are used, then authentication is provided to some extent, but geographic location-based security control is lost
Solution Approach 1:
The patent merges traditional authentication mechanisms with geographic location verification. The system combines password/authentication protocols with GIS-based location evaluation, requiring both authentication credentials and location compliance to grant access. This integration maintains the reliability of traditional authentication while adding the adaptability of geographic control.
Solution Approach 2:
The patent creates a universal security framework that works across multiple platforms and devices. The location-based access control system is designed to function with various mobile devices, wireless protocols, and authentication methods, providing both traditional authentication reliability and geographic adaptability through a multi-functional security architecture.
Data Source
AI summary
Access to information or a document is secured by a central global positioning authority that evaluates access requests in accordance with predefined policies. One component of an access request includes location information regarding at least one of the requesting entity and location of the requested resource. Access is either allowed or denied as a function of at least the requesting entity, position information and the applicable policy or policies. An encryption/decryption scheme is implemented where the encryption key is a function of the resource's position.