Location-Mediated Mobile Resource Access Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing systems face challenges in securely managing access to sensitive information on mobile devices, as determining the physical location of a device to grant or restrict access is not always reliable, particularly when a secure network is used in an unsecure location.

Innovation Solution

Implementing a method to mediate access to resources based on the physical location of a mobile device, where servers determine if the device is in a safe area and adjust access accordingly, including providing access to remote content and restricting it when the device moves to an unsafe location, using location information such as GPS coordinates.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If access is restricted based on network security status, then network security is improved, but physical location security cannot be ensured

Engineering Contradiction:
Improvenetwork securityVSAvoidphysical location insecurity
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces GPS location information as an intermediary factor between the mobile device and the resource access system. The server mediates access decisions by combining both network security status and physical location data, using GPS coordinates to determine whether the device is in an authorized geographic area before granting access to protected resources.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system changes the access control parameters from solely network-based security verification to a multi-parameter approach that includes geographic location coordinates. By adding location as a variable parameter, the system can dynamically adjust access rights based on the device's physical position, thereby addressing the limitation of network-only security checks.

Inventive Principle:
Principle #35Parameter changes

2Reliability

If access is granted based on secure network connection, then network access reliability is improved, but unauthorized physical access remains possible

Engineering Contradiction:
Improveaccess controlVSAvoidunauthorized physical access
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary verification of the device's geographic location before granting access to protected resources. By checking GPS coordinates in advance and comparing them against authorized location parameters, the system prevents unauthorized physical access before it can occur, rather than relying solely on network security authentication.

Inventive Principle:
Principle #10Preliminary action

3Object-affected harmful factors

If location-based access control is implemented, then physical security is improved, but system complexity increases

Engineering Contradiction:
Improvephysical securityVSAvoidaccess control system
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent leverages the universal GPS functionality already present in modern mobile devices to implement location-based access control. By utilizing an existing multi-functional component (GPS receiver) for security purposes, the system adds location verification capability without requiring specialized hardware or significantly increasing system complexity.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentEP2625646B1Mediating resource access based on a physical location of a mobile device
Publication Date: 2022.06.22 CITRIX SYSTEMS INC
  • EP2625646B1 patent drawingFigure 1A
  • EP2625646B1 patent drawingFigure 1B
  • EP2625646B1 patent drawingFigure 1C

AI summary

One or more methods, apparatuses, systems, and computer-readable media are provided for causing a location of a screen image associated with a resource to be adjusted on a display device. In some embodiments, the adjustment may be based at least in part on determining that a control element receives focus. In some embodiments, the resource may be associated with an application, such as an email application that may be hosted remotely from a client device. In some embodiments access to one or more resources may be controlled or mediated.