Location-Based Security Policy Provisioning

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing mobile computing device security solutions require user interaction and cognitive load to update location-specific security policies, which can decrease user experience and reduce security robustness.

Innovation Solution

Implementing a system that automatically applies and updates security policies based on device location using machine learning techniques, ontology classification, and sensor data, allowing for dynamic policy adjustments and similarity-based policy application without user intervention.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If user interaction is required for security policy updates, then user control over security measures is improved, but cognitive load on user increases and user experience decreases

Engineering Contradiction:
Improveuser control over securityVSAvoiduser experience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system performs self-service by automatically detecting location changes through GPS and other sensors, retrieving appropriate security policies from a database, and applying them without requiring user intervention. The mobile device autonomously manages security policy updates based on its current location, eliminating the need for users to manually configure security settings.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

Security policies are pre-configured and stored in a database associated with specific locations. Before the user needs security protection, the system has already retrieved and prepared the appropriate policy when the device enters the location, so no user action is needed at the moment of security requirement.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If manual policy updates are required, then user awareness of security measures is improved, but time consumption increases and productivity decreases

Engineering Contradiction:
Improveuser awareness of securityVSAvoidtime efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system automatically monitors its own location through GPS sensors and other location services, continuously checks the security policy database for appropriate policies, and applies them without user involvement. This self-service approach eliminates time consumption associated with manual policy updates while maintaining security awareness through automated enforcement.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system continuously monitors location changes and automatically updates security policies in real-time as the device moves between locations. This continuous operation ensures security measures are always current without requiring discrete user actions, maintaining both awareness and efficiency.

Inventive Principle:
Principle #20Continuity of useful action

3Adaptability or versatility

If location-specific security policies are manually configured, then security customization is improved, but device complexity increases

Engineering Contradiction:
Improvesecurity customizationVSAvoidsystem complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

A security policy database serves as an intermediary between location information and security configuration. The database stores pre-defined security policies associated with locations, and the system queries this intermediary store to retrieve appropriate policies without complex manual configuration logic, simplifying the overall system architecture.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

Security policies are pre-configured and stored in the database before the device needs them. When the device enters a location, the appropriate policy is already retrieved and ready to apply, eliminating the need for complex real-time configuration logic and reducing device complexity.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS9600670B2Provisioning location-based security policy
Publication Date: 2017.03.21 INTEL CORP
  • US9600670B2 patent drawing
  • US9600670B2 patent drawing
  • US9600670B2 patent drawing

AI summary

In one embodiment, a system comprises: a processor including at least one core to execute instructions; a plurality of sensors, including a first sensor to determine location information regarding a location of the system; and a security engine to apply a security policy to the system. In this embodiment, the security engine includes a policy logic to determine one of a plurality of security policies to apply based at least in part on the location information, where the location information indicates a location different than locations associated with the plurality of security policies. Other embodiments are described and claimed.