Privacy-Preserving Location Attestation API
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing location verification methods compromise user privacy or interfere with virtual private network (VPN) functionality, as they often require direct location indication to applications or restrict VPN usage.
Innovation Solution
An application programming interface (API) that determines whether a specified geographic location is associated with the home location of a portable device without revealing the home location, by storing it in a privileged memory region inaccessible to applications and allowing access only through a secure API.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a portable device directly indicates its location to applications, then location-based services can function properly, but user privacy is significantly reduced
Solution Approach 1:
The patent introduces an intermediary component (location indicator module with hashed location data) that mediates between the portable device's actual location and the application. The module stores location information in a privacy-protecting format (hashes) and provides location verification without exposing raw location data to applications, thus enabling location-based services while preserving user privacy.
2Reliability
If users are restricted from setting up VPN connections, then location fraud is prevented, but legitimate VPN-based services are interfered with
Solution Approach 1:
The patent performs preliminary actions by storing the portable device's home location information in advance in a privacy-protecting format (hashed location data) in the location indicator module. This pre-stored information is then used to verify current location without requiring VPN restrictions, allowing both location verification and legitimate VPN usage to coexist.
3Adaptability or versatility
If bad actors use VPN to masquerade location, then access to location-restricted content is gained, but advertisers suffer from fraudulent impressions
Solution Approach 1:
The patent implements a feedback mechanism where the location indicator module continuously verifies the portable device's current location against the pre-stored home location information. This feedback loop detects location discrepancies caused by VPN masquerading and can trigger appropriate responses (such as preventing access to location-restricted content or alerting advertisers), thereby combating advertising fraud while allowing legitimate location-based access.
Data Source
AI summary
A non-transitory computer-readable medium stores instructions that implement an application programming interface (API). When invoked by a software entity executing on a computing device, the API is configured to receive, from the application, an indication of a geographic location (304); obtain, from an operating system of the computing device, an indication of a general geographic area associated with a home location of a user, wherein the operating system prevents the software entity from accessing the indication of the general geographic area (306); and provide, to the software entity, an indication of whether the geographic location is within the general geographic area (308).