Systems and methods for location-based device security
A device may collect environmental information surrounding the device. Based on the collected environmental information, the device may automatically identify a potentially secured location that has lower security risk. When a potentially secured location is identified, the device may prompt the user to setup a security profile having reduced security requirement for the secured location. The device may store and associate the security profile with the secured location. The device may activate the security profile with reduced security requirement when the device is in the secured area. Further, the security profile may require that certain features of the device be disabled when the device is in the secured location.
1 . A method, comprising:
accessing a current location of a user device of a user, wherein the current location is provided by one or more sensors of the user device;
determining that the current location corresponds to a predefined location that is associated with a predefined protocol for operating the user device, the predefined protocol being different from a default protocol for operating the user device;
determining that one or more peripheral devices of the user are in electronic communication with the user device; and
facilitating, based on the determining that the current location corresponds to the predefined location and on the determining that the one or more peripheral devices of the user are in electronic communication with the user device, an operation of the user device according to the predefined protocol, wherein a security requirement of the predefined protocol is based on a number of the one or more peripheral devices that are in electronic communication with the user device.
2 . The method of claim 1 , further comprising, before the accessing: associating the predefined location with the predefined protocol based on a request from the user via the user device.
3 . The method of claim 2 , further comprising, after the associating: sending a notification to the user device, the notification containing a confirmation of the associating,
wherein the predefined protocol is defined by the user of the user device.
4 . The method of claim 1 , wherein the security requirement of the predefined protocol decreases as the number of the one or more peripheral devices that are in electronic communication with the user device increases.
5 . The method of claim 1 , wherein:
the default protocol requires an entry of a password for the operation; and
the predefined protocol requires no entry or only a partial entry of the password for the operation.
6 . The method of claim 1 , wherein:
the default protocol requires a manual entry of a username or a password for the operation; and
the predefined protocol automatically enters the username or the password for the operation.
7 . The method of claim 1 , wherein:
the default protocol requires a first level of a fraud risk analysis for the operation; and
the predefined protocol requires a second level of the fraud risk analysis for the operation, the second level being less than the first level.
8 . The method of claim 1 , wherein the predefined protocol comprises a restriction on a capability of the user device to make a telephone call.
9 . The method of claim 1 , wherein the predefined protocol comprises an automatic implementation of a predefined notification mode when the user device receives an electronic notification.
10 . The method of claim 1 , wherein the one or more sensors comprise a Global Positioning System (GPS) sensor, a Near Field Communication (NFC) sensor, or a Bluetooth signal sensor, and wherein the operation comprises an electronic transaction with a particular merchant.
11 . The method of claim 1 , wherein the facilitating is further based on a determination that the user device has been previously accessed a plurality of times at the current location.
12 . A system, comprising:
a hardware processor; and
a non-transitory computer-readable medium having stored thereon instructions that are executable by the hardware processor to cause the system to perform operations comprising:
receiving location data of a user device of a user, the location data provided by one or more sensors of the user device;
determining that the location data matches a user-specified location that is associated with a first protocol for operating the user device, the first protocol being different from a second protocol under which the user device is operated when the user device is outside the user-specified location;
determining that the user device is within a specified proximity range of one or more peripheral devices of the user; and
allowing, based on the determining that the location data matches the user-specified location and on the determining that the user device is within the specified proximity range of the one or more peripheral devices, the user to operate the user device according to the first protocol, wherein a security requirement of the first protocol is correlated with a number of the peripheral devices of the one or more peripheral devices.
13 . The system of claim 12 , wherein the first protocol has a reduced authentication requirement compared to the second protocol.
14 . The system of claim 12 , wherein the first protocol is associated with conducting a different level of risk analysis for user-initiated electronic transactions compared to the second protocol.
15 . The system of claim 12 , wherein the user is allowed to operate the user device without supplying a complete password under the first protocol.
16 . The system of claim 12 , wherein the determining that the location data matches the user-specified location is based on comparing Global Positioning System (GPS) coordinates contained in the location data with GPS coordinates of the user-specified location.
17 . The system of claim 12 , wherein the first protocol restricts an ability of the user device to make or receive calls or an ability of the user device to receive an electronic notification.
18 . A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause a machine to perform operations comprising:
determining that a user device of a user is attempting to conduct a transaction;
accessing a location of the user device provided by one or more location sensors of the user device;
determining that the location of the user device is within a user-specified location;
determining that one or more peripheral devices of the user are currently sending signals to the user device; and
implementing, based on the determining that the location of the user device is within a user-specified location and on the determining that the one or more peripheral devices are currently sending signals to the user device, a user-specified security protocol for conducting the transaction, wherein the user-specified security protocol has a reduced user authentication requirement than a first security protocol under which the user device is operated when the user device is outside the user-specified location, and wherein an extent to which the user authentication requirement is reduced is based on a number of the one or more peripheral devices that are currently sending the signals to the user device.
19 . The non-transitory machine-readable medium of claim 18 , wherein the reduced user authentication requirement allows the transaction to be conducted without requiring the user to enter a password.
20 . The non-transitory machine-readable medium of claim 18 , wherein the operations further comprise:
prompting the user to designate the location as the user-specified location after determining that the user has conducted the transaction at the location a number of times above a threshold.