IP Library Granted Patent US 10,531,293
Granted Patent B2
US 10,531,293 · App. 15/280,697 · Granted Jan 7, 2020

Social and proximity based access control for mobile applications

Inventors: Paul C. Castro (Sharon, MA); Yunwu Huang (Chappaqua, NY); Marco Pistoia (Amawalk, NY); Umut Topkara (Scarsdale, NY)
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
H04W12/06H04L63/104H04L63/105H04L63/107H04L63/20H04W12/04H04W12/08H04W12/00503
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,531,293
App. No.
15/280,697
Granted
Jan 7, 2020
Kind
B2
Abstract

Systems for proximity-based access control include a proximity module configured to determine whether a distance from a first mobile device to each of one or more safe mobile devices falls below a threshold distance; a policy engine comprising a processor configured to determine whether a number of safe mobile devices within the threshold distance exceeds a safe gathering threshold; and a security module configured to activate a safe gathering policy in accordance with the safe gathering threshold that decreases a security level in the first mobile device.

Claims (28)

1. A computer readable storage medium comprising a computer readable program for proximity-based access control, wherein the computer readable program when executed on a computer causes the computer to perform the steps of:

determining a distance from a first mobile device to each of one or more safe mobile devices which falls below a threshold distance;

determining, using a processor, a number of safe mobile devices within the threshold distance which exceeds a safe gathering threshold, the safe gathering threshold being a particular number of devices from among the safe mobile devices with threshold number of secret keys sufficient for decryption; and

activating a safe gathering policy in accordance with the safe gathering threshold that decreases a security level in the first mobile device.

2. A system for proximity-based access control, comprising: a processor device operatively coupled to a memory, the processor device being configured to:

determine, using a proximity module, a distance from a first mobile device to each of one or more safe mobile devices which falls below a threshold distance;

determine, using a policy engine comprising a processor, a number of safe mobile devices within the threshold distance which exceeds a safe gathering threshold, the safe gathering threshold being a particular number of devices from among the safe mobile devices with threshold number of secret keys sufficient for decryption; and

activate, using a security module, a safe gathering policy in accordance with the safe gathering threshold that decreases a security level in the first mobile device.

3. The system of claim 2 , wherein the policy engine is further configured to periodically verify that the number of safe mobile devices exceeds the safe gathering threshold and, if not, deactivating the safe gathering policy.

4. The system of claim 2 , wherein the security module is further configured to prompt a user of the first mobile device for a decision as to whether to activate the safe gathering policy.

5. The system of claim 2 , wherein the proximity module is further configured to receive an identifier and a signal strength magnitude from the safe mobile device.

6. The system of claim 2 , wherein the proximity module is further configured to determine whether the first mobile device is physically located within a safe space and the security module is to activate the safe gathering policy further in accordance with presence in the safe space.

7. The system of claim 6 , wherein the proximity module is further configured to determine whether the first mobile device is within a threshold range of one or more fixed transmitting stations.

8. The system of claim 6 , wherein the proximity module is further configured to access door access logs to determine the identities of people who have entered the safe space.

9. The system of claim 2 , wherein safe mobile devices include devices sharing a threshold secret key with the first mobile device and wherein the policy engine is further configured to determine whether enough threshold secret keys are available to meet a decryption threshold.

10. The system of claim 2 , wherein the safe gathering policy implements one or more authentication schemes that are less strict than a default authentication scheme.

11. The system of claim 2 , wherein the safe gathering threshold is one of a set of safe gathering thresholds having varying levels of safety and wherein activating a safe gathering policy comprises selecting a policy from a set of safe gathering policies in accordance with a corresponding safe gathering threshold.

12. The system of claim 2 , wherein the policy engine is further configured to determine whether a meeting is scheduled and wherein the security module is further configured to activate the safe gathering policy further in accordance with a determination that a meeting is scheduled.

13. The computer readable storage medium of claim 1 , further comprising periodically verifying that the number of safe mobile devices exceeds the safe gathering threshold and, if not, deactivating the safe gathering policy.

14. The computer readable storage medium of claim 1 , wherein activating the safe gathering policy comprises prompting a user of the first mobile device for a decision as to whether to activate the safe gathering policy.

15. The computer readable storage medium of claim 1 , wherein determining whether the distance between a safe mobile device and the first mobile device falls below a threshold comprises receiving an identifier and a signal strength magnitude from the safe mobile device.

16. The computer readable storage medium of claim 1 , wherein the one or more safe mobile devices comprise at least one identification badge having the ability to send identification signals.

17. The computer readable storage medium of claim 1 , further comprising:

determining whether the first mobile device is physically located within a safe space; and

activating the safe gathering policy further in accordance with presence in the safe space.

18. The computer readable storage medium of claim 17 , wherein determining whether the first mobile device is located in a safe space comprises determining whether the first mobile device is within a threshold range of one or more fixed transmitting stations.

19. The computer readable storage medium of claim 17 , wherein determining whether the first mobile device is located in a safe space comprises accessing door access logs to determine the identities of people who have entered the safe space.

20. The computer readable storage medium of claim 1 , wherein safe mobile devices include devices sharing a threshold secret key with the first mobile device and wherein determining whether a number of safe mobile devices within the threshold distance exceeds a safe gathering threshold comprises determining whether enough threshold secret keys are available to meet a decryption threshold.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 15, 2021
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: AIRBNB, INC.
Reel/Frame 056427/0193 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 29, 2016
From: CASTRO, PAUL C.; HUANG, YUNWU; PISTOIA, MARCO; TOPKARA, UMUT
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 039899/0474 →