System and method for providing location-based access in 5G
In one embodiment, a method includes transmitting, to a multi-factor authentication (MFA) agent running on a user device, a request for a location of the user device, receiving, from the MFA agent, the location of the user device, wherein the location is determined by the MFA agent to be a most common location indicated by a plurality of location indicators, receiving, from a policy server, a location-based access policy, appending, to the location-based access policy, the location of the user device and determining, based on the location of the user device and the location-based access policy, whether to allow the user device to access one or more of: a remote service, a remote database, and a remote device.
1. A system, comprising:
one or more processors; and
one or more computer-readable non-transitory storage media comprising instructions that, when executed by the one or more processors, cause one or more components of the system to perform operations comprising:
transmitting, to a multi-factor authentication (MFA) agent running on a user device, a request for a location of the user device;
receiving, from the MFA agent, the location of the user device, wherein the location is determined by the MFA agent to be a common location indicated by a plurality of location indicators;
receiving, from a policy server, a location-based access policy;
appending, to the location-based access policy, the location of the user device;
in response to appending the location of the user device to the location-based access policy, storing the location-based access policy;
receiving a first authentication result from an authentication server; and
determining, based on the location of the user device, the first authentication result, and the location-based access policy, a second authentication result, wherein the second authentication result indicates whether to allow the user device to access one or more of:
a remote service,
a remote database, and
a remote device.
2. The system of claim 1 , wherein the plurality of location indicators is generated by a plurality of location information sources including one or more of:
a Global Positioning System (GPS),
a cellular location provider, and
an other location provider.
3. The system of claim 1 , wherein the policy server is distributed using a plurality of policy server instances.
4. The system of claim 1 , wherein determining the second authentication result comprises determining whether the user device is within a pre-defined geographic border.
5. The system of claim 1 , wherein determining the second authentication result comprises determining whether the location of the user device corresponds to a geographic identifier associated with the user device.
6. The system of claim 1 , the operations further comprising:
authenticating, via the authentication server, the user device.
7. The system of claim 6 , wherein determining the second authentication result is further based on an authentication result of authenticating the user device.
8. A method, comprising:
transmitting, to a multi-factor authentication (MFA) agent running on a user device, a request for a location of the user device;
receiving, from the MFA agent, the location of the user device, wherein the location is determined by the MFA agent to be a most common location indicated by a plurality of location indicators;
receiving, from a policy server, a location-based access policy;
appending, to the location-based access policy, the location of the user device; and
in response to appending the location of the user device to the location-based access policy, storing the location-based access policy;
receiving a first authentication result from an authentication server; and
determining, based on the location of the user device, the first authentication result, and the location-based access policy, a second authentication result, wherein the second authentication result indicates whether to allow the user device to access one or more of:
a remote service,
a remote database, and
a remote device.
9. The method of claim 8 , wherein the plurality of location indicators are generated by a plurality of location information sources including one or more of:
a Global Positioning System (GPS),
a cellular location provider, and
an other location provider.
10. The method of claim 8 , wherein the policy server is distributed using a plurality of policy server instances.
11. The method of claim 8 , wherein determining the second authentication result comprises determining whether the user device is within a pre-defined geographic border.
12. The method of claim 8 , wherein determining the second authentication result comprises determining whether the location of the user device corresponds to a geographic identifier associated with the user device.
13. The method of claim 8 , further comprising:
authenticating, via the authentication server, the user device.
14. The method of claim 13 , wherein determining the second authentication result is further based on an authentication result of authenticating the user device.
15. One or more computer-readable non-transitory storage media embodying instructions that, when executed by a processor, cause performance of operations comprising:
transmitting, to a multi-factor authentication (MFA) agent running on a user device, a request for a location of the user device;
receiving, from the MFA agent, the location of the user device, wherein the location is determined by the MFA agent to be a most common location indicated by a plurality of location indicators;
receiving, from a policy server, a location-based access policy;
appending, to the location-based access policy, the location of the user device; and
in response to appending the location of the user device to the location-based access policy, storing the location-based access policy;
receiving a first authentication result from an authentication server; and
determining, based on the location of the user device, the first authentication result, and the location-based access policy, a second authentication result, wherein the second authentication result indicates whether to allow the user device to access one or more of:
a remote service,
a remote database, and
a remote device.
16. The one or more computer-readable non-transitory storage media of claim 15 , wherein the plurality of location indicators are generated by a plurality of location information sources including one or more of:
a Global Positioning System (GPS),
a cellular location provider, and
an other location provider.
17. The one or more computer-readable non-transitory storage media of claim 15 , wherein the policy server is distributed using a plurality of policy server instances.
18. The one or more computer-readable non-transitory storage media of claim 15 , wherein determining the second authentication result comprises determining one or more of:
whether the user device is within a pre-defined geographic border; and
whether the location of the user device corresponds to a geographic identifier associated with the user device.
19. The one or more computer-readable non-transitory storage media of claim 15 , further comprising:
authenticating, via the authentication server, the user device.
20. The one or more computer-readable non-transitory storage media of claim 19 , wherein determining the second authentication result is further based on an authentication result of authenticating the user device.