Method and apparatus for secure access to a mobile edge computing gateway device based on a subscriber location fingerprint

Patent metadata

Field	Value
Publication number	US-10439820-B2
Application number	US-201715627300-A
Country	US
Kind code	B2
Filing date	Jun 19, 2017
Priority date	Jun 19, 2017
Publication date	Oct 8, 2019
Grant date	Oct 8, 2019

Abstract

A method for secure access to a mobile edge computing gateway device based on a subscriber location fingerprint may comprise receiving a request to access the mobile edge computing gateway, a first user credential, and an encrypted token from a requesting user, associating the first user credential with a block chain location fingerprint for the subscribing user, including a plurality of time-stamped records of a plurality of estimated or measured location state variables of the subscribing user and an associated confidence interval representing an accuracy of those variables, decrypting the location fingerprint, receiving a requesting user location measurement, predicting a current location for the subscribing user and an associated current confidence interval based on recent location state variables in the location fingerprint, and allowing the requesting user access to the mobile edge computing gateway when the received requesting user location measurement falls within the value of the current confidence interval.

First claim

What is claimed is:

1. An information handling system of a mobile edge computing gateway operating a location fingerprint security system comprising:
a memory for storing a plurality of blocks within a block chain of a location fingerprint for a subscribing user, each block including a time-stamped record of a plurality of estimated or measured location state variables of the subscribing user and an associated confidence interval representing an accuracy of the estimated or measured location state variables; and
a processor executing machine readable executable code instructions of the location fingerprint security system to:
receive a request to access the mobile edge computing gateway, a first user credential, and an encrypted token from a requesting user;
associate the first user credential with a block chain location fingerprint for the subscribing user, and decrypt the location fingerprint;
receive a requesting user location measurement;
predict a current location for the subscribing user and an associated current confidence interval based on the estimated or measured location state variables in the location fingerprint associated with the most recent time stamp; and
allow the requesting user access to the mobile edge computing gateway when the received requesting user location measurement falls within the value of the current confidence interval.

2. The information handling system operating a location fingerprint security system of claim 1 further comprising:
the processor executing machine readable executable code instructions of the location fingerprint security system to:
transmit a challenge request to the requesting user for a second user credential if the received requesting user location measurement falls outside the value of the current confidence interval; and
allow access to the mobile edge computing gateway upon receipt of the second user credential affirmatively identifying the requesting user as the subscribing user.

3. The information handling system operating the location fingerprint security system of claim 2 further comprising:
the processor executing machine readable executable code instructions of the location fingerprint security system to disallow access by the requesting user and future requesting users upon receipt of a second user credential failing to identify the requesting user as the subscribing user.

4. The information handling system operating the location fingerprint security system of claim 2 further comprising:
the processor executing code instructions to:
receive a second user credential affirmatively identifying the requesting user as the subscribing user; and
generate an updated block, stamped with the time of receipt of the request to access the mobile edge computing gateway, including the current estimated subscribing user location and current confidence interval, and adding the updated block to the subscribing user's block chain.

5. The information handling system operating the location fingerprint security system of claim 1 , wherein the requesting user location measurement is determined via a global positioning satellite location circuit within a mobile user information handling system in use by the requesting user.

6. The information handling system operating the location fingerprint security system of claim 1 further comprising:
the location fingerprint security system predicting the current location of the subscribing user by applying a Kalman filter to at least one recently time-stamped location fingerprint in the subscribing user's block chain having a confidence interval above a threshold level.

7. The information handling system operating the location fingerprint security system of claim 1 , wherein each block chain location fingerprint data is made available via an encryption key and a secure address location separately provided.

8. A method of securing access to a mobile edge computing gateway based on a location fingerprint comprising:
receiving a request to access the mobile edge computing gateway, a first user credential, and an encrypted token from a requesting user;
associating the first user credential with a block chain location fingerprint for a subscribing user, the block chain including a plurality of blocks, each block including a time-stamped record of a plurality of estimated or measured location state variables of the subscribing user and an associated confidence interval representing an accuracy of the estimated or measured location state variables, and decrypt the location fingerprint;
receiving a requesting user location measurement;
predicting a current location for the subscribing user and an associated current confidence interval based on the estimated or measured location state variables in the location fingerprint associated with the most recent time stamp; and
allowing the requesting user access to the mobile edge computing gateway when the received requesting user location measurement falls within the value of the current confidence interval.

9. The method of securing access to a mobile edge computing gateway based on a location fingerprint of claim 8 , further comprising:
transmitting a challenge request to the requesting user for a second user credential if the received requesting user location measurement falls outside the value of the current confidence interval; and
allowing access to the mobile edge computing gateway upon receipt of the second user credential affirmatively identifying the requesting user as the subscribing user.

10. The method of securing access to a mobile edge computing gateway based on a location fingerprint of claim 9 , further comprising:
disallowing access by the requesting user and future requesting users upon receipt of a second user credential failing to identify the requesting user as the subscribing user.

11. The method of securing access to a mobile edge computing gateway based on a location fingerprint of claim 9 , further comprising:
receiving a second user credential affirmatively identifying the requesting user as the subscribing user; and
generating an updated block, stamped with the time of receipt of the request to access the mobile edge computing gateway, including the current estimated subscribing user location and current confidence interval, and adding the updated block to the subscribing user's block chain.

12. The method of securing access to a mobile edge computing gateway based on a location fingerprint of claim 8 , wherein the requesting user location measurement is determined via a global positioning satellite location circuit within a mobile user information handling system in use by the requesting user.

13. The method of securing access to a mobile edge computing gateway based on a location fingerprint of claim 8 further comprising:
predicting the current location of the subscribing user by applying a Kalman filter to at least one recently time-stamped location fingerprint in the subscribing user's block chain having a confidence interval above a threshold level.

14. The method of securing access to a mobile edge computing gateway based on a location fingerprint of claim 8 wherein each block chain location fingerprint data is made available via an encryption key and a secure address location separately provided.

15. An information handling system of a mobile edge computing gateway and an authentication server operating a location fingerprint security system comprising:
a memory of the authentication server for storing a plurality of blocks within a block chain of a location fingerprint for a subscribing user, each block including a time-stamped r

Assignees

• Dell Products Lp

Inventors

• Egner Will A
• Quinn Liam B

Classifications

• H04W88/16

  Gateway arrangements · CPC title

• H04L63/0281

  Proxies · CPC title

• H04L63/107

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title

• H04L9/3239

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title

• H04L63/0807

  using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213) · CPC title