Method and apparatus for optimized access of security credentials via mobile edge-computing systems

Patent metadata

Field	Value
Publication number	US-10452824-B2
Application number	US-201715657490-A
Country	US
Kind code	B2
Filing date	Jul 24, 2017
Priority date	Jul 24, 2017
Publication date	Oct 22, 2019
Grant date	Oct 22, 2019

Abstract

A method for secure access to a mobile edge-computing system device based on a subscriber location fingerprint may comprise receiving a request to access the mobile edge-computing system, a first personal authorization credential record, and an encrypted token from a requesting client, associating the first personal authorization credential record with a block chain location fingerprint for the subscribing client, including a plurality of time-stamped records of a plurality of estimated or measured location state variables of the subscribing client and an associated confidence interval representing an accuracy of those variables, decrypting the location fingerprint, receiving a requesting client location measurement, predicting a current location for the subscribing client and an associated current confidence interval based on recent location state variables in the location fingerprint, and allowing the requesting client access to the mobile edge-computing system when the received requesting client location measurement falls within the value of the current confidence interval.

First claim

What is claimed is:

1. An information handling system of a mobile edge-computing system operating a nomadic computing authentication system comprising:
a memory receiving a predicted location of a client with a predicted location tolerance;
the memory receiving a pre-located, encrypted set of personal authorization credentials;
a processor executing machine readable executable code instructions to:
detect an access attempt by the client including identification of the client at a first location and a first personal authorization credential record;
determine whether the access attempt indicates the client is within the predicted location tolerance of the predicted location of the client;
determine whether the first personal authorization credential record is matched in the personal authorization credential record;
identify a plurality of mobile edge computing systems located within a preset range of the first location if the first location is within the predicted location tolerance and the first personal authorization credential record is matched; and
select an optimal edge compute partner system from among the plurality of mobile edge computing systems located within a preset range of the first location based on a minimum historical trust category rating determined from historical trust references accessed for the optimal edge compute partner system.

2. The information handling system operating the system of claim 1 further comprising:
the processor executing code instructions to:
select the optimal edge compute partner system further based on a highest historical trust category or rating from among mobile edge computing systems determined from historical trust references accessed for the plurality of mobile edge computing systems.

3. The information handling system operating the system of claim 1 further comprising:
the processor executing code instructions to:
select the optimal edge compute partner system from among the plurality of mobile edge computing systems located within a preset range of the first location further based on an ability to meet an identified mobile edge-computing system resource requirement associated with the client access request.

4. The information handling system operating the system of claim 3 wherein the mobile edge-computing system computing resource requirement is a memory requirement.

5. The information handling system operating the system of claim 3 wherein the mobile edge-computing system computing resource requirement is a processing requirement.

6. The information handling system operating the system of claim 1 further comprising:
the processor executing code instructions to:
transmit a request for a second personal authorization credential record input if the access attempt indicates the client is not within the predicted location tolerance of the predicted location of the client; and
if the personal authorization credential record input fails to match in the personal authorization credential record, denying access to the nomadic computing services.

7. The information handling system operating the system of claim 1 further comprising:
the processor executing code instructions to:
transmit a request for a second personal authorization credential record input if the first personal authorization credential record is matched in the personal authorization credential record; and
if the personal authorization credential record input matches in the personal authorization credential record, granting access to the optimal edge compute partner system for nomadic computing services.

8. An information handling system of a mobile edge-computing system operating a nomadic computing authentication system comprising:
a memory receiving a predicted location of a client with a predicted location tolerance;
the memory receiving a pre-located, encrypted set of personal authorization credentials;
a processor executing machine readable executable code instructions to:
identify a plurality of mobile edge computing systems located within a preset range of the predicted future location;
select an optimal edge compute partner system from among the plurality of mobile edge computing systems located within a preset range of the predicted future location based on a minimum historical trust category rating determined from historical trust references accessed for the optimal edge compute partner system;
detect an access attempt by the client including identification of the client at a first location and a first personal authorization credential record, wherein the first personal authorization credential record is a biometric measurement;
determine whether the access attempt indicates the first location is within the predicted location tolerance of the predicted location of the client;
decrypt the personal authorization credential record and determine whether the first personal authorization credential record is matched in the personal authorization credential record; and
if the first location is within the predicted location tolerance and the first personal authorization credential record is matched, grant access to the optimal edge compute partner system for nomadic computing services.

9. The information handling system operating the system of claim 8 further comprising:
the processor executing machine readable executable code instructions to:
transmit a challenge request to the client for a second personal authorization credential record if the first personal authorization credential record does not match the decrypted personal authorization credential record; and
allow access to the mobile edge computing system upon receipt of the second personal authorization credential record matching the decrypted personal authorization credential record.

10. The information handling system operating system of claim 9 further comprising:
the processor executing machine readable executable code instructions to:
disallow access by the requesting client and future requesting clients upon receipt of a second personal authorization credential record not matching the decrypted personal authorization credential record.

11. The information handling system of claim 8 , wherein the first personal authorization credential record is a data record generated by a gesture identification system.

12. The information handling system of claim 8 , wherein the first personal authorization credential record is a data record generated by a voice recognition system.

13. The information handling system of claim 8 , wherein the first personal authorization credential record is a data record generated by a facial recognition system.

Assignees

• Dell Products Lp

Inventors

• Egner Will A
• Quinn Liam B

Classifications

• G06F21/44

  Program or device authentication · CPC title

• H04L9/3297

  involving time stamps, e.g. generation of time stamps · CPC title

• G06F2221/2111

  Location-sensitive, e.g. geographical location, GPS · CPC title

• H04L9/3239

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title

• H04W12/06

  Authentication · CPC title