Remote access control using validation of physical location of remote user

Patent metadata

Field	Value
Publication number	US-12445452-B2
Application number	US-202218081758-A
Country	US
Kind code	B2
Filing date	Dec 15, 2022
Priority date	Dec 15, 2022
Publication date	Oct 14, 2025
Grant date	Oct 14, 2025

Abstract

Techniques are provided for remote access control using validation of a physical location of a remote user. One method comprises obtaining a request from a user associated with a first entity to remotely access a network associated with a second entity; and, in response to the request, performing the following steps: determining if a location of the user is at least partially within at least one designated location associated with the first entity; and initiating a granting of the request to remotely access the network in response to a result of the determining. An evaluation of whether the user is connected to a network of the first entity may also be performed in response to the request from the user to remotely access the network. The request to remotely access the network may be in connection with the user remotely maintaining a product of the second entity.

First claim

What is claimed is:

1. A method, comprising:
obtaining, by at least one processing device of a first entity, a request from a user associated with the first entity to remotely access a network of a second entity, wherein the first entity is distinct from the second entity, and wherein the request to remotely access the network is in connection with the user remotely maintaining one or more products of the second entity in connection with at least one remote service agreement between the first entity and the second entity; and
in response to the request from the user to remotely access the network, performing the following steps, based at least in part on at least one user validation procedure of the at least one remote service agreement:
determining, by the at least one processing device of the first entity, if a location of the user is at least partially within at least one designated location of the first entity; and
initiating, by the at least one processing device of the first entity and in response to determining the location of the user is at least partially within the at least one designated location of the first entity, a granting of the request to remotely access the network of the second entity;
wherein the at least one processing device comprises a processor coupled to a memory.

2. The method of claim 1 , further comprising, in response to the request from the user to remotely access the network, performing a multi-factor authentication of the user.

3. The method of claim 1 , further comprising, in response to the request from the user to remotely access the network, evaluating whether the user is connected to a network of the first entity.

4. The method of claim 1 , wherein the at least one remote service agreement comprises a service level agreement between the first entity and the second entity for the first entity to remotely maintain one or more products of the second entity.

5. The method of claim 1 , wherein the determining if the location of the user is at least partially within the at least one designated location associated with the first entity comprises evaluating one or more of: (i) a location of one or more signals of a device of the user; (ii) one or more facility access records of the first entity to determine if the user entered the at least one designated location; and (iii) a biometric signal obtained from the user at the at least one designated location.

6. The method of claim 5 , wherein the one or more facility access records of the first entity are evaluated to determine if, at a time of the request from the user to remotely access the network, a most recent location accessed by the user using an employee credential was the at least one designated location.

7. An apparatus comprising:
at least one processing device, of a first entity, comprising a processor coupled to a memory;
the at least one processing device being configured to implement the following steps:
obtaining, by at least one processing device of a first entity, a request from a user associated with the first entity to remotely access a network of a second entity, wherein the first entity is distinct from the second entity, and wherein the request to remotely access the network is in connection with the user remotely maintaining one or more products of the second entity in connection with at least one remote service agreement between the first entity and the second entity; and
in response to the request from the user to remotely access the network, performing the following steps, based at least in part on at least one user validation procedure of the at least one remote service agreement:
determining, by the at least one processing device of the first entity, if a location of the user is at least partially within at least one designated location of the first entity; and
initiating, by the at least one processing device of the first entity and in response to determining the location of the user is at least partially within the at least one designated location of the first entity, a granting of the request to remotely access the network of the second entity.

8. The apparatus of claim 7 , further comprising, in response to the request from the user to remotely access the network, evaluating whether the user is connected to a network of the first entity.

9. The apparatus of claim 7 , wherein the at least one remote service agreement comprises a service level agreement between the first entity and the second entity for the first entity to remotely maintain one or more products of the second entity.

10. The apparatus of claim 7 , wherein the determining if the location of the user is at least partially within the at least one designated location associated with the first entity comprises evaluating one or more of: (i) a location of one or more signals of a device of the user; (ii) one or more facility access records of the first entity to determine if the user entered the at least one designated location; and (iii) a biometric signal obtained from the user at the at least one designated location.

11. The apparatus of claim 10 , wherein the one or more facility access records of the first entity are evaluated to determine if, at a time of the request from the user to remotely access the network, a most recent location accessed by the user using an employee credential was the at least one designated location.

12. A non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device, of a first entity, causes the at least one processing device to perform the following steps:
obtaining, by at least one processing device of a first entity, a request from a user associated with the first entity to remotely access a network of a second entity, wherein the first entity is distinct from the second entity, and wherein the request to remotely access the network is in connection with the user remotely maintaining one or more products of the second entity in connection with at least one remote service agreement between the first entity and the second entity; and
in response to the request from the user to remotely access the network, performing the following steps, based at least in part on at least one user validation procedure of the at least one remote service agreement:
determining, by the at least one processing device of the first entity, if a location of the user is at least partially within at least one designated location of the first entity; and
initiating, by the at least one processing device of the first entity and in response to determining the location of the user is at least partially within the at least one designated location of the first entity, a granting of the request to remotely access the network of the second entity.

13. The non-transitory processor-readable storage medium of claim 12 , further comprising, in response to the request from the user to remotely access the network, evaluating whether the user is connected to a network of the first entity.

14. The non-transitory processor-readable storage medium of claim 12 , wherein the request to remotely access the network is in performed in connection with at least one remote service agreement comprises a service level agreement between the first entity and the second entity for the first entity to remotely maintain one or more products of the second entity.

15. The non-transitory processor-readable storage medium of claim 12 , wherein the determining if the location of the user is at least partially within the at least one designated location

Assignees

• Dell Products Lp

Inventors

• Gehtman Yevgeni
• Shachar Tomer
• Balin Maxim

Classifications

• H04L67/61

  taking into account QoS or priority requirements · CPC title

• H04L41/50 Primary

  Network service management, e.g. ensuring proper service fulfilment according to agreements · CPC title

• H04L63/107

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title

• H04W12/73

  Access point logical identity · CPC title

• H04W12/64

  using geofenced areas · CPC title