Method and apparatus for authentication of a user based on location of the user

Patent metadata

Field	Value
Publication number	US-2025063355-A1
Application number	US-202418921042-A
Country	US
Kind code	A1
Filing date	Oct 21, 2024
Priority date	Oct 21, 2024
Publication date	Feb 20, 2025
Grant date	—

Abstract

A method and apparatus for authentication of a user. A user profile is generated during an initial registration. The user profile may include a trusted location of the user. During a subsequent authentication process for the user, it is determined whether the user is located in the trusted location of the user, and an access to a service for the user may be controlled based on a result of the authentication process and the determination whether the user is located in the trusted location of the user. A location-based parameter of the trusted location of the user may be determined and stored in advance, and it is determined whether the user is located in the trusted location of the user by comparing the location-based parameter of the current location of the user and the location-based parameter of the trusted location of the user.

First claim

1 . A computer-readable medium comprising a program code that, when the program code is executed on a processor, a computer, or a programmable hardware component, causes the processor, the computer, or the programmable hardware component to:
generate a user profile of a user, the user profile including a trusted location of the user, wherein the trusted location is a location verifiable by a service provider based on information or parameters securely transmitted to the service provider; perform an authentication process for the user; determine whether the user is located in the trusted location of the user; and control an access to a service for the user based on a result of the authentication process and the determination whether the user is located in the trusted location of the user.

2 . The computer-readable medium of claim 1 , wherein a location-based parameter of the trusted location of the user is determined and stored in advance, and the program code is configured to determine whether the user is located in the trusted location of the user by:
receiving a location-based parameter of a current location of the user; and comparing the location-based parameter of the current location of the user and the location-based parameter of the trusted location of the user.

3 . The computer-readable medium of claim 2 , wherein the location-based parameter of the trusted location of the user and the location-based parameter of the current location of the user are channel state information determined by a user device of the user based on radio frequency signal reflection in the trusted location of the user and the current location of the user, respectively.

4 . The computer-readable medium of claim 1 , wherein the program code is configured to:
receive an input from the user regarding a current location of the user; and determine whether the user is located in the trusted location of the user based on the input from the user.

5 . The computer-readable medium of claim 1 , wherein the authentication process is a Fast Identity Online (FIDO) authentication process.

6 . The computer-readable medium of claim 1 , wherein the trusted location of the user is a home or an office of the user.

7 . A computer-readable medium comprising a program code that, when the program code is executed on a processor, a computer, or a programmable hardware component, causes the processor, the computer, or the programmable hardware component to:
generate a user profile of a user, the user profile including a trusted location of the user, wherein the trusted location is a location verifiable by a service provider based on information or parameters securely transmitted to the service provider; initiate an authentication process for the user; provide information associated with a current location of the user to a server; and receive a service from the server based on a result of the authentication process and determination whether the user is located in the trusted location of the user.

8 . The computer-readable medium of claim 7 , wherein the program code is configured to:
determine a location-based parameter of the trusted location of the user and send the location-based parameter of the trusted location of the user to the server; and determine a location-based parameter of a current location of the user and send the location-based parameter of the current location of the user, as the information associated with the current location of the user, to the server.

9 . The computer-readable medium of claim 8 , wherein the location-based parameter of the trusted location of the user and the location-based parameter of the current location of the user are channel state information determined by a user device of the user based on radio frequency signal reflection in the trusted location of the user and the current location of the user, respectively.

10 . The computer-readable medium of claim 7 , wherein the information associated with the current location of the user is an input of the current location of the user.

11 . The computer-readable medium of claim 7 , wherein the authentication process is a Fast Identity Online (FIDO) authentication process.

12 . The computer-readable medium of claim 7 , wherein the trusted location of the user is a home or an office of the user.

13 . The computer-readable medium of claim 7 , wherein the program code is configured to unlock a user device of the user if it is determined that the user is located in the trusted location of the user.

14 . The computer-readable medium of claim 7 , wherein the program code is configured to enable unlocking a user device of the user using facial recognition or voice recognition only if it is determined that the user is located in the trusted location of the user.

15 . An apparatus for authentication of a user, comprising a processor and a storage, wherein the processor is configured to:
generate a user profile of a user, the user profile including a trusted location of the user, wherein the trusted location is a location verifiable by a service provider based on information or parameters securely transmitted to the service provider; perform an authentication process for the user; determine whether the user is located in the trusted location of the user; and control an access to a service for the user based on a result of the authentication process and the determination whether the user is located in the trusted location of the user.

16 . The apparatus of claim 15 , wherein a location-based parameter of the trusted location of the user is determined and stored in advance, and the processor is configured to receive a location-based parameter of a current location of the user, and determine whether the user is located in the trusted location of the user by comparing the location-based parameter of the current location of the user and the location-based parameter of the trusted location of the user.

17 . The apparatus of claim 16 , wherein the location-based parameter of the trusted location of the user and the location-based parameter of the current location of the user are channel state information determined by a user device of the user based on radio frequency signal reflection in the trusted location of the user and the current location of the user, respectively.

18 . The apparatus of claim 15 , wherein the processor is configured to receive an input from the user regarding a current location of the user and determine whether the user is located in the trusted location of the user based on the input from the user.

19 . The apparatus of claim 15 , wherein the authentication process is a Fast Identity Online (FIDO) authentication process.

20 . The apparatus of claim 15 , wherein the trusted location of the user is a home or an office of the user.

Assignees

• Intel Corp

Inventors

• Blum Shem-Tov Ilil
• Klein Yaron
• Horovitz Dan
• Kahana Yoni
• Ben-Shalom Omer

Classifications

• G06F2221/2111

  Location-sensitive, e.g. geographical location, GPS · CPC title

• H04L63/107

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title

• H04W12/06 Primary

  Authentication · CPC title

• H04W12/63 Primary

  Location-dependent; Proximity-dependent · CPC title