Controlling access to venue-related content, applications, and services

Patent metadata

Field	Value
Publication number	US-9763039-B2
Application number	US-201414585470-A
Country	US
Kind code	B2
Filing date	Dec 30, 2014
Priority date	Dec 30, 2014
Publication date	Sep 12, 2017
Grant date	Sep 12, 2017

Abstract

A capability for controlling access by a mobile device to venue-related items associated with a venue is presented. A server may be configured to detect a presence of the mobile device at the venue and send a venue token toward the mobile device based on detection of the presence of the mobile device at the venue, where the venue token includes an indication of a venue-related item that the mobile device is permitted to access independent of a location of the mobile device. A mobile device may be configured to receive a venue token based on a presence of the mobile device at the venue where the venue token includes an indication of a venue-related item that the mobile device is permitted to access independent of a location of the mobile device, and send a request for the venue-related item toward a server based on the venue token.

First claim

What is claimed is:

1. An apparatus, comprising:
a processor and a memory communicatively connected to the processor, the processor configured to:
detect a presence of a mobile device at a venue;
send, toward the mobile device based on detection of the presence of the mobile device at the venue, a venue token comprising an indication of a venue-related item that the mobile device is permitted to access independent of a location of the mobile device; and
send, toward the mobile device based on detection of the presence of the mobile device at the venue and separately from the sending of the venue token toward the mobile device, authentication information associated with the venue token.

2. The apparatus of claim 1 , wherein the processor is configured to detect the presence of the mobile device at the venue based on receipt of a message from a location server.

3. The apparatus of claim 1 , wherein the processor is configured to send the venue token automatically based on detection of the presence of the mobile device at the venue.

4. The apparatus of claim 1 , wherein the indication of the venue-related item that the mobile device is permitted to access independent of the location of the mobile device is encoded within the venue token.

5. The apparatus of claim 1 , wherein the indication of the venue-related item that the mobile device is permitted to access independent of the location of the mobile device comprises a Uniform Resource Identifier (URI) of the venue-related item.

6. The apparatus of claim 1 , wherein the processor is configured to send the venue token via a first communication session and to send the authentication information via a second communication session.

7. The apparatus of claim 1 , wherein the authentication information comprises authentication credentials.

8. The apparatus of claim 7 , wherein the authentication credentials comprise at least one of a value, a code, or a certificate.

9. The apparatus of claim 1 , wherein the authentication information comprises an authentication function configured for generating authentication credentials.

10. The apparatus of claim 1 , wherein the processor is configured to:
generate the authentication information and send the authentication information toward a venue server; or
receive the authentication information from a venue server.

11. The apparatus of claim 1 , wherein the venue token further comprises an indication of context information.

12. The apparatus of claim 1 , wherein the venue-related item comprises at least one of a content item, an application, or a service.

13. The apparatus of claim 1 , wherein the authentication information is configured for controlling access by the mobile device to the venue-related item indicated in the venue token.

14. A method, comprising:
detecting, by a processor, a presence of a mobile device at a venue;
sending, toward the mobile device based on detection of the presence of the mobile device at the venue, a venue token comprising an indication of a venue-related item that the mobile device is permitted to access independent of a location of the mobile device; and
sending, based on detection of the presence of the mobile device at the venue and separately from the sending of the venue token toward the mobile device, authentication information associated with the venue token.

15. A mobile device, comprising:
a processor and a memory communicatively connected to the processor, the processor configured to:
receive, at the mobile device based on a presence of the mobile device at a venue, a venue token comprising an indication of a venue-related item that the mobile device is permitted to access independent of a location of the mobile device;
receive, at the mobile device based on the presence of the mobile device at the venue and separately from the receiving of the venue token at the mobile device, authentication information associated with the venue token;
generate, at the mobile device, based on the venue token and the authentication information, a request for the venue-related item; and
send the request for the venue-related item from the mobile device toward a server.

16. The mobile device of claim 15 , wherein the indication of the venue-related item that the mobile device is permitted to access independent of the location of the mobile device is encoded within the venue token.

17. The mobile device of claim 15 , wherein the indication of the venue-related item that the mobile device is permitted to access independent of the location of the mobile device comprises a Uniform Resource Identifier (URI) of the venue-related item.

18. The mobile device of claim 15 , wherein the processor is configured to receive the venue token via a first communication session and to receive the authentication information via a second communication session.

19. The mobile device of claim 15 , wherein the authentication information comprises authentication credentials.

20. The mobile device of claim 19 , wherein the authentication credentials comprise at least one of a value, a code, or a certificate.

21. The mobile device of claim 15 , wherein the processor is configured to:
receive the authentication information from the server or from a token server from which the venue token is received.

22. The mobile device of claim 15 , wherein the authentication information comprises an authentication function configured for generating authentication credentials.

23. The mobile device of claim 22 , wherein the processor is configured to:
generate authentication credentials based on the authentication function; and
generate the request for the venue-related item based on the authentication credentials.

24. The mobile device of claim 15 , wherein the venue token further comprises an indication of context information.

25. The mobile device of claim 24 , wherein the processor is configured to send the request for the venue-related item based on the context information.

26. The mobile device of claim 15 , wherein the venue token is valid for a finite duration.

27. The mobile device of claim 15 , wherein the processor is configured to:
send the venue token toward an end device responsive to a trigger condition.

28. The mobile device of claim 15 , wherein the venue-related item comprises at least one of a content item, an application, or a service.

29. The mobile device of claim 15 , wherein the authentication information is configured for controlling access by the mobile device to the venue-related item indicated in the venue token.

30. A method, comprising:
receiving, by a processor at a mobile device based on a presence of the mobile device at a venue, a venue token comprising an indication of a venue-related item that the mobile device is permitted to access independent of a location of the mobile device;
receiving, at the mobile device based on the presence of the mobile device at the venue and separately from the receiving of the venue token at the mobile device, authentication information associated with the venue token;
generating, at the mobile device, based on the venue token and the authentication information, a request for the venue-related item; and
sending the request for the venue-related item from the mobile device toward a server.

Assignees

• Kahn Colin L
• White Christopher A
• Alcatel Lucent Usa Inc

Inventors

• Kahn Colin L
• White Christopher A

Classifications

• H04W12/08

  Access security · CPC title

• H04W4/021 Primary

  Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences · CPC title

• H04W12/04

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title

• H04L2463/061

  applying further key derivation, e.g. deriving traffic keys from a pair-wise master key · CPC title

• H04W12/06

  Authentication · CPC title