# US 11,122,041 B2 · System and method for location-based credentialing

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,122,041 B2
- Document ID: US11122041B2
- Status: Granted
- Kind: B2
- Application number: 14/865,914
- Filed: 2015-09-25
- Published: 2017-03-30
- Granted: 2021-09-14
- Earliest claimed: 2015-09-25
- Assignees: Siemens Industry, Inc.
- Applicants: Siemens Industry, Inc.
- Inventors: Robert Hafernik
- Web page: https://patentgrep.com/patent/US11122041B2

## CPC

- H04L 63/10: {for controlling access to devices or network resources}
- G06F 21/31: User authentication
- G06F 21/35: communicating wirelessly
- G06F 21/86: Secure or tamper-resistant housings
- G06F 21/88: Detecting or preventing theft or loss
- H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals}
- H04W 4/023: {using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds}
- H04W 12/08: Access security
- H04W 12/63: Location-dependent; Proximity-dependent
- H04W 12/64: using geofenced areas
- H04W 48/04: based on user or terminal location or mobility data, e.g. moving direction, speed
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

Credentialing systems, methods, and mediums. A method includes receiving, by a credentialing system, an access code and a device location from a mobile device. The device location indicates the current geographic location of the mobile device. The method includes comparing the received access code to a stored site code. The method includes, when the received access code matches a stored site code, determining whether the device location corresponds to a site location of a target system associated with the site code, and determining whether the access code is received during a valid access period associated with the site code. The method includes, when the received access code matches the stored site code, the device location corresponds to the site location, and the access code is received during the valid access period, then granting access for the mobile device to the target system.

## Claims

### Claim 1

A method performed by a credentialing system, comprising:
receiving, by the credentialing system, a request for a location-based credential for access to a target system at a target site, wherein the request includes an identification of the target system, an identification of the target site, a level of access required on the target system, and the valid access period;
in response to the request, generating and storing a site code by the credentialing system, the site code associated with the target system, the level of access, and the valid access period;
transmitting the site code to a user;
thereafter receiving, by the credentialing system, an access code and a device location from a mobile device, wherein the device location indicates the current geographic location of the mobile device;
comparing the received access code to the stored site code;
when the received access code matches the stored site code:
determining whether the device location corresponds to a site location of the target site, and
determining whether the access code is received during the valid access period associated with the site code; and
when the received access code matches the stored site code, the device location corresponds to the site location, and the access code is received during the valid access period, then granting access for the mobile device to access the target system and perform tasks according to the level of access.

### Claim 2 (depends on 1)

The method of claim 1, further comprising:
determining the site location corresponding to the target site, wherein the site location identifies the geographic location of a target site corresponding to the target system.

### Claim 3 (depends on 1)

The method of claim 1, wherein the device location corresponds to the site location when the device location is within a predetermined distance threshold of the site location.

### Claim 4 (depends on 1)

The method of claim 1, wherein the granted access corresponds to the level of access specified in the request for the location-based credential for access to the target system at the target site.

### Claim 5 (depends on 1)

The method of claim 1, wherein the credentialing system revokes the granted access at an expiration of the valid access period.

### Claim 6 (depends on 1)

The method of claim 1, wherein the credentialing system does not receive a username or password with the received access code.

### Claim 7

A credentialing system, comprising:
a storage device comprising a credentialing application;
an accessible memory comprising instructions of the credentialing application; and
a processor configured to execute the instructions of the credentialing application to:
receive a request for a location-based credential for access to a target system at a target site, wherein the request includes an identification of the target system, an identification of the target site, a level of access required on the target system, and the valid access period;
in response to the request, generate and store a site code by the credentialing system, the site code associated with the target system, the level of access, and the valid access period;
transmit the site code to a user;
thereafter receive an access code and a device location from a mobile device, wherein the device location indicates the current geographic location of the mobile device;
compare the received access code to the stored site code;
when the received access code matches the stored site code:
determine whether the device location corresponds to a site location of the target site, and
determine whether the access code is received during the valid access period associated with the site code; and
when the received access code matches the stored site code, the device location corresponds to the site location, and the access code is received during the valid access period, then grant access for the mobile device to access the target system and perform tasks according to the level of access.

### Claim 8 (depends on 7)

The credentialing system of claim 7, wherein the processor is further configured to execute the instructions of the credentialing application to determine the site location corresponding to the target site, wherein the site location identifies the geographic location of a target site corresponding to the target system.

### Claim 9 (depends on 7)

The credentialing system of claim 7, wherein the device location corresponds to the site location when the device location is within a predetermined distance threshold of the site location.

### Claim 10 (depends on 7)

The credentialing system of claim 7, wherein the granted access corresponds to the level of access specified in the request for the location-based credential for access to the target system at the target site.

### Claim 11 (depends on 7)

The credentialing system of claim 7, wherein the credentialing system revokes the granted access at an expiration of the valid access period.

### Claim 12 (depends on 7)

The credentialing system of claim 7, wherein the credentialing system does not receive a username or password with the received access code.

### Claim 13

A non-transitory computer-readable medium encoded with executable instructions that, when executed, cause one or more data processing systems to:
receive a request for a location-based credential for access to a target system at a target site, wherein the request includes an identification of the target system, an identification of the target site, a level of access required on the target system, and the valid access period;
in response to the request, generate and store a site code by the credentialing system, the site code associated with the target system, the level of access, and the valid access period;
transmit the site code to a user;
thereafter receive an access code and a device location from a mobile device, wherein the device location indicates the current geographic location of the mobile device;
compare the received access code to the stored site code;
when the received access code matches the stored site code:
determine whether the device location corresponds to a site location of the target site, and
determine whether the access code is received during the valid access period associated with the site code; and
when the received access code matches the stored site code, the device location corresponds to the site location, and the access code is received during the valid access period, then grant access for the mobile device to access the target system and perform tasks according to the level of access.

### Claim 14 (depends on 13)

The computer-readable medium of claim 13, wherein the computer-readable medium is further encoded with executable instructions that, when executed, cause one or more data processing systems to determine the site location corresponding to the target site, wherein the site location identifies the geographic location of a target site corresponding to the target system.

### Claim 15 (depends on 13)

The computer-readable medium of claim 13, wherein the device location corresponds to the site location when the device location is within a predetermined distance threshold of the site location.

### Claim 16 (depends on 13)

The computer-readable medium of claim 13, wherein the granted access corresponds to the level of access specified in the request for the location-based credential for access to the target system at the target site.

### Claim 17 (depends on 13)

The computer-readable medium of claim 13, wherein the credentialing system revokes the granted access at an expiration of the valid access period.