Information system end user location detection technique

A computing device, comprising:

• a logic subsystem;
• and
• a storage subsystem comprising instructions executable by the logic subsystem to:
• output a request by a user to access a location-based service;
• receive a challenge for a location token;
• receive user input comprising the location token, the location token being generated at another computing device associated with the user, wherein the location token encodes at least a location of the another computing device associated with the user as a hash of at least the location of the another computing device generated with a user-specific secret key;
• and
• output the location token, the location token configured to be decoded using the user-specific secret key to thereby reveal the hash of at least the location of the another computing device, the hash of at least the location of the another computing device configured to be compared to a validation hash generated for a whitelisted location to thereby verify the location of the another computing device for use in applying a location-based access policy that controls access by the user to the location-based service based at least on the location of the another computing device.

A method of authorizing user access to location-based services, the method comprising:

• at a first computing device,
• outputting a request by a user to access a location-based service;
• and
• receiving a challenge for a location token;
• at a second computing device,
• executing an application for verifying a location of the user requesting access to the location-based service;
• receiving, at the application, information indicating a location of the second computing device;
• encoding, with the application and via a user-specific secret key, at least the location of the second computing device to thereby generate the location token, wherein encoding at least the location of the second computing device comprises hashing, with the application at the second computing device, at least the location of the second computing device via the user-specific secret key to thereby generate a hash of at least the location of the second computing device;
• and
• outputting the location token from the application;
• at the first computing device,
• receiving user input comprising the location token;
• and
• outputting the location token, the location token configured to be decoded using the user-specific secret key to thereby reveal the hash of at least the location of the second computing device, the hash of at least the location of the second computing device configured to be compared to a validation hash generated for a whitelisted location for validation to thereby verify the location of the second computing device, where the location of the second computing device at least in part controls access by the user to the location-based service.