# US 11,451,558 B2 · Information system end user location detection technique > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,451,558 B2 - Document ID: US11451558B2 - Status: Granted - Kind: B2 - Application number: 16/820,303 - Filed: 2020-03-16 - Published: 2021-09-16 - Granted: 2022-09-20 - Earliest claimed: 2020-03-16 - Assignees: The Boeing Company - Applicants: The Boeing Company - Inventors: Atul Uttam Dimble; Kiran Narayan - Web page: https://patentgrep.com/patent/US11451558B2 ## CPC - H04L 9/3271: {using challenge-response} - H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals} - H04L 9/0872: {using geo-location information, e.g. location data, time, relative position or proximity to other entities} - H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)} - H04L 9/3242: {involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC} - H04L 63/126: {the source of the received data} - H04W 12/08: Access security - H04W 12/108: Source integrity - H04W 12/63: Location-dependent; Proximity-dependent - H04L 2463/121: Timestamp - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A method at a computing device is described. The method comprises executing an application for verifying a location of a user requesting to access a location-based service, receiving, at the application, information indicating a location of the computing device, and encoding, with the application, at least the location to thereby generate a location token for responding to a challenge for the location token. The method further comprises outputting the location token from the application, the location token configured for use in applying a location-based access policy that controls access by the user to the location-based service. ## Claims ### Claim 1 At a computing device, a method, comprising: executing an application for verifying a location of a user requesting to access a location-based service; receiving, at the application, information indicating a location of the computing device; encoding, with the application, at least the location of the computing device to thereby generate a location token for responding to a challenge for the location token, wherein encoding at least the location of the computing device comprises hashing at least the location of the computing device via a user-specific secret key to thereby generate the location token, and where the user-specific secret key is configured for use in validating the location token; and outputting the location token from the application, the location token configured to be decoded using the user-specific secret key to thereby reveal a hash of at least the location of the computing device, the hash of at least the location of the computing device configured to be compared to a validation hash generated for a whitelisted location to thereby verify the location of the computing device for use in applying a location-based access policy that controls access by the user to the location-based service based at least on the location of the computing device. ### Claim 2 (depends on 1) The method of claim 1, where receiving the information indicating the location of the computing device comprises detecting the location via a sensor of the computing device. ### Claim 3 (depends on 1) The method of claim 1, where the information indicating the location of the computing device indicates a country in which the computing device resides. ### Claim 4 (depends on 1) The method of claim 1, further comprising hashing a timestamp along with the location of the computing device to thereby generate the location token. ### Claim 5 (depends on 1) The method of claim 1, where the location token is invalidated upon expiration of a threshold duration. ### Claim 6 (depends on 1) The method of claim 1, where the challenge for the location token is received at another computing device at which access by the user to the location-based service is requested. ### Claim 7 (depends on 1) The method of claim 1, where the computing device is registered to the user. ### Claim 8 (depends on 1) The method of claim 1, where outputting the location token comprises displaying the location token on a display of the computing device. ### Claim 9 A computing device, comprising: a logic subsystem; and a storage subsystem comprising instructions executable by the logic subsystem to: output a request by a user to access a location-based service; receive a challenge for a location token; receive user input comprising the location token, the location token being generated at another computing device associated with the user, wherein the location token encodes at least a location of the another computing device associated with the user as a hash of at least the location of the another computing device generated with a user-specific secret key; and output the location token, the location token configured to be decoded using the user-specific secret key to thereby reveal the hash of at least the location of the another computing device, the hash of at least the location of the another computing device configured to be compared to a validation hash generated for a whitelisted location to thereby verify the location of the another computing device for use in applying a location-based access policy that controls access by the user to the location-based service based at least on the location of the another computing device. ### Claim 10 (depends on 9) The computing device of claim 9, further comprising instructions executable to, where the location-based access policy grants access by the user to the location-based service, access the location-based service. ### Claim 11 (depends on 9) The computing device of claim 9, where the location token is invalidated upon expiration of a threshold duration. ### Claim 12 (depends on 9) The computing device of claim 9, wherein the location token further encodes a timestamp. ### Claim 13 (depends on 9) The computing device of claim 9, wherein the location of the another computing device indicates a country in which the another computing device resides. ### Claim 14 (depends on 9) The computing device of claim 9, wherein the instructions executable to output the location token include instructions executable to display the location token on a display of the computing device. ### Claim 15 A method of authorizing user access to location-based services, the method comprising: at a first computing device, outputting a request by a user to access a location-based service; and receiving a challenge for a location token; at a second computing device, executing an application for verifying a location of the user requesting access to the location-based service; receiving, at the application, information indicating a location of the second computing device; encoding, with the application and via a user-specific secret key, at least the location of the second computing device to thereby generate the location token, wherein encoding at least the location of the second computing device comprises hashing, with the application at the second computing device, at least the location of the second computing device via the user-specific secret key to thereby generate a hash of at least the location of the second computing device; and outputting the location token from the application; at the first computing device, receiving user input comprising the location token; and outputting the location token, the location token configured to be decoded using the user-specific secret key to thereby reveal the hash of at least the location of the second computing device, the hash of at least the location of the second computing device configured to be compared to a validation hash generated for a whitelisted location for validation to thereby verify the location of the second computing device, where the location of the second computing device at least in part controls access by the user to the location-based service. ### Claim 16 (depends on 15) The method of claim 15, where receiving the information indicating the location of the second computing device comprises detecting the location of the second computing device via a sensor of the second computing device. ### Claim 17 (depends on 15) The method of claim 15, further comprising hashing, with the application at the second computing device, a timestamp along with the location of the second computing device to thereby generate the location token. ### Claim 18 (depends on 15) The method of claim 15, where the location token is invalidated upon expiration of a threshold duration. ### Claim 19 (depends on 15) The method of claim 15, wherein the location of the second computing device indicates a country in which the second computing device resides. ### Claim 20 (depends on 15) The method of claim 15, where outputting the location token comprises displaying the location token on a display of the first computing device.