Authentication server and methods for granting tokens comprising location data

An authentication server comprising:

• a receiver capable of receiving a request for a token from a mobile device, the token for use by the mobile device to establish authorization for the mobile device to access a service provided by a service server;
• a transmitter capable of transmitting the token to the mobile device;
• a memory;
• and
• a processor capable of generating the token, the token comprising location data identifying a location for the mobile device and authentication data indicating a level of access that the mobile device is permitted to have to the service provided by the service server, and causing the token to be transmitted to the mobile device.

A mobile device comprising:

• a processor;
• and
• a memory;
• wherein the processor is capable of transmitting a request to an authentication server for a token, the token for use by the mobile device to establish authorization for the mobile device to access a service provided by a service server;
• and
• wherein the processor is capable of receiving the token from the authentication server, the token comprising location data identifying a location for the mobile device and authentication data indicating a level of access that the mobile device is permitted to have to the service provided by the service server.

A method of authorizing a mobile device to access a service provided by a service server, the method comprising:

• receiving, at the service server, a request from the mobile device to access the service, wherein the request comprises a token generated by an authentication server, the token comprising location data identifying a location for the mobile device and authentication data indicating a level of access that the mobile device is permitted to have to the service provided by the service server;
• determining, at the service server,'whether the mobile device is authorized to access the service based on both the authentication data and the location data in the token generated by the authentication server;
• and
• controlling access by the mobile device to the service based on the determining.