User privacy protected location-based authentication on mobile devices

An apparatus comprising:

• means for binding location authentication information to an authentication key for a relying party (RP) application;
• means for receiving a request from the RP application for a signed authentication response;
• means for obtaining, at the apparatus, current location information for the apparatus;
• means for authenticating, at the apparatus, the current location information for the apparatus based on the location authentication information bound to the authentication key;
• and
• means for providing, to the RP application by the apparatus, the signed authentication response in response to the authenticating the current location information for the apparatus, wherein the signed authentication response is signed using the authentication key bound to the location authentication information.

An apparatus comprising:

• a memory;
• a processor coupled to the memory, the processor configured to:
• bind location authentication information to an authentication key for a relying party (RP) application;
• receive a request from the RP application for a signed authentication response;
• obtain, at the apparatus, current location information for the apparatus;
• authenticate, at the apparatus, the current location information for the apparatus based on the location authentication information bound to the authentication key;
• and
• provide, to the RP application by the apparatus, the signed authentication response in response to the authenticating the current location information for the apparatus, wherein the signed authentication response is signed using the authentication key bound to the location authentication information.

A non-transitory, computer-readable medium, having stored thereon computer-readable instructions for implementing location based authentication in a computing device, comprising instructions configured to cause the computing device to:

• bind location authentication information to an authentication key for a relying party (RP) application;
• receive a request from the RP application for a signed authentication response;
• obtain, at the computing device, current location information for the computing device;
• authenticate, at the computing device, the current location information for the computing device based on the location authentication information bound to the authentication key;
• and
• provide, to the RP application by the computing device, the signed authentication response in response to the authenticating the current location information for the computing device, wherein the signed authentication response is signed using the authentication key bound to the location authentication information.