# US 2020/0076823 A1 · Localized access control for authorized modifications of data using a cryptographic hash > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2020/0076823 A1 - Document ID: US20200076823A1 - Status: Published application - Kind: A1 - Application number: 16/560,804 - Filed: 2019-09-04 - Published: 2020-03-05 - Earliest claimed: 2018-09-05 - Assignees: Fogchain Inc. - Applicants: FogChain Inc. - Inventors: Nathanael Phillip Coonrod - Web page: https://patentgrep.com/patent/US20200076823A1 ## CPC - H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals} - H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD} - H04L 9/50: {using hash chains, e.g. blockchains or hash trees} - H04W 12/086: using security domains - H04W 12/63: Location-dependent; Proximity-dependent - H04W 12/64: using geofenced areas - H04W 12/71: Hardware identity - H04L 63/104: {Grouping of entities} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Embodiments of network devices for access control are described. In some embodiments, an access control processor of a first node receives a request packet from a requestor node on an unsecured network to join a group of nodes; assigns, using a secured network protocol through the network interface, the requestor node to a first localized pool of the group of nodes within the secured network based on the received location information associated with the requestor node, wherein one or more nodes of the first localized pool are configured to perform one or more authorized modifications of data, the data comprising a blockchain including at least one cryptographic hash configured to protect the data against unauthorized modifications; and initiates the one or more first authorized modifications of the data using one or more nodes assigned to the first localized pool including the requestor node. ## Claims ### Claim 1 A data access control method comprising: by at least one processor of a first node: via a network interface, receiving a request packet from a requestor node on an unsecured network to join a group of nodes in a secured network, the first node configured to monitor data shared in the group of nodes comprising a plurality of partitioned nodes of the secured network; in response to the received request packet, receiving location information associated with the requestor node; determining that a location of the requestor node is within an area of coverage for a first localized pool of the group of nodes within the secured network based on the received location information associated with the requestor node; assigning, using a secured network protocol through the network interface, the requestor node to the first localized pool, wherein one or more nodes of the first localized pool are configured to perform one or more authorized modifications of data, the data comprising a blockchain including at least one cryptographic hash configured to protect the data against unauthorized modifications; initiating one or more first authorized modifications of a first subset of the data using one or more nodes assigned to the first localized pool including the requestor node; and initiating one or more second authorized modifications of a second subset of the data using one or more nodes assigned to the first localized pool including the requestor node and one or more nodes of a second localized pool of the group of nodes, wherein the one or more nodes of the second localized pool are different than the one or more nodes of the first localized pool. ### Claim 2 (depends on 1) The data access control method of claim 1, wherein the method further comprises: partitioning nodes of the secured network into a plurality of localized pools of secured nodes based on location information, the plurality of localized pools of secured nodes including the first and second localized pool. ### Claim 3 (depends on 1) The data access control method of claim 1, wherein the one or more first authorized modifications comprise modifying data located in the location corresponding to the location information. ### Claim 4 (depends on 1) The data access control method of claim 1, wherein the one or more first authorized modifications comprise transmitting data packets between the first node and a remote device. ### Claim 5 (depends on 4) The data access control method of claim 4, wherein the one or more first authorized modifications occur in response to signal from a cellular base station in communication with the remote device, and wherein the one or more first authorized modifications include disconnecting the remote device from the cellular base station. ### Claim 6 (depends on 4) The data access control method of claim 4, wherein the one or more first authorized modifications occur in response to meeting a threshold of network traffic for the cellular base station. ### Claim 7 (depends on 1) The data access control method of claim 1, wherein the location information includes at least one of: global positioning system address, global system for mobile address, user inputted address, physical address, IP address, Wi-Fi signal address, MAC address, base tower address, location history, or a current location for the first node. ### Claim 8 (depends on 1) The data access control method of claim 1, wherein initiating the one or more first authorized modifications includes assigning a first processing core to perform the one or more first authorized modifications, and wherein initiating the one or more second authorized modifications of the data includes assigning a second processing core to perform the one or more second authorized modifications. ### Claim 9 (depends on 1) The data access control method of claim 1, wherein initiating the one or more first authorized modifications includes retrieving data files stored external to the area of coverage for the first localized pool of the group of nodes. ### Claim 10 (depends on 1) The data access control method of claim 1, wherein initiating the one or more first authorized modifications includes transmitting and receiving network traffic on behalf of a remote device. ### Claim 11 (depends on 1) The data access control method of claim 1, wherein initiating the one or more first authorized modifications includes creating a wireless internet service for a remote device located in the area of coverage for the first localized pool of the group of nodes. ### Claim 12 A data access control system comprising: a network interface of a first node; and at least one processor of the first node configured to: via the network interface, receive a request packet from a requestor node on an unsecured network to join a group of nodes in a secured network, the first node configured to monitor data shared in the group of nodes comprising a plurality of partitioned nodes of the secured network; in response to the received request packet, receive location information associated with the requestor node; determine that a location of the requestor node is within an area of coverage for a first localized pool of the group of nodes within the secured network based on the received location information associated with the requestor node; assign, using a secured network protocol through the network interface, the requestor node to the first localized pool, wherein one or more nodes of the first localized pool are configured to perform one or more authorized modifications of data, the data comprising a blockchain including at least one cryptographic hash configured to protect the data against unauthorized modifications; initiate one or more first authorized modifications of a first subset of the data using one or more nodes assigned to the first localized pool including the requestor node; and initiate one or more second authorized modifications of a second subset of the data using one or more nodes assigned to the first localized pool including the requestor node and one or more nodes of a second localized pool of the group of nodes, wherein the one or more nodes of the second localized pool are different than the one or more nodes of the first localized pool. ### Claim 13 (depends on 12) The data access control system of claim 12, wherein the at least one processor is further configured to: partition nodes of the secured network into a plurality of localized pools of secured nodes based on location information, the plurality of localized pools of secured nodes including the first and second localized pool. ### Claim 14 (depends on 12) The data access control system of claim 12, wherein the one or more first authorized modifications comprise modifying data located in the location corresponding to the location information. ### Claim 15 (depends on 12) The data access control system of claim 12, wherein the one or more first authorized modifications comprise transmitting data packets between the first node and a remote device. ### Claim 16 (depends on 12) The data access control system of claim 12, wherein the one or more first authorized modifications occur in response to signal from a cellular base station in communication with a remote device, and wherein the one or more first authorized modifications include disconnecting the remote device from the cellular base station. ### Claim 17 (depends on 16) The data access control system of claim 16, wherein the one or more first authorized modifications occur in response to meeting a threshold of network traffic for the cellular base station. ### Claim 18 (depends on 12) The data access control system of claim 12, wherein the location information includes at least one of: global positioning system address, global system for mobile address, user inputted address, physical address, IP address, Wi-Fi signal address, MAC address, base tower address, location history, or a current location for the first node. ### Claim 19 (depends on 12) The data access control system of claim 12, wherein initiating the one or more first authorized modifications includes assigning a first processing core to perform the one or more first authorized modifications, and wherein initiating the one or more second authorized modifications of the data includes assigning a second processing core to perform the one or more second authorized modifications. ### Claim 20 (depends on 12) The data access control system of claim 12, wherein initiating the one or more first authorized modifications includes retrieving data files stored external to the area of coverage for the first localized pool of the group of nodes.