# US 2024/0205232 A1 · Remote access control using validation of physical location of remote user > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2024/0205232 A1 - Document ID: US20240205232A1 - Status: Published application - Kind: A1 - Application number: 18/081,758 - Filed: 2022-12-15 - Published: 2024-06-20 - Earliest claimed: 2022-12-15 - Assignees: Dell Products L.P. - Applicants: Dell Products L.P. - Inventors: Yevgeni Gehtman; Tomer Shachar; Maxim Balin - Web page: https://patentgrep.com/patent/US20240205232A1 ## CPC - H04L 63/105: {Multiple levels of security} - H04L 41/50: Network service management, e.g. ensuring proper service fulfilment according to agreements - H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals} - H04L 67/52: specially adapted for the location of the user terminal - H04L 67/61: taking into account QoS or priority requirements - H04W 12/63: Location-dependent; Proximity-dependent - H04L 2463/082: applying multi-factor authentication - H04W 12/64: using geofenced areas - H04W 12/73: Access point logical identity - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Techniques are provided for remote access control using validation of a physical location of a remote user. One method comprises obtaining a request from a user associated with a first entity to remotely access a network associated with a second entity; and, in response to the request, performing the following steps: determining if a location of the user is at least partially within at least one designated location associated with the first entity; and initiating a granting of the request to remotely access the network in response to a result of the determining. An evaluation of whether the user is connected to a network of the first entity may also be performed in response to the request from the user to remotely access the network. The request to remotely access the network may be in connection with the user remotely maintaining a product of the second entity. ## Claims ### Claim 1 A method, comprising: obtaining a request from a user associated with a first entity to remotely access a network associated with a second entity; and in response to the request from the user to remotely access the network, performing the following steps: determining if a location of the user is at least partially within at least one designated location associated with the first entity; and initiating a granting of the request to remotely access the network in response to a result of the determining; wherein the method is performed by at least one processing device comprising a processor coupled to a memory. ### Claim 2 (depends on 1) The method of claim 1, further comprising, in response to the request from the user to remotely access the network, performing a multi-factor authentication of the user. ### Claim 3 (depends on 1) The method of claim 1, further comprising, in response to the request from the user to remotely access the network, evaluating whether the user is connected to a network of the first entity. ### Claim 4 (depends on 1) The method of claim 1, wherein the request to remotely access the network is in connection with the user remotely maintaining one or more products of the second entity. ### Claim 5 (depends on 1) The method of claim 1, wherein the request to remotely access the network is in performed in connection with a service level agreement between the first entity and the second entity for the first entity to remotely maintain one or more products of the second entity. ### Claim 6 (depends on 1) The method of claim 1, wherein the determining if the location of the user is at least partially within the at least one designated location associated with the first entity comprises evaluating one or more of: (i) a location of one or more signals of a device of the user; (ii) one or more facility access records of the first entity to determine if the user entered the at least one designated location; and (iii) a biometric signal obtained from the user at the at least one designated location. ### Claim 7 (depends on 6) The method of claim 6, wherein the one or more facility access records of the first entity are evaluated to determine if, at a time of the request from the user to remotely access the network, a most recent location accessed by the user using an employee credential was the at least one designated location. ### Claim 8 An apparatus comprising: at least one processing given device comprising a processor coupled to a memory; the at least one processing given device being configured to implement the following steps: obtaining a request from a user associated with a first entity to remotely access a network associated with a second entity; and in response to the request from the user to remotely access the network, performing the following steps: determining if a location of the user is at least partially within at least one designated location associated with the first entity; and initiating a granting of the request to remotely access the network in response to a result of the determining. ### Claim 9 (depends on 8) The apparatus of claim 8, further comprising, in response to the request from the user to remotely access the network, performing a multi-factor authentication of the user. ### Claim 10 (depends on 8) The apparatus of claim 8, further comprising, in response to the request from the user to remotely access the network, evaluating whether the user is connected to a network of the first entity. ### Claim 11 (depends on 8) The apparatus of claim 8, wherein the request to remotely access the network is in connection with the user remotely maintaining one or more products of the second entity. ### Claim 12 (depends on 8) The apparatus of claim 8, wherein the request to remotely access the network is in performed in connection with a service level agreement between the first entity and the second entity for the first entity to remotely maintain one or more products of the second entity. ### Claim 13 (depends on 8) The apparatus of claim 8, wherein the determining if the location of the user is at least partially within the at least one designated location associated with the first entity comprises evaluating one or more of: (i) a location of one or more signals of a device of the user; (ii) one or more facility access records of the first entity to determine if the user entered the at least one designated location; and (iii) a biometric signal obtained from the user at the at least one designated location. ### Claim 14 (depends on 13) The apparatus of claim 13, wherein the one or more facility access records of the first entity are evaluated to determine if, at a time of the request from the user to remotely access the network, a most recent location accessed by the user using an employee credential was the at least one designated location. ### Claim 15 A non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing given device causes the at least one processing given device to perform the following steps: obtaining a request from a user associated with a first entity to remotely access a network associated with a second entity; and in response to the request from the user to remotely access the network, performing the following steps: determining if a location of the user is at least partially within at least one designated location associated with the first entity; and initiating a granting of the request to remotely access the network in response to a result of the determining. ### Claim 16 (depends on 15) The non-transitory processor-readable storage medium of claim 15, further comprising, in response to the request from the user to remotely access the network, evaluating whether the user is connected to a network of the first entity. ### Claim 17 (depends on 15) The non-transitory processor-readable storage medium of claim 15, wherein the request to remotely access the network is in connection with the user remotely maintaining one or more products of the second entity. ### Claim 18 (depends on 15) The non-transitory processor-readable storage medium of claim 15, wherein the request to remotely access the network is in performed in connection with a service level agreement between the first entity and the second entity for the first entity to remotely maintain one or more products of the second entity. ### Claim 19 (depends on 15) The non-transitory processor-readable storage medium of claim 15, wherein the determining if the location of the user is at least partially within the at least one designated location associated with the first entity comprises evaluating one or more of: (i) a location of one or more signals of a device of the user; (ii) one or more facility access records of the first entity to determine if the user entered the at least one designated location; and (iii) a biometric signal obtained from the user at the at least one designated location. ### Claim 20 (depends on 19) The non-transitory processor-readable storage medium of claim 19, wherein the one or more facility access records of the first entity are evaluated to determine if, at a time of the request from the user to remotely access the network, a most recent location accessed by the user using an employee credential was the at least one designated location.