# US 8,572,696 B1 · Contextual data aided security protection > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,572,696 B1 - Document ID: US8572696B1 - Status: Granted - Kind: B1 - Application number: 13/304,169 - Filed: 2011-11-23 - Granted: 2013-10-29 - Earliest claimed: 2011-11-23 - Assignees: Google Inc. - Applicants: Michael Wiacek - Inventors: Michael Wiacek - Web page: https://patentgrep.com/patent/US8572696B1 ## CPC - H04W 4/185: {by embedding added-value information into content, e.g. geo-tagging} - H04L 51/222: using geographical location information, e.g. messages transmitted or received in proximity of a certain spot or area - H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals} - H04W 4/02: Services making use of location information - H04W 4/029: Location-based management or tracking services - H04L 51/23: Reliability checks, e.g. acknowledgments or fault reporting - H04L 63/108: {when the policy decisions are valid for a limited amount of time} - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for providing contextual data aided security protection. In one aspect, a method includes automatically parsing an electronic message associated with a user that includes location information, and extracting the location information from the electronic message. The location information can be added to a database (e.g., white list) associated with the user. The location information in the database can be used to authenticate the user's request for access to electronic mail. ## Claims ### Claim 1 A method performed by a data processing apparatus, the method comprising: automatically and independent of receiving a search request, parsing an electronic message associated with a user account; determining a future change in geographic location of an authorized user of the user account based on geographic location information in the electronic message; adding, to a database of authorized access locations for the user account, a new location based on the future change in geographic location; receiving a request for access to a network-based service associated with the user account; comparing an origin of the request to the database of authorized access locations; identifying a match between the origin of the request and the new location; and granting access to the network-based service based on identifying the match. ### Claim 2 (depends on 1) The method of claim 1, comprising: receiving access credentials; and determining whether to grant access based on the access credentials and the geographic location information in the database of authorized access locations. ### Claim 3 (depends on 1) The method of claim 1, wherein the electronic message is a travel confirmation message. ### Claim 4 (depends on 1) The method of claim 1, wherein the electronic message includes a signal to update the database of authorized access locations with the geographic location information contained within the electronic message. ### Claim 5 (depends on 4) The method of claim 4, wherein the signal to update the database of authorized access locations with the geographic location information contained within the electronic message is based on authorization provided by the user to include the signal in the electronic message. ### Claim 6 (depends on 1) The method of claim 1, wherein the geographic location information includes an internet protocol address associated with a geographic location. ### Claim 7 (depends on 1) The method of claim 1 wherein the request for access to the network-based service is a request to access electronic mail from a geographic location other than a home location of the authorized user, and the request to access electronic mail includes geographic location information indicating the origin. ### Claim 8 (depends on 7) The method of claim 7 wherein the database of authorized access locations includes information about locations visited by other users, and the comparing includes prioritizing, in the database of authorized access locations, the locations visited by other users. ### Claim 9 (depends on 1) The method of claim 1 further comprising prompting the user to verify the future change. ### Claim 10 (depends on 9) The method of claim 9 further comprising identifying a source address of the geographic location information in the electronic message; and adding the source address to a list of trusted sources. ### Claim 11 (depends on 1) The method of claim 1 further comprising verifying the future change in geographic location based on a comparison with a list of trusted addresses. ### Claim 12 (depends on 1) The method of claim 1 further comprising identifying a period of time during which the authorized user will be at the new location, and updating the database of authorized access locations based on the identified period of time. ### Claim 13 (depends on 12) The method of claim 12, comprising removing the new location from the database of authorized access locations after an expiration of the identified period of time. ### Claim 14 A non-transient computer storage medium encoded with a computer program, the computer program comprising instructions that when executed by data processing apparatus cause the data processing apparatus to perform operations comprising: automatically and independent of receiving a search request, parsing an electronic message associated with a user account; determining a future change in geographic location of an authorized user of the user account based on geographic location information in the electronic message; adding, to a database of authorized access locations for the user account, a new location based on the future change in geographic location; receiving a request for access to a network-based service associated with the user account; comparing an origin of the request to the database of authorized access locations; identifying a match between the origin of the request and the new location; and granting access to the network-based service based on identifying the match. ### Claim 15 A system comprising: a user device; and one or more computers configured to interact with the user device and to: automatically and independent of receiving a search request, parse an electronic message associated with a user account; determine a future change in geographic location of an authorized user of the user account based on geographic location information in the electronic message; add, to a database of authorized access locations for the user account, a new location based on the future change in geographic location; receive a request for access to a network-based service associated with the user account; compare an origin of the request to the database of authorized access locations; identify a match between the origin of the request and the new location; and grant access to the network-based service based on identifying the match. ### Claim 16 (depends on 15) The system of claim 15, wherein the one or more computers comprise a server configured to interact with the user device through a data communication network, and the user device is configured to interact with the server as a client. ### Claim 17 (depends on 16) The system of claim 16, wherein the user device comprises a personal computer running a web browser, or a mobile telephone running a WAP browser or an e-mail client. ### Claim 18 (depends on 15) The system of claim 15, wherein the one or more computers comprises one computer, the user device is a user interface of the one computer.