Trust for Location-based Authorisation

TL;DR

This paper introduces a location-based authorization framework utilizing trusted computing to enforce policies based on precise and reliable mobile device location data.

Contribution

It presents a novel approach combining trusted computing with two-tiered location determination for secure, autonomous policy enforcement on mobile devices.

Findings

Enhanced security through trusted computing for location-based policies

Two-tiered location measurement improves accuracy and reliability

Autonomous enforcement reduces reliance on external authorities

Abstract

We propose a concept for authorisation using the location of a mobile device and the enforcement of location-based policies. Mobile devices enhanced by Trusted Computing capabilities operate an autonomous and secure location trigger and policy enforcement entity. Location determination is two-tiered, integrating cell-based triggering at handover with precision location measurement by the device.