Mobile Client’s Access Mechanism for Location based Service using Cell-ID

Today’s location-sensitive service relies on user’s mobile device to determine its location and send the location to the application. A location-based service is a service that determines the location of a mobile device and uses this to provide functionalities and information specific to that location. With the growth of the importance and of the audience of location-based services, questions of security and privacy are brought forward. As services are being built on top of this technology, the number of parties increases significantly, and the possibility of a malicious insider (or a misbehaving insider) emerges. The extent to which the parties care to trust each other has reduced, and trust amongst the various parties can no longer be assumed by a location-based service. An attacker may try to steal a service (e.g., claiming to be a client to get free internet access), service providers may gain of private information. There should be a proper authentication mechanism between client and server to access the services. By considering some important factors like Cost, Energy Efficiency, we have proposed an Access Mechanism in which mobile Phone Users will send request for some services from server. Firstly Location Verification is done; server verifies the User’s Mobile Phone’s location against authorized location. After User/Device Authentication is done, server checks User/Device Identification. If both conditions are true, server will grant access to the users for services and resources.