Internet geolocation
In computing, Internet geolocation is software capable of deducing the geographic position of a device connected to the Internet.[1] For example, the device's IP address can be used to determine the country, city, or ZIP code, determining its geographical location.[2] Other methods include examination of Wi-Fi hotspots,[3] a MAC address, image metadata, or credit card information.
Data sources
An IP address is assigned to each device (e.g. computer, printer) participating in a computer network that uses the Internet Protocol for communication.[4] The protocol specifies that each IP packet must have a header which contains, among other things, the IP address of the sender.
There are a number of free and paid subscription geolocation databases, ranging from country level to state or city—including ZIP/post code level—each with varying claims of accuracy (generally higher at the country level). These databases typically contain IP address data which may be used in firewalls, ad servers, routing, mail systems, web sites, and other automated systems where a geolocation may be useful. An alternative to hosting and querying a database is to obtain the country code for a given IP address through a DNSBL-style lookup from a remote server.[5]
Some commercial databases have augmented geolocation software with demographic data to enable demographic-type targeting using IP address data.[2]
The primary source for IP address data is the regional Internet registries which allocate and distribute IP addresses amongst organizations located in their respective service regions:
- African Network Information Centre (AfriNIC)
- American Registry for Internet Numbers (ARIN)
- Asia-Pacific Network Information Centre (APNIC)
- Latin American and Caribbean Internet Address Registry (LACNIC)
- RIPE Network Coordination Centre (RIPE NCC)
The registries allow assignees to specify country and geographical coordinates of each assigned block.[6] Starting from 2021 RFC 9092 allows assignees to specify location of any IP subnetwork they own.[7]
Secondary sources include:
- Data mining or user-submitted geographic location data:
- Website-submitted, e.g. a weather website asking visitors for a city name to find their local forecast or pairing a user's IP address with the address information in their account profile.
- Wi-Fi positioning system[3] through the examination of neighborhood Wi-Fi BSSID. E.g. Mozilla Location Service.
- Examination of neighborhood Bluetooth devices.
- Pairing a user's IP address with the GPS location of a device that's using such an IP address.
- Data contributed by Internet service providers.
- Guesstimates from adjacent Class C range[8] and/or gleaned from network hops.
- Network routing information collected to the end point of the IP address.
- Analysis of linguistic data from the device, using pretrained models that show that some term is frequently mentioned in a certain location (e.g. "the T" vs "the El" vs. "the subway").[9]
Accuracy is improved by:
- Data scrubbing to filter out or identify anomalies.
- Statistical analysis of user submitted data.
- Utilizing third-party tests conducted by reputable organizations.
Errors
If geolocation software maps IP addresses associated with an entire county or territory to a particular location, such as the geographic center of the territory, this can cause considerable problems for the people who happen to live there, as law enforcement authorities and others may mistakenly assume any crimes or other misconduct associated with the IP address to originate from that particular location.
For example, a farmstead northeast of Potwin, Kansas became the default site of 600 million IP addresses when the Massachusetts-based digital mapping company MaxMind changed the putative geographic center of the contiguous United States from 39.8333333,-98.585522 to 38.0000,-97.0000.[10] Since 2012, a family in Pretoria, South Africa, has been regularly visited by police or angry private citizens who believed their stolen phones were to be found in the family's backyard. This was also the result of geolocation by MaxMind. The company used the National Geospatial-Intelligence Agency's coordinates for Pretoria, which pointed to the family's house, to represent IP addresses associated with Pretoria.[11]
Privacy
A distinction can be made between co-operative and oppositional geolocation. In some cases, it is in the interest of users to be accurately located, for example, so that they can be offered information relevant to their location. In other cases, users prefer not to disclose their location for privacy or other reasons.[12]
Technical measures for ensuring anonymity, such as proxy servers, can be used to circumvent restrictions imposed by geolocation software. Some sites detect the use of proxies and anonymizers, and may either block service or provide non-localized content in response.[13]
Applications
Geolocation technology has been under development only since 1999, and the first patents were granted in 2004.[14] The technology is already widely used in multiple industries,[15] including e-retail, banking, media, telecommunications, education, travel,[16] hospitality, entertainment, health care, online gaming and law enforcement, for preventing online fraud, complying with regulations, managing digital rights[17] and serving targeted marketing content and pricing.[18] Additionally, the U.S. Federal Communications Commission (FCC) has proposed that geolocation software might be leveraged to support 9-1-1 location determination.[19]
An IP address or the related unique URL may also be investigated with basic functions, typing from the keyboard two instructions: ping and traceroute.[20] In Unix-like systems, they are available as a command line tool. In the same way, Microsoft Windows has the prompt of DOS working with those instructions.
Criminal investigations
Banks, software vendors and other online enterprises in the US and elsewhere became subject to strict "know your customer" laws imposed by the USA PATRIOT Act, the Bank Secrecy Act, the US Treasury Department's Office of Foreign Assets Control and other regulatory entities in the US and Europe from the early twenty-first century. These laws are intended to prevent money laundering, trafficking with terrorist organizations, and trading with banned nations. When it is possible to identify the true location of online visitors, geolocation can protect banks from participating in the transfer of funds for illicit purposes. More and more prosecuting bodies are bringing cases involving cyber-crimes such as cyber-stalking and identity theft. Prosecutors often have the capability of determining the IP address data necessary to link a computer to a crime.[21]
Fraud detection
Online retailers and payment processors use geolocation to detect possible credit card fraud by comparing the user's location to the billing address on the account or the shipping address provided. A mismatch – an order placed from the US on an account number from Tokyo, for example – is a strong indicator of potential fraud. IP address geolocation can be also used in fraud detection to match billing address postal code or area code.[22] Banks can prevent "phishing" attacks, money laundering and other security breaches by determining the user's location as part of the authentication process. Whois databases can also help verify IP addresses and registrants.[23]
Government, law enforcement and corporate security teams use geolocation as an investigatory tool, tracking the Internet routes of online attackers to find the perpetrators and prevent future attacks from the same location.
Geomarketing
Since geolocation software can get the information of user location, companies using geomarketing may provide web content or products that are famous or useful in that specific location. Advertisements and content on a website that uses geolocation software in the form of an API (also referred to as "IP API" or "IP address geolocation API") may be tailored to provide the information that a certain user wants.[24]
Regional licensing
Internet movie vendors, online broadcasters who serve live streaming video of sporting events, or certain TV and music video sites that are licensed to broadcast their videos of episodes/music videos are permitted to serve viewers only in their licensed territories. By geolocating viewers, they can be certain of obeying licensing regulations.[25] Online gambling websites must also know where their customers violate gambling laws, or risk doing so.
Jim Ramo, chief executive of movie distributor Movielink, said studios were aware of the shortcomings going in and have grown more confident now that the system has been shown to work.[26]
Gaming
A location-based game is a type of pervasive game for smartphones or other mobile devices in which the gameplay evolves and progresses via a player's real-world location which is typically obtained by GPS functionality from the device.[27]
See also
- Geo-blocking
- Geotargeting
- Satellite navigation software
- Location-based service
- MAC address anonymization
- Locator software
- Personalization
- W3C Geolocation API
- Kinomap (geolocation video software)
- Mobile phone tracking
- TV White Space Database (geolocation database)
References
- Muir, James A.; Oorschot, Paul C. Van (2009-12-14). "Internet geolocation: Evasion and counterevasion". ACM Computing Surveys. 42 (1): 4:1–4:23. doi:10.1145/1592451.1592455. ISSN 0360-0300. S2CID 16289271.
- Holdener, Anthony T. (2011). HTML5 Geolocation. O'Reilly Media. p. 11. ISBN 9781449304720.
- Lindner, Thomas; Fritsch, Lothar; Plank, Kilian; Rannenberg, Kai (2004). Lamersdorf, Winfried; Tschammer, Volker; Amarger, Stéphane (eds.). "Exploitation of Public and Private WiFi Coverage for New Business Models". Building the E-Service Society. IFIP International Federation for Information Processing. Springer US. 146: 131–148. doi:10.1007/1-4020-8155-3_8. ISBN 978-1-4020-8155-2.
- RFC 760, DOD Standard Internet Protocol (January 1980)
- "IP geolocation (The NetOp Organization)". 2009-01-28. Archived from the original on 2009-01-25. Retrieved 2009-02-04.
- "Geolocation". APNIC. Retrieved 5 September 2022.
- "Finding and Using Geofeed Data". IETF. 27 July 2021. Retrieved 4 September 2022.
- An example is the guessed city provided by hostip.info.
- Berggren, Max; Karlgren, Jussi; Östling, Robert; Parkvall, Mikael (2015). "Inferring the location of authors from words in their texts". arXiv:1612.06671 [cs.CL].
- Hill, Kashmir (2016-04-10). "How an internet mapping glitch turned a random Kansas farm into a digital hell". Fusion. Retrieved 2016-04-10.
- Hill, Kashmir (10 January 2019). "How Cartographers for the U.S. Military Inadvertently Created a House of Horrors in South Africa". Gizmodo. Retrieved 10 January 2019.
- Plaintiff: Coalition for Sexual Freedom and the National Coalition for Sexual Freedom Foundation, Defendant: US Attorney General John Ashcroft and the United States of America (2003-11-10). "Nitke vs. Ashcroft - Expert report of Seth Finkelstein". Retrieved 2004-11-15.
- RealNetworks detects proxies and anonymizers; Google serves non-localized content if location is in doubt. "Geolocation: Don't Fence Web In". Wired. 2004-07-12. Archived from the original on 2006-05-14.
- "Digital Envoy wins Geotargeting Patent". 2004-06-29. Archived from the original on June 17, 2011. Retrieved 2010-04-19.
- ClientSideNews, Nov/Dec 2010 issue, Page 6 “You Can Really Do That? – The Power of Geolocation Technology”
- Marketing Magazine, February 10, 2011 “Thetrainline brings Digital Element on board for localised ad task”
- Music Streaming site we7 Cranks up the Volume for Digital Rights Management and Ad Targeting Archived 2010-12-06 at the Wayback Machine
- King, Kevin F. (2009-10-04). "Geolocation and Federalism on the Internet: Cutting Internet Gambling's Gordian Knot". SSRN 1433634.
{{cite web}}
: Missing or empty|url=
(help) - "FCC Strengthens Enhanced 911 Location Accuracy Requirements for Wireless Services" (PDF). Archived from the original (PDF) on August 11, 2011. Retrieved April 27, 2017.
- "File traceroute-geolocation". Retrieved March 24, 2017.
- Los Angeles Deputy District Attorney, Wendy Segall Hides Evidence.
- Vacca, John R. (2003). Identity Theft. Prentice Hall Professional. p. 400. ISBN 9780130082756.
- Barba, Robert (2017-11-18). "Sharing your location with your bank seems creepy, but it's useful". The Morning Call. Retrieved 2018-01-10.
- Internet Retailer “Personalized web site content gives retailers an edge’, June 25, 2010
- "CinemaNow appeases studios by locating Web surfers". CNet. 2001-02-26. Retrieved 2010-04-22.
- "Geolocation: Don't Fence Web In". Wired News. Associated Press. 2004-07-12. Archived from the original on 2006-09-09. Retrieved 2006-09-28.
- Trimble, Marketa. "The future of cybertravel: legal implications of the evasion of geolocation". Fordham Intell.
External links
- Computers : Software : Internet : Servers : Personalization at Curlie
- Towards Street-Level Client-Independent IP Geolocation: Recent research paper explaining how to find a location from an IP address within 1 km
- How accurate can IP Geolocation get?