Providing geographic protection to a system

摘要

In one embodiment, a method includes determining a location of a system responsive to location information received from at least one of a location sensor and a wireless device of the system, associating the location with a key present in the system to generate an authenticated location of the system, and determining whether the authenticated location is within a geofence boundary indicated in a location portion of a launch control policy (LCP) that provides a geographic-specific policy. Other embodiments are described and claimed.

主权项

1. A system comprising:
a hardware processor to execute instructions; a manageability engine coupled to the hardware processor to authenticate a location of the system, and including a first non-transitory storage to store the authenticated location of the system; at least one hardware location sensor to determine the location of the system and to provide the location to the manageability engine; and a trusted platform module (TPM) including a second non-transitory storage to store a geographic key manifest including a plurality of launch control policies (LCPs) each associating a policy with a software agent and a location to provide a geographic-specific policy and signed by a geographic key, the plurality of LCPs including a hash of the LCP and a key of a software agent, wherein the processor is configured to determine whether the authenticated location of the system is within a geofence boundary of the LCP associated with the software agent, and if so to enable the software agent.