Patent ID: 8479017

Claim:
A method of expanding locality in a security co-processor module of a computing system comprising: setting a security mode of the security co-processor module to an enhanced mode in response to a determination that the computing system provides a capability to obtain the current geographic location; receiving a request by the security co-processor module to execute an operation; determining the security mode for the security co-processor module; when the security mode is set to a normal mode, checking a machine mode of the computing system and executing the requested operation when the machine mode is acceptable; when the security mode is set to an enhanced mode, getting a security policy, getting a current geographic location of the computing system and a current trusted time, determining if the requested operation is acceptable according to geographic location and trusted time attribute entries specified in the security policy, the current geographic location, and the current trusted time, and checking the machine mode of the computing system; and when the requested operation and machine mode are both acceptable, executing the requested operation.