Technologies for dynamically protecting memory of mobile compute device with geofencing

A method for dynamically protecting main memory of a mobile compute device, the method comprising:

• encrypting, by the mobile compute device, the main memory;
• determining, by the mobile compute device, a present location of the mobile compute device;
• determining, by the mobile compute device, a present location security zone of the mobile compute device based on the present location of the mobile compute device and a geofence policy, wherein the geofence policy maps locations to location security zones;
• determining, by the mobile compute device, whether the present location security zone has changed relative to a most-previous location security zone of the mobile compute device;
• and
• decrypting, by a security engine of the mobile compute device, the main memory of the mobile compute device in a page-by-page progression in response to a determination the present location security zone has changed and is a safe zone;
• wherein decrypting the main memory of the mobile compute device in a page-by-page progression comprises:
• fetching, by the security engine, a next page of main memory to be decrypted;
• storing, by the security engine, an address of the next page in a status register of the security engine;
• and
• decrypting, by the security engine, the next page of the main memory of the mobile compute device.

One or more non-transitory, machine-readable storage media comprising a plurality of instructions stored thereon that, when executed, causes a mobile compute device to:

• encrypt the main memory;
• determine a present location of the mobile compute device;
• determine a present location security zone of the mobile compute device based on the present location of the mobile compute device and a geofence policy, wherein the geofence policy maps locations to location security zones;
• determine whether the present location security zone has changed relative to a most-previous location security zone of the mobile compute device;
• and
• decrypt, by a security engine of the mobile compute device, the main memory of the mobile compute device in a page-by-page progression in response to a determination the present location security zone has changed and is a safe zone;
• wherein to decrypt the main memory of the mobile compute device in a page-by-page progression comprises to:
• fetch, by the security engine, a next page of main memory to be decrypted;
• store, by the security engine, an address of the next page in a status register of the security engine;
• and
• decrypt, by the security engine, the next page of the main memory of the mobile compute device.