# US 2021/0334382 A1 · Computing apparatus configurable for secured boot > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0334382 A1 - Document ID: US20210334382A1 - Status: Published application - Kind: A1 - Application number: 17/237,698 - Filed: 2021-04-22 - Published: 2021-10-28 - Earliest claimed: 2020-04-22 - Assignees: Lenovo Enterprise Solutions (Singapore) Pte. Ltd. - Applicants: Lenovo Enterprise Solutions (Singapore) Pte. Ltd. - Inventors: CheKim Chhuor; Caihong Zhang - Web page: https://patentgrep.com/patent/US20210334382A1 ## CPC - G06F 21/575: {Secure boot} - G01S 19/14: specially adapted for specific applications - G01S 19/48: by combining or switching between position solutions derived from the satellite radio beacon positioning system and position solutions derived from a further system - G06F 21/44: Program or device authentication - G06F 21/572: {Secure firmware programming, e.g. of basic input output system [BIOS]} - G06F 21/71: to assure secure computing or processing of information - H04W 4/029: Location-based management or tracking services - G06F 2221/2111: Location-sensitive, e.g. geographical location, GPS - G06F 2221/2129: Authenticate client device independently of the user - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G01S: RADIO DIRECTION-FINDING; RADIO NAVIGATION; DETERMINING DISTANCE OR VELOCITY BY USE OF RADIO WAVES; LOCATING OR PRESENCE-DETECTING BY USE OF THE REFLECTION OR RERADIATION OF RADIO WAVES; ANALOGOUS ARRANGEMENTS USING OTHER WAVES - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Methods, apparatus, and computer program products for configurable secure boots are disclosed. One method includes determining, by a processor of a computing apparatus, whether a geographical location of the computing apparatus corresponds to a predetermined location, performing a boot process for booting up the computing apparatus in response to the geographical location of the computing apparatus corresponding to the predetermined location, and disabling the boot process from booting up the computing apparatus in response to the geographical location of the computing apparatus failing to correspond to the predetermined location. Computing apparatus and computer program products for performing the method are also disclosed. ## Claims ### Claim 1 A computing apparatus, comprising: a controller; and a memory configured to store code executable by the controller to: determine whether a geographical location of the computing apparatus corresponds to a predetermined location, perform a boot process for booting up the computing apparatus in response to the geographical location of the computing apparatus corresponding to the predetermined location, and disable the boot process from booting up the computing apparatus in response to the geographical location of the computing apparatus failing to correspond to the predetermined location. ### Claim 2 (depends on 1) The computing apparatus of claim 1, wherein the geographical location of the computing apparatus is determined from satellite-based location data. ### Claim 3 (depends on 2) The computing apparatus of claim 2, further comprising: a satellite receiver coupled to the controller, wherein the satellite receiver is configured to receive satellite-based location data. ### Claim 4 (depends on 1) The computing apparatus of claim 1, wherein the controller is configured to retrieve data corresponding to the predetermined location from the memory. ### Claim 5 (depends on 4) The computing apparatus of claim 4, wherein the memory comprises firmware embedding the data corresponding to the predetermined location. ### Claim 6 (depends on 4) The computing apparatus of claim 4, wherein: the memory forma a portion of a trusted platform module (TPM) chip disposed in the computing apparatus; and the TPM chip is configured to control retrieval of the data corresponding to the predetermined location from the memory. ### Claim 7 (depends on 1) The computing apparatus of claim 1, wherein the geographical location of the computing apparatus is a real-time location of the computing apparatus at a time of determining if the geographical location of the computing apparatus corresponds to the predetermined location. ### Claim 8 (depends on 1) The computing apparatus of claim 1, further comprising: an interface coupled to the controller, wherein the controller is further configured to receive the geographical location of the computing apparatus via the interface during the boot process of the computing apparatus. ### Claim 9 (depends on 8) The computing apparatus of claim 8, wherein the geographical location of the computing apparatus is received prior to completing the boot process. ### Claim 10 (depends on 8) The computing apparatus of claim 8, wherein the boot process comprises a unified extensible firmware interface (UEFI) boot process. ### Claim 11 (depends on 8) The computing apparatus of claim 8, wherein the controller is configured to disable the computing apparatus by terminating the boot process. ### Claim 12 (depends on 11) The computing apparatus of claim 11, wherein the controller is configured to disable the computing apparatus by denying permission to continue with the boot process. ### Claim 13 (depends on 11) The computing apparatus of claim 11, wherein the controller is configured to disable the computing apparatus by preventing the computing apparatus from powering on. ### Claim 14 (depends on 13) The computing apparatus of claim 13, wherein the controller comprises a baseboard management controller (BMC). ### Claim 15 (depends on 1) The computing apparatus of claim 1, wherein the data corresponding to the predetermined location is derived from satellite-based location data. ### Claim 16 (depends on 15) The computing apparatus of claim 15, wherein the data corresponding to the predetermined location is a zone derived from satellite-based location data. ### Claim 17 (depends on 16) The computing apparatus of claim 16, wherein the controller is further configured to determine whether the geographical location of the computing apparatus corresponds to the predetermined location by determining whether the geographical location of the computing apparatus is within the zone. ### Claim 18 (depends on 1) The computing apparatus of claim 1, wherein the controller is configured to: receive more than one predetermined location; disable the computing apparatus if the data corresponding to the geographical location of the computing apparatus does not correspond to the data corresponding to at least one of the more than one predetermined location; and disable the computing apparatus if the geographical location of the computing apparatus does not correspond to a last received predetermined location. ### Claim 19 A method, comprising: determining, by a processor of a computing apparatus, whether a geographical location of the computing apparatus corresponds to a predetermined location; performing a boot process for booting up the computing apparatus in response to the geographical location of the computing apparatus corresponding to the predetermined location; and disabling the boot process from booting up the computing apparatus in response to the geographical location of the computing apparatus failing to correspond to the predetermined location. ### Claim 20 A computer program product comprising a computer-readable storage medium configured to store code executable by a processor, the executable code comprising code to perform: determining whether a geographical location of a computing apparatus corresponds to a predetermined location; performing a boot process for booting up the computing apparatus in response to the geographical location of the computing apparatus corresponding to the predetermined location; and disabling the boot process from booting up the computing apparatus in response to the geographical location of the computing apparatus failing to correspond to the predetermined location.