20. The device of claim 1 , wherein said compact representation of geographic security assertion is a table structure.
1. A device for filtering geographic country of origin information transmitting on a network comprising: a first network object capable of receiving information from or transmitting information to a second network object; a geographic filtering engine wherein all communication between said first network object and said second network object must pass through said geographic filter engine, comprising: a configuration post-processing engine wherein at least one algorithm is applied to at least one geographic country of origin association between a network protocol attribute and geographic country of origin location; a rules abstraction module wherein: a memory structure stores a set of persistent geographic country of origin associations; and at least one compact representation of a security assertion is derived from said set of persistent geographic country of origin associations; an associative module performing at least one data process operating to associate a geographic country of origin location pertaining to each network protocol attribute; a dispatch module wherein at least one network protocol attribute of said second network object is extracted and compared to said compact representation of a security assertion and the result is provided to the geographic filter control module; and a network filtering engine wherein a device action is triggered based on the results provided by said dispatch module, wherein the device action is selected from: configured to allow the receipt or transmission of information between said first network object and said second network object; configured to block the receipt or transmission of information between said first network object and said second network object; configured to allow the receipt of information from said second network object to a third network object determined by said geographic filter engine; and configured to allow the transmission of information from said third network object to said second network object determined by said geographic filter engine.