Method for controlling file access on computer systems

1. A method comprising:

providing a location table having a plurality of location fields;

providing a virtual machine manager (VMM) in a computer system, wherein said VMM interfaces between an operating system of said computer system and hardware of said computer system;

in response to a write request,

determining whether or not a location field of said location table is valid by said VMM;

writing write request information to a storage device by said VMM if said location field is not valid; and

encrypting said write request information with a public key associated with said location field by said VMM before writing said write request information to said storage device if said location field is valid; and

in response to a read request,

determining whether or not said location field is valid by said VMM;

sending read request information from said storage device by said VMM if said location field is not valid; and

decrypting information with a public key associated with said location field by said VMM before sending said read request information device if said location field is valid.

2. The method of claim 1 , wherein said method further includes

storing in one of said location files a location in which said computer system is authorized to be placed.

3. The method of claim 2 , wherein said location field is valid when the current location of said computer system matches one of said location fields.

4. The method of claim 2 , wherein said method further includes associating one of said location fields to one public/private key.

5. The method of claim 2 , wherein said method further includes associating a plurality of said location fields to one public/private key.

6. A non-transitory computer usable medium having a computer program product for controlling file access on computer systems, said computer usable medium comprising:

program code for providing a location table having a plurality of location fields;

program code for providing a virtual machine manager (VMM) in a computer system, wherein said VMM interfaces between an operating system of said computer system and hardware of said computer system;

in response to a write request,

program code for determining whether or not a location field of said location table is valid by said VMM;

program code for writing write request information to a storage device by said VMM if said location field is not valid; and

program code for encrypting said write request information with a public key associated with said location field by said VMM before writing said write request information to said storage device if said location field is valid; and

in response to a read request,

program code for determining whether or not said location field is valid by said VMM;

program code for sending read request information from said storage device by said VMM if said location field is not valid; and

program code for decrypting information with a public key associated with said location field by said VMM before sending said read request information device if said location field is valid.

7. The non-transitory computer usable medium of claim 6 , wherein said computer usable medium further includes

program code for storing in one of said location files a location in which said computer system is authorized to be placed.

8. The non-transitory computer usable medium of claim 7 , wherein said location field is valid when the current location of said computer system matches one of said location fields.

9. The non-transitory computer usable medium of claim 7 , wherein said computer usable medium further includes program code for associating one of said location fields to one public/private key.

10. The non-transitory computer usable medium of claim 7 , wherein said computer usable medium further includes program code for associating a plurality of said location fields to one public/private key.

11. A computer system comprising:

a processor;

a location table having a plurality of location fields;

a first virtual machine having a first application and a first operating system;

a second virtual machine having a second application and a second operating system;

a virtual machine manager (VMM) for interfacing between said virtual machines and said processor, wherein said VMM

in response to a write request,

determines whether or not a location field of said location table is valid;

sends write request information to a storage device if said location field is not valid; and

encrypts said write request information with a public key associated with said location field before writing said write request information to said storage device if said location field is valid; and

in response to a read request,

determines whether or not a location field is valid;

sends read request information from said storage device if said location field is not valid; and

decrypts information with a public key associated with said location field before sending said read request information device if said location field is valid.

12. The computer system of claim 11 , wherein said location fields are configured to store locations in which said computer system are authorized to be placed.

13. The computer system of claim 12 , wherein said location field is valid when the current location of said computer system matches one of said location fields.

14. The computer system of claim 12 , wherein said computer system further includes means for associating one of said location fields to one public/private key.

15. The computer system of claim 12 , wherein said computer system further includes means for associating a plurality of said location fields to one public/private key.