Off campus wireless mobile browser and web filtering system

A method for operation of a mobile wireless device configured with a mobile wireless safe browser:

• receiving a network destination comprising one of a web host name, fully qualified domain name, a link, a uniform resource identifier, or an Internet Protocol (IP) address;
• transmitting over the air a query to a reputation service, the query containing user identity information and the network destination;
• receiving from the reputation service an enablement or disablement message;
• at least one of displaying a message to the user that access is denied and operating a conventional http protocol request.

A system for enabling or denying access to web resources at a mobile category controlled client comprising:

• at least one mobile category controlled client, comprising a baseband processor, transceiver circuits, memory, network interfaces, and an application processor, the application processor configured to operate a browser;
• at least one client/user profile-policy server, the profile-policy for each authenticated user to deny access to certain categories of content during proscribed times and dates;
• a non-transitory computer readable store encoded with domain names, ip addresses, host-ids, and other resource identifiers which have been categorized into categories;
• and
• a content categorizer system which applies rules and heuristics to categorize and recategorize host-ids, domain names, and Internet Protocol addresses by content and stores the resulting duple into a lookup table encoded on the non-transitory computer readable store;
• all elements communicatively coupled through conventional local and wide area networks.

A method for operating a category controlled client which has conventional display, processor, memory, network connections, authentication circuits, and a category cache organized by user, the method comprising:

• receiving a resource identifier (link, url, redirection, manual entry, . . . );
• checking local category cache for recent access allowance or permanent enablement (your school, your campus, your enterprise, your own disk/intranet);
• transmitting authentication credentials and the received resource identifier to a profile-policy server;
• upon receiving a denial, displaying a warning or informational message;
• and
• upon not receiving a denial, applying a protocol to the resource identifier to request the resource from its server.

A method for operating a content category server for policy controlled client access, the method comprising:

• upon receiving a request for resources located at an uncategorized resource identifier,
• storing the uncategorized resource identifier with the category set to uncategorized,
• determining one or more server host-ids evoked by the uncategorized resource identifier;
• requesting a resource as a conventional browser,
• checking for malicious code execution,
• checking for a series of redirections,
• receiving content as a conventional browser would,
• applying spam and virus rules,
• assigning a category to the resource identifier and storing it to the lookup table,
• returning the category to the client or the profile policy server;
• upon receiving a request for resources located at a categorized resource identifier,
• determining the content category profile of the authenticated user;
• determining the category of the resource identifier;
• manifesting a warning or informative message when the host-id denied to the user because of its category and the user's profile policy;
• and
• enabling access to the categorized resource when the host-id is not denied to the user because of its category and the user's profile policy.