System and method for secure management of mobile user access to enterprise network resources

A client server system for managing access to a plurality of network resources comprising documents and files within an enterprise network from a wireless mobile device, wherein the enterprise network comprises a security infrastructure for managing internal user access according to internal access policies, and the client server system comprises:

• a server within the enterprise network for managing wireless mobile access by performing the steps of:
• receiving identification from a user of a wireless mobile device;
• retrieving from a directory attributes of said user based on a user ID of the user;
• determining group membership of the user based on said user ID and said attributes, each group having associated therewith a set of access rules defining accessible resources and associated permitted operations for members of the group;
• resolving access rules for the user based on group membership and generating a list of accessible resources and operations for the user based on said access rules;
• and
• making said list available for subsequent processing comprising one or more of displaying and otherwise interfacing said resource to the user for one or more of read, write, execute, modify, delete, email, download, and synchronize operations.

A system comprising an access control layer for an access server managing mobile user access to network resources comprising documents and files within an enterprise network comprising processing means for performing the steps of:

• determining group membership of a user based on a user ID and attributes of the user, each group having associated therewith a set of resources and associated operations for members of the group;
• determining access rules for the user based on each group membership of the user;
• generating a list of accessible resources and associated operations for the user based on said access rules;
• and
• making said list available to a subsequent process for performing an operation on an accessible resource in accordance with said access rules comprising one or more of displaying and otherwise interfacing said resource to the user for one or more of read, write, execute, modify, delete, email, download, and synchronize operations.

A non-transitory computer readable medium comprising executable program instructions for carrying out a method of managing user access to a plurality of network resources comprising documents and files within an enterprise network from a wireless mobile device, by steps comprising:

• determining group membership of a user based on a user ID and attributes of the user, each group having associated therewith a set of resources and associated operations for members of the group;
• determining access rules for the user based on each group membership of the user;
• generating a list of accessible resources and associated operations for the user based on said access rules;
• making said list available to a subsequent process for performing an operation on an accessible resource in accordance with said access rules comprising one or more of displaying and otherwise interfacing said resource to the user for one or more of read, write, execute, modify, delete, email, download, and synchronize operations.