Patent ID: 8601535

Claim:
A method, in a data processing system, for mobile authorization using policy based access control, the method comprising: a computer collecting one or more policies for a remote device based on membership of one or more users and membership of one or more resources to be downloaded by the computer to the remote device to form a set of collected policies; the computer transforming the set of collected policies for the remote device to form a set of simplified policies; the computer sending the set of simplified policies to the remote device; receiving, at the remote device, one or more simplified policies of the set of simplified policies for the remote device and one or more resources; responsive to a request to perform an action during an off-line mode at the remote device, checking the user, the resource, and the action against the one or more simplified policies; and granting the action at the remote device if the user, the resource, and the action pass the policy check.