Patent ID: 8590003

Claim:
A system for including context in an access policy on a mobile computing device, said system comprising: a memory area for storing a policy set specifying an application program identifier of an application program executing on the mobile computing device, a resource identifier for a resource associated with the mobile computing device, and access rights, wherein the application program identifier or the resource identifier includes an entity identifier associated with an entity, the entity being executable code executing within the application program, wherein the access rights define access by the entity to the resource, the memory area further storing a token stack including a browser token and a location framework token, the browser token including the application program identifier and the location framework token including the resource identifier; and a processor programmed to: receive the access rights by the entity to the resource; associate the entity identifier with the application program identifier or the resource identifier by combining the entity identifier with one of the application program identifier or the resource identifier into a single identifier stored as the browser token or the location framework token; associate the received access rights with the browser token and the location framework token to create the policy set; and store the created policy set in the memory area.