Secure virtual file management system

摘要

A virtual file management system provides user access to managed content on mobile devices. The system comprises storage domains storing the managed content distributively using file systems, and a data infrastructure that organizes the managed content into a virtual file system that maintains information of storage domain specific file system primitives for accessing corresponding portions of the managed content. The data infrastructure, which maintains metadata of the storage domains and the mobile devices, comprises a policy definition and decision component that maintains policies defining controls for permissible operations on the managed content, the permissible operations including the file system primitives. A client application hosted on the mobile devices is coupled to the data infrastructure and the storage domains and includes an enforcement component that communicates with the policy definition and decision component to retrieve and enforce the policies by applying the controls on the mobile devices.

主权项

1. A virtual file management system (VFMS) providing a user access to managed content on one or more mobile devices, the system comprising:
a plurality of storage domains that store the managed content distributively using one or more file systems; at least one server hosting a data infrastructure that organizes the managed content into a virtual file system that maintains information of storage domain specific file system primitives for accessing corresponding portions of the managed content, the data infrastructure collecting and maintaining metadata of the plurality of storage domains and the one or more mobile devices, wherein the data infrastructure comprises a policy definition and decision component that generates and maintains one or more policies defining controls for permissible operations on the managed content with respect to the user on the one or more mobile devices, the permissible operations including the file system primitives, wherein the generating and maintaining the policies includes combining native policies associated with the plurality of storage domains and the one or more mobile devices with additional policies; and a client application hosted on the one or more mobile devices; the client application coupled to the data infrastructure and the plurality of storage domains and including an enforcement component, wherein the enforcement component communicates with the policy definition and decision component to retrieve and enforce the one or more policies by applying the controls on the one or more mobile devices, the client application retrieving information of the virtual file system from the data infrastructure and providing access to the managed content through an interface by processing data requests using the permissible operations, wherein the client application exposes the permissible operations and the information of the virtual file system to one or more mobile applications that run on the one or more mobile devices and provides the access to the managed content through the interface, the exposing the permissible operations and the information of the virtual file system to the one or more mobile applications including the one or more mobile applications retrieving and enforcing the polices.