METHOD AND APPARATUS FOR CONTROLLING OPERATIONS PERFORMED BY A MOBILE CO
The huge success of mobile computing devices has fundamentally changed the corporate computing environment, with employees using corporate data on their own computing devices. Companies would still like to control their data, event when present on an employee's personal computing device, such as a Smartphone. The present invention presents a system and a method, which will enable companies to achieve such a control while still allowing the user to use the applications he desires on his device. The protected data will be replaced by other data.
1 . A method for controlling operations performed by a mobile computing device, the method comprising:
Obtaining rule information items indicative of a native operation whose performance should be controlled and preparing of imposable operations that should be enforced based on it and replacing a native operation with an imposable operation
2 . A method as in claim 1 where the native operation is data access and the imposable operation is providing different data instead of the original data.
3 . A method as in claim 2 where the difference in the data is achieved by replacing the data with data suitable for the rules.
4 . A method as in claim 2 where the difference in the data, is achieved by manipulating the original data
5 . A method as in claim 2 where the difference in the data is achieved by copying the original data and manipulating it.
6 . A method as in claim 5 where a jump to a native operation initiated by the application is replaced with a jump to an imposable function
7 . A method as in claim 6 where a native operation in an application lookup table is being replaced with an imposable function. A method as in claim 1 where a hook is causing a call by the application to a native operation to be converted to an imposable function.
8 . The method of claim 2 wherein obtaining rule information items includes parsing information carried by said rule information items.
9 . An apparatus for controlling operations performed by a mobile computing device, the apparatus comprising:
a policy module for obtaining rule information items indicative of a native operation whose performance should be controlled and of an imposable operation that should be enforced;
a data access module configured to access data records;
an enforcement module for enforcing the imposable operation indicated by the rule information; and a data-manipulating module for manipulating data in accordance with said imposable operation so as to obtain manipulated data having structure resembling said data records.