Method and apparatus for securing mobile applications
View Patent ↗In some embodiments, a method includes obtaining an object code of an application executed on a mobile device. The application is created by an author different from an operator of a data source. The method includes loading dynamically at least one intercept point into the object code, wherein the intercept point is to detect a predetermined input gesture. The method further includes, responsive to an input gesture being received within a context of the application at the mobile device and the input gesture matching the predetermined input gesture: (1) overlaying a user interface within the context of the application, the user interface permitting selection of data items from the data source; (2) determining from a selection signal received at the mobile device, a selected data item; (3) responsive to the determining, loading the selected data item into the context of the application; and (4) removing the user interface overlay.
1. A method, comprising:
obtaining an object code of an application executed on a mobile device, the application created by an author different from an operator of a data source;
loading dynamically at least one intercept point into the object code of the application, the at least one intercept point to detect a predetermined input gesture;
responsive to an input gesture received at the mobile device, the input gesture received within a context of the application and the input gesture matching the predetermined input gesture,
overlaying a user interface within the context of the application, the user interface permitting selection of data items from the data source;
determining from a selection signal received at the mobile device, a selected data item;
responsive to the determining, loading the selected data item into the context of the application; and
removing the user interface overlay.
2. The method of claim 1 , wherein the loading the selected data item includes retrieving the selected data item from a remote computer over a network.
3. The method of claim 1 , wherein the loading the selected data item includes retrieving the selected data item from a remote computer over a network, the method further comprising:
decrypting the selected data item from a first encrypted format using a first key; and
encrypting the selected data item with a second encrypted format using a second key.
4. The method of claim 1 , wherein the loading the selected data item includes retrieving the selected data item from a remote computer over a network, the method further comprising:
decrypting the selected data item from a first encrypted format using a first key and encrypting the selected data item with a second encrypted format using a second key, the first encrypted format being the same as the second encrypted format, the first key being different from the second key.
5. The method of claim 1 , wherein the predetermined input gesture is one of triple tap, swipe from sides or bottom, rotate, or panning.
6. The method of claim 1 , wherein the user interface provides information about a secure context enforced on the application.
7. A method, comprising:
obtaining a modified object code of an application executed on a mobile device, the modified object code being defined from an unmodified object code of the application, the unmodified object code being provided by a first party, the modification including:
removal of a digital signature on the unmodified object code of the application;
installing at least one intercept point into the unmodified object code of the application; and
signing the application with a digital signature of a second party to define the modified object code, the second party being different from the first party;
executing the modified object code of the application on the mobile device;
responsive to an input gesture received at the mobile device, the input gesture received within a context of the application and the input gesture matching a predetermined gesture,
overlaying a user interface within the context of the application on the mobile device, the user interface permitting selection of data items from a data source;
determining from a selection signal received at the mobile device, a selected data item;
responsive to the determining, loading the selected data item into the context of the application; and
removing the user interface overlay.
8. The method of claim 7 , wherein the loading the selected data item includes retrieving the selected data item from a remote computer over a network.
9. The method of claim 7 , wherein the loading the selected data item includes retrieving the selected data item from a remote computer over a network, the method further comprising:
decrypting the selected data item from a first encrypted format using a first key; and
encrypting the selected data item with a second encrypted format using a second key.
10. The method of claim 9 , wherein the loading the selected data item includes retrieving the selected data item from a remote computer over a network, the method further comprising:
decrypting the selected data item from a first encrypted format using a first key and encrypting the selected data item with a second encrypted format using a second key, the first encrypted format being the same as the second encrypted format, the first key being different from the second key.
11. The method of claim 7 , wherein the predetermined gesture is one of triple tap, swipe from sides or bottom, rotate, or panning.
12. The method of claim 7 , wherein the user interface provides information about a secure context enforced on the application.
13. A method comprising:
obtaining an object code of an application executed on a mobile device, the application created by an author different from an operator of a data source;
loading dynamically at least one intercept point into the object code of the application, the at least one intercept point to detect a predetermined input gesture;
responsive to an input gesture received at the mobile device, the input gesture received within a context of the application and the input gesture matching the predetermined input gesture,
overlaying a user interface within the context of the application, the user interface providing a secure task manager allowing selection and activation of a group of applications executed on the mobile device which are within a given security context;
determining from a selection signal received at the mobile device, a selected application from the group of applications;
responsive to the determining, activating the selected application on the mobile device; and
removing the user interface overlay.
14. A system comprising:
a storage;
a network interface, and
a computer system, the computer system communicatively coupled with the network interface and the storage, the computer system including a controller configured to:
receive an object code of an application executed on a mobile device, the application created by an author different from an operator of a data source;
dynamically load at least one intercept point into the object code of the application, the at least one intercept point to detect a predetermined input gesture;
responsive to an input gesture received at the mobile device, the input gesture received within a context of the application and the input gesture matching the predetermined input gesture,
overlay a user interface within the context of the application, the user interface permitting selection of data items from the data source;
determine from a selection signal received at the mobile device, a selected data item;
responsive to the determining, load the selected data item into the context of the application; and
remove the user interface overlay.
15. The system of claim 14 , wherein the controller is configured to retrieve the selected data item from a remote computer over a network.
16. The system of claim 14 , wherein:
the controller is configured to retrieve the selected data item from a remote computer over a network, the controller configured to, after retrieving the selected data item, decrypt the selected data item from a first encrypted format using a first key and encrypt the selected data item with a second encrypted format using a second key.
17. The system of claim 14 , wherein:
the controller is configured to retrieve the selected data item from a remote computer over a network, the controller configured to, after retrieving the selected data item, decrypt the selected data item from a first encrypted format using a first key and encrypt the selected data item with a second encrypted format using a second key, the first encrypted format being the same as the second encrypted format, the first key being different from the second key.
18. The system of claim 14 , wherein the predetermined input gesture is one of triple tap, swipe from sides or bottom, rotate, or panning.
19. The system of claim 14 , wherein the user interface provides information about a secure context enforced on the application.