METHOD AND APPARATUS FOR SECURING MOBILE APPLICATIONS

• US 20150200921A1
• Filed: 09/09/2014
• Published: 07/16/2015
• Est. Priority Date: 03/09/2012
• Status: Active Grant

• Current Assignee: Ivanti, Inc. (Ivanti Software, Inc.)
• Original Assignee: Appsense Incorporated
• Inventors: Linga, Prakash, Arora, Ajay K.
• Granted Patent: US 9,253,170 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs
• CPC Class Codes: G06F 3/0482 Interaction with lists of selectable items, e.g. menus
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281

Abstract

In some embodiments, a method includes obtaining an object code of an application executed on a mobile device. The application is created by an author different from an operator of a data source. The method includes loading dynamically at least one intercept point into the object code, wherein the intercept point is to detect a predetermined input gesture. The method further includes, responsive to an input gesture being received within a context of the application at the mobile device and the input gesture matching the predetermined input gesture: (1) overlaying a user interface within the context of the application, the user interface permitting selection of data items from the data source; (2) determining from a selection signal received at the mobile device, a selected data item; (3) responsive to the determining, loading the selected data item into the context of the application; and (4) removing the user interface overlay.

Claims

1. A method, comprising:

obtaining an object code of an application executed on a mobile device, the application created by an author different from an operator of a data source;

loading dynamically at least one intercept point into the object code of the application, the at least one intercept point to detect a predetermined input gesture;

responsive to an input gesture received at the mobile device, the input gesture received within a context of the application and the input gesture matching the predetermined input gesture,

overlaying a user interface within the context of the application, the user interface permitting selection of data items from the data source;

determining from a selection signal received at the mobile device, a selected data item;

responsive to the determining, loading the selected data item into the context of the application; and

removing the user interface overlay.

2. The method of claim 1, wherein the loading the selected data item includes retrieving the selected data item from a remote computer over a network.

3. The method of claim 1, wherein the loading the selected data item includes retrieving the selected data item from a remote computer over a network, the method further comprising:

decrypting the selected data item from a first encrypted format using a first key; and

encrypting the selected data item with a second encrypted format using a second key.

4. The method of claim 1, wherein the loading the selected data item includes retrieving the selected data item from a remote computer over a network, the method further comprising:

decrypting the selected data item from a first encrypted format using a first key and encrypting the selected data item with a second encrypted format using a second key, the first encrypted format being the same as the second encrypted format, the first key being different from the second key.

5. The method of claim 1, wherein the predetermined input gesture is one of triple tap, swipe from sides or bottom, rotate, or panning.

6. The method of claim 1, wherein the user interface provides information about a secure context enforced on the application.

7. A method, comprising:

obtaining a modified object code of an application executed on a mobile device, the modified object code being defined from an unmodified object code of the application, the unmodified object code being provided by a first party, the modification including;

removal of a digital signature on the unmodified object code of the application;

installing at least one intercept point into the unmodified object code of the application; and

signing the application with a digital signature of a second party to define the modified object code, the second party being different from the first party;

executing the modified object code of the application on the mobile device;

responsive to an input gesture received at the mobile device, the input gesture received within a context of the application and the input gesture matching a predetermined gesture,

overlaying a user interface within the context of the application on the mobile device, the user interface permitting selection of data items from a data source;

determining from a selection signal received at the mobile device, a selected data item;

responsive to the determining, loading the selected data item into the context of the application; and

removing the user interface overlay.

8. The method of claim 7, wherein the loading the selected data item includes retrieving the selected data item from a remote computer over a network.

9. The method of claim 7, wherein the loading the selected data item includes retrieving the selected data item from a remote computer over a network, the method further comprising:

decrypting the selected data item from a first encrypted format using a first key; and

encrypting the selected data item with a second encrypted format using a second key.

10. The method of claim 9, wherein the loading the selected data item includes retrieving the selected data item from a remote computer over a network, the method further comprising:

decrypting the selected data item from a first encrypted format using a first key and encrypting the selected data item with a second encrypted format using a second key, the first encrypted format being the same as the second encrypted format, the first key being different from the second key.

11. The method of claim 7, wherein the predetermined gesture is one of triple tap, swipe from sides or bottom, rotate, or panning.

12. The method of claim 7, wherein the user interface provides information about a secure context enforced on the application.

13. A method comprising:

obtaining an object code of an application executed on a mobile device, the application created by an author different from an operator of a data source;

loading dynamically at least one intercept point into the object code of the application, the at least one intercept point to detect a predetermined input gesture;

responsive to an input gesture received at the mobile device, the input gesture received within a context of the application and the input gesture matching the predetermined input gesture,

overlaying a user interface within the context of the application, the user interface providing a secure task manager allowing selection and activation of a group of applications executed on the mobile device which are within a given security context;

determining from a selection signal received at the mobile device, a selected application from the group of applications;

responsive to the determining, activating the selected application on the mobile device; and

removing the user interface overlay.

14. A system comprising:

a storage;

a network interface, and

a computer system, the computer system communicatively coupled with the network interface and the storage, the computer system including a controller configured to;

receive an object code of an application executed on a mobile device, the application created by an author different from an operator of a data source;

dynamically load at least one intercept point into the object code of the application, the at least one intercept point to detect a predetermined input gesture;

responsive to an input gesture received at the mobile device, the input gesture received within a context of the application and the input gesture matching the predetermined input gesture,

overlay a user interface within the context of the application, the user interface permitting selection of data items from the data source;

determine from a selection signal received at the mobile device, a selected data item;

responsive to the determining, load the selected data item into the context of the application; and

remove the user interface overlay.

15. The system of claim 14, wherein the controller is configured to retrieve the selected data item from a remote computer over a network.

16. The system of claim 14, wherein:

the controller is configured to retrieve the selected data item from a remote computer over a network, the controller configured to, after retrieving the selected data item, decrypt the selected data item from a first encrypted format using a first key and encrypt the selected data item with a second encrypted format using a second key.

17. The system of claim 14, wherein:

the controller is configured to retrieve the selected data item from a remote computer over a network, the controller configured to, after retrieving the selected data item, decrypt the selected data item from a first encrypted format using a first key and encrypt the selected data item with a second encrypted format using a second key, the first encrypted format being the same as the second encrypted format, the first key being different from the second key.

18. The system of claim 14, wherein the predetermined input gesture is one of triple tap, swipe from sides or bottom, rotate, or panning.

19. The system of claim 14, wherein the user interface provides information about a secure context enforced on the application.