Mobile Application Security via Gesture-Based Interception
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current solutions for securing mobile devices lack comprehensive capabilities for managing applications, services, policies, devices, and data, particularly for enterprises, as they are not well-suited for mobile devices with specialized operating systems and limited computing power, leading to vulnerabilities such as unsecured data storage and access to malicious applications.
Innovation Solution
A method that involves obtaining the object code of an application, loading intercept points to detect specific input gestures, overlaying a user interface to select data items, and managing data encryption and isolation, allowing for secure application distribution, location-aware policies, and user profile isolation in an edge operating system-agnostic manner.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If basic security policies of mobile operating system providers are used, then device security is improved, but the policies are too coarse and wipe entire memory or use fixed password lengths, lacking fine-grain customization
Solution Approach 1:
The patent implements fine-grain security policies that allow different security settings for different applications and data types. Instead of coarse device-wide policies, the system enables localized security controls where specific applications can have customized password requirements, encryption settings, and access permissions based on corporate policies and user roles.
Solution Approach 2:
The patent introduces dynamic security policies that can be adjusted and customized based on corporate requirements and user preferences. The system allows organizations to define and modify security parameters such as password complexity, session timeouts, and data access permissions without requiring device wipes or factory resets, enabling flexible adaptation to changing security needs.
2Reliability
If third party solutions provide a separate walled garden, then security is improved, but arbitrary applications cannot be run and fine-grain customization is not supported
Solution Approach 1:
The patent creates a universal security framework that works across multiple mobile operating systems and application types. The solution provides a common security layer that can protect both native and third-party applications without requiring separate walled gardens, enabling organizations to maintain security while supporting arbitrary applications through a unified policy enforcement mechanism.
Solution Approach 2:
The patent introduces an intermediary security layer between the operating system and applications that enables fine-grain control without isolating applications in separate environments. This mediator component allows arbitrary applications to run while enforcing corporate security policies, data protection rules, and access controls through hooks and intercepts in the application execution flow.
3Ease of operation
If built-in mail client allows email access, then communication capability is improved, but attachments can be downloaded and saved to unsecured locations
Solution Approach 1:
The patent implements feedback mechanisms that monitor and control data flow between applications and storage locations. The system tracks attachment downloads and user actions in real-time, providing feedback to enforce security policies such as preventing saves to unsecured locations, requiring authentication for data access, and alerting users to potential security risks before data is stored.
Solution Approach 2:
The patent applies preliminary anti-action by preemptively blocking potentially harmful operations before they can compromise security. The system pre-configures security controls that prevent attachments from being saved to unsecured locations, restrict data export to authorized destinations, and enforce encryption requirements before data leaves the secure environment, thereby preventing security incidents before they occur.
4Adaptability or versatility
If mobile devices are targeted as highly personal rather than corporate, then device personalization is improved, but enterprise security requirements cannot be met
Solution Approach 1:
The patent segments the mobile device into distinct personal and corporate zones with separate security policies and data protection mechanisms. The system allows users to maintain personalization and access to native applications while implementing enterprise security controls specifically for corporate data and applications, enabling both personal and enterprise needs to be satisfied simultaneously through contextual security enforcement.
Data Source
AI summary
In some embodiments, a method includes obtaining an object code of an application executed on a mobile device. The application is created by an author different from an operator of a data source. The method includes loading dynamically at least one intercept point into the object code, wherein the intercept point is to detect a predetermined input gesture. The method further includes, responsive to an input gesture being received within a context of the application at the mobile device and the input gesture matching the predetermined input gesture: (1) overlaying a user interface within the context of the application, the user interface permitting selection of data items from the data source; (2) determining from a selection signal received at the mobile device, a selected data item; (3) responsive to the determining, loading the selected data item into the context of the application; and (4) removing the user interface overlay.