Method and apparatus for providing security policy enforcement

A method for providing security policy enforcement on a wireless mobile device comprising:

• invoking, under control of at least one of a plurality of JAVA applications, a common application interface (API) that is common for use by a plurality of JAVA applications that run in a plurality of different execution environments that share a common security model and wherein one of the execution environments is an emulated execution environment;
• invoking a zone permission check, in response to the invocation of the common API, that determines which execution environment a calling application is in, in response to zone identification data associated with each call in a group of calls in a call stack for the shared API;
• and
• invoking a respective security permission check associated with a determined one of the plurality execution environments to check permissions associated with the calling.

A wireless mobile device comprising:

• a wireless transceiver;
• a processor operatively coupled to the wireless transceiver and operative to execute programming instructions that when executed cause the processor to:
• invoke a common application interface (API) that is common for use by a plurality of applications that run in a plurality of different execution environments;
• and
• invoke a zone permission, in response to the invocation of the common API, that determines which execution environment a calling application is in, in response to zone identification data associated with each call in a group of calls in a call stack for the shared API.