Method and apparatus for securing mobile applications

A non-transitory processor-readable medium storing code representing instructions to be executed by a processor, the code comprising code to cause the processor to:

• receive an object code of a first application provided by a first party;
• remove a digital signature from the object code of the first application;
• install at least two intercept points into the object code of the first application;
• sign the object code of the first application with a digital signature of a second party to produce a modified object code, the second party is different from the first party;
• execute the modified object code of the first application on a mobile device associated with the first application;
• responsive to a read request for data by the modified object code of the first application, intercept the read request by at least one of the two intercept points;
• determine, in response to intercepting the read request, whether or not access to read the data is authenticated;
• and
• send a signal to provide the data to the first application, based on the determining.

A method, comprising:

• executing a first application on a mobile device;
• receiving a request to share, with a second application, data associated with the first application;
• sending a signal to provide the data to the second application, while executing the first application, in response to the request to share data with the second application;
• receiving a request to share, with a third application, the third application not from the set of applications on the mobile device, data associated with the first application;
• and
• sending a signal to prevent the data from being provided to the third application, while executing the first application, in response to the request to share data with the third application.

An apparatus comprising:

• a controller module implemented in at least one of a memory or a processing device, the controller module configured to be communicatively coupled with a network interface and a storage device, the controller module further configured to:
• receive an object code of a first application, the first application defined by an author different from an author of a second application;
• dynamically load at least two intercept points into the object code of the first application, using the second application;
• responsive to a read request for data by the first application, intercept the read request by at least one of the two intercept points;
• determine, in response to intercepting the read request, whether or not access to read the data is authenticated;
• and
• send a signal to provide the data to the first application, based on the determining.