Patent ID: 8869270

Claim:
A system, comprising: at least one chip configured to be installed in a mobile device, the at least one chip comprising: an intercepting device configured to intercept untrusted data from an untrusted portion of a network, the intercepting occurring before execution by a mobile device processor of the mobile device; a security engine configured to provide security instructions operative to implement a security policy, the security instructions for providing internet gateway security for the mobile device, the internet gateway security including a firewall for the mobile device, the firewall for providing in accordance with the security policy pre-runtime security protection from malicious code in the untrusted data; and a dedicated security system processor dedicated to security functions and configured to execute the security engine, thereby enabling the security engine to receive the untrusted data from the intercepting device, to evaluate the untrusted data for violations of the security policy to identify trusted data from the untrusted data in accordance with the security policy, and to provide the trusted data to the intercepting device for transmission to the mobile device processor for execution.