A flexible security architecture to support third-party applications on mobile devices