Multiple domain smartphone
First Claim
Patent Images
1. A method for modifying an existing mobile communication device to operate in multiple domains, the method comprising:
- installing a plurality of operating systems, one for each of a plurality of operating domains, of the plurality of operating domains occupying an isolated regions region of memory, wherein at least one of the operating domains is a business domain configured to allow communications with another communication device by wireless transmission and reception of communications, and at least another of the operating domains is a personal domain configured to allow communications with another communication device by wireless transmission and reception of communications;
installing a plurality of device drivers in another isolated region of memory separate from the isolated regions of memory occupied by the plurality of operating domains, at least one of the device drivers assigned exclusively to the business domain, at least one of the device drivers assigned exclusively to the personal domain, at least one of the device drivers shared concurrently between the business domain and the personal domain, and at least one of the device drivers switched between exclusive assignment to the business domain and exclusive assignment to the personal domain;
implementing a communication control module to enforce communication restrictions between each of the operating systems, the device drivers and device hardware;
implementing an authentication procedure to switch from the personal domain to the business domain; and
providing a trusted indicator that the mobile communication device is operating in the business domain, wherein the trusted indicator is under exclusive control of software associated with the business domain.
5 Assignments
0 Petitions
Accused Products
Abstract
A commercial off-the-shelf smartphone is adapted, through software modifications only, to provide multiple operating domains or domains that provide differing levels of security and reliability. Each operating domain is isolated from the others. Detection of unauthorized modification is provided. Cross domain activity notification is provided.
-
Citations
15 Claims
-
1. A method for modifying an existing mobile communication device to operate in multiple domains, the method comprising:
-
installing a plurality of operating systems, one for each of a plurality of operating domains, of the plurality of operating domains occupying an isolated regions region of memory, wherein at least one of the operating domains is a business domain configured to allow communications with another communication device by wireless transmission and reception of communications, and at least another of the operating domains is a personal domain configured to allow communications with another communication device by wireless transmission and reception of communications; installing a plurality of device drivers in another isolated region of memory separate from the isolated regions of memory occupied by the plurality of operating domains, at least one of the device drivers assigned exclusively to the business domain, at least one of the device drivers assigned exclusively to the personal domain, at least one of the device drivers shared concurrently between the business domain and the personal domain, and at least one of the device drivers switched between exclusive assignment to the business domain and exclusive assignment to the personal domain; implementing a communication control module to enforce communication restrictions between each of the operating systems, the device drivers and device hardware; implementing an authentication procedure to switch from the personal domain to the business domain; and providing a trusted indicator that the mobile communication device is operating in the business domain, wherein the trusted indicator is under exclusive control of software associated with the business domain. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11)
-
-
12. A mobile communication device configured to operate in multiple domains, the device comprising:
-
a plurality of isolated regions of memory; a processing module to run a plurality of operating systems, one for each of a plurality of operating domains, each of the plurality of operating domains occupying one of the plurality of isolated regions of memory, wherein at least one of the operating domains is a business domain configured to allow communications with another communication device by wireless transmission and reception of communications, and at least another of the operating domains is a personal domain configured to allow communications with another communication device by wireless transmission and reception of communications; a device driver module in another one of the plurality of isolated regions of memory separate from the plurality of isolated regions of memory occupied by the operating domains, the device driver module including a plurality of device drivers, at least one of the device drivers assigned exclusively to the business domain, at least one of the device drivers assigned exclusively to the personal domain, at least one of the device drivers shared concurrently between the business domain and the personal domain, and at least one of the device drivers switched between exclusive assignment to the business domain and exclusive assignment to the personal domain; wherein the processing module is configured to instantiate a communication control module to enforce communication restrictions between each of the operating systems, the plurality of device drivers and device hardware; wherein the processing module is configured to instantiate an authentication module to implement an authentication procedure to switch from the personal domain to the business domain; and a trusted indicator to provide an indication that the mobile communication device is operating in the business domain, wherein the trusted indicator is under exclusive control of software associated with the business domain. - View Dependent Claims (13, 14, 15)
-
Specification