Cross domain notification

• US 8,594,652 B2
• Filed: 02/19/2013
• Issued: 11/26/2013
• Est. Priority Date: 10/01/2010
• Status: Active Grant

• Current Assignee: ViaSat Incorporated
• Original Assignee: ViaSat Incorporated
• Inventors: Hart, Steven R., Lindteigen, Ty, Mar, Phil, Wren, Christopher Paul
• Primary Examiner(s): PATEL, MAHENDRA R
• Application Number:
  US13/770,112
• Publication Number:
  US 20130157645A1
• Time in Patent Office: 280 Days
• Field of Search: 455/411, 455/418, 455/518, 455/410, 709/223, 709/206, 709/229, 709/245, 709/225, 709/218, 709/205, 711/163, 713/156, 718/108, 718/103, 726/22, 726/4, 370/252, 370/392, 719/315
• US Class Current: 455/418
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H04M 1/724 User interfaces specially adapted for cordless or mobile telephones
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/086 using security domains

Abstract

A method for a mobile communication device to indicate activity associated with an operating domain includes establishing a plurality of operating domains for the mobile communication device each operating as an independent virtual machine. The method also includes providing a trusted indicator at the mobile communication device for indicating activity associated with a high-side domain. The method also includes providing an input on the mobile communication device for switching from a low-side domain to the high-side domain. The method also includes providing a trusted element for the mobile communication device that is independent of either the high-side domain or the low-side domain. The trusted element may be configured to receive a signal from the input for switching from the low-side domain to the high-side domain and to perform user authentication for switching from the low-side domain to the high-side domain.

Claims

1. A method of preparing a mobile communication device using a provisioning process such that a user can securely switch between operating domains of the mobile communication device, the method comprising:

providing the mobile communication device having a plurality of operating domains each operating as an independent virtual machine, wherein at least one of the operating domains is a high-side domain and at least one of the operating domains is a low-side domain, the high-side domain being a secure domain and the low-side domain being an unsecure domain;

providing a trusted indicator at the mobile communication device to indicate activity associated with the high-side domain while the mobile communication device is operating in the low-side domain, the activity including at least one of an incoming call, an incoming text, or a new email message directed to the high-side domain, where existence of the activity is indicated by activating an external user notification;

providing an input on the mobile communication device for switching from the low-side domain to the high-side domain, the input configured as an input only device that is activated by a physical input from a user of the mobile communication device; and

providing a trusted element at the mobile communication device, the trusted element configured to;

receive a signal associated with the physical input for switching from the low-side domain to the high-side domain;

determine if user authentication is required for switching from the low-side domain to the high-side domain; and

if the user authentication is required, perform the user authentication during which the trusted element is configured to receive input authentication information from the user via an input device.

2. The method of claim 1, wherein the external user notification activated by the trusted indicator is a light emitting diode (LED) on the mobile communication device.

3. The method of claim 1, wherein the physical input for switching from the low-side domain to the high-side domain includes a hard-key press by the user of the mobile communication device.

7. The method of claim 1, wherein during the user authentication the trusted element is configured to provide output authentication information to the user via an output device.

4. A mobile communication device configured to securely switch between a plurality of operating domains, the mobile communication device comprising:

a processing module configured to run in the plurality of operating domains, each operating domain configured as an independent virtual machine, wherein at least one of the operating domains is a high-side domain and at least one of the operating domains is a low-side domain, the high-side domain being a secure domain and the low-side domain being an unsecure domain;

a trusted indicator to provide an indication of activity associated with the high-side domain while the mobile communication device is operating in the low-side domain, the activity including at least one of an incoming call, an incoming text message, or a new email message directed to the high-side domain, the trusted indicator configured to activate an external user notification to indicate existence of the activity associated with the high-side domain;

an input for switching from the low-side domain to the high-side domain, the input configured as an input only device that is activated by a physical input from a user of the mobile communication device; and

a trusted element configured to;

receive a signal associated with the physical input for switching from the low-side domain to the high-side domain;

determine if user authentication is required for switching from the low-side domain to the high-side domain; and

if the user authentication is required, perform the user authentication during which the trusted element is configured to receive input authentication information from the user via an input device.

5. The mobile communication device of claim 4, wherein the external user notification activated by the trusted indicator is an LED on the mobile communication device.

6. The mobile communication device of claim 4, wherein the physical input for switching between the low-side domain and the high-side domain includes a hard-key press by the user of the mobile communication device.

8. The method of claim 4, wherein during the user authentication the trusted element is configured to provide output authentication information to the user via an output device.