Multiple domain smartphone
View Patent ↗A smartphone is adapted, through software modifications, to provide multiple operating domains or domains that provide differing levels of security and reliability. Each operating domain is isolated from the others. Detection of unauthorized modification is provided in some embodiments. Cross domain activity notification is provided in some embodiments.
1. A method for configuring a mobile communication device to operate in multiple domains, the method comprising:
installing a plurality of operating systems on the mobile communication device, one for each of a plurality of operating domains, each of the plurality of operating domains occupying an isolated region of memory; and
installing a plurality of device drivers on the mobile communication device in another isolated region of memory separate from the isolated regions of memory occupied by the plurality of operating domains, at least one of the device drivers assigned exclusively to a first domain, at least one of the device drivers assigned exclusively to a second domain, at least one of the device drivers shared concurrently between the first domain and the second domain, and at least one of the device drivers switched between exclusive assignment to the first domain and exclusive assignment to the second domain.
2. The method of claim 1 further comprising clearing existing software from the mobile communication device prior to installing the plurality of operating systems.
3. The method of claim 1 further comprising implementing a communication control module to enforce communication restrictions between the plurality of operating systems and the plurality of device drivers.
4. The method of claim 1 wherein the first domain is a secure domain configured to allow communications with another communication device by wireless transmission and reception of encrypted communications.
5. The method of claim 1 wherein the second domain is an unsecure domain configured to allow communications with another communication device by wireless transmission and reception of unencrypted communications.
6. The method of claim 1 wherein the first domain is a business domain configured to allow communications with another communication device through a virtual private network (VPN).
7. The method of claim 1 wherein the second domain is a personal domain configured to allow communications with another communication device by wireless transmission and reception of open communications.
8. The method of claim 1 wherein the first domain is configured to allow communications via a picocell base station located on an aircraft, and the second domain is configured to allow communications via a wireless network operated by a commercial carrier.
9. The method of claim 1 wherein the first domain is configured to allow communications via a business enterprise server over a virtual private network (VPN) backhaul, and the second domain is configured to allow open communications via a public network.
10. The method of claim 1 wherein the mobile communication device is a smartphone.
11. A mobile communication device configured to operate in multiple domains, the mobile communication device comprising:
a plurality of isolated regions of memory;
a processing module to run a plurality of operating systems, one for each of a plurality of operating domains, each of the plurality of operating domains occupying one of the isolated regions of memory;
a device driver module in another one of the isolated regions of memory separate from the isolated regions of memory occupied by the plurality of operating domains, the device driver module including a plurality of device drivers, at least one of the device drivers assigned exclusively to a first domain, at least one of the device drivers assigned exclusively to a second domain, at least one of the device drivers shared concurrently between the first domain and the second domain, and at least one of the device drivers switched between exclusive assignment to the first domain and exclusive assignment to the second domain.
12. The mobile communication device of claim 11 further comprising a communication control module to enforce communication restrictions between the plurality of operating systems and the plurality of device drivers.
13. The mobile communication device of claim 11 wherein the first domain is a secure domain configured to allow communications with another communication device by wireless transmission and reception of encrypted communications.
14. The mobile communication device of claim 11 wherein the second domain is an unsecure domain configured to allow communications with another communication device by wireless transmission and reception of unencrypted communications.
15. The mobile communication device of claim 11 wherein the first domain is a business domain configured to allow communications with another communication device through a virtual private network (VPN).
16. The mobile communication device of claim 11 wherein the second domain is a personal domain configured to allow communications with another communication device by wireless transmission and reception of open communications.
17. The mobile communication device of claim 11 wherein the first domain is configured to allow communications via a picocell base station located on an aircraft, and the second domain is configured to allow communications via a wireless network operated by a commercial carrier.
18. The mobile communication device of claim 11 wherein the first domain is configured to allow communications via a business enterprise server over a virtual private network (VPN) backhaul, and the second domain is configured to allow open communications via a public network.
19. The mobile communication device of claim 11 wherein the mobile communication device is a smartphone.
20. A method for configuring a mobile communication device to operate in multiple domains, the method comprising:
installing a plurality of operating systems on the mobile communication device, one for each of a plurality of operating domains, each of the plurality of operating domains occupying an isolated region of memory; and
installing a plurality of device drivers on the mobile communication device in another isolated region of memory separate from the isolated regions of memory occupied by the plurality of operating domains, at least one of the device drivers shared concurrently between a first domain and a second domain, and at least one of the device drivers switched between exclusive assignment to the first domain and exclusive assignment to the second domain.