System and method for secure control of resources of wireless mobile communication devices
Systems and methods for secure control of a wireless mobile communication device are disclosed. Each of a plurality of domains includes at least one wireless mobile communication device asset. When a request to perform an operation affecting at least one of the assets is received, it is determined whether the request is permitted by the domain that includes the at least one affected asset, by determining whether the entity with which the request originated has a trust relationship with the domain, for example. The operation is completed where it is permitted by the domain. Wireless mobile communication device assets include software applications, persistent data, communication pipes, and configuration data, properties or user or subscriber profiles.
1. A method comprising:
storing first data and second data in a wireless communication device,
wherein the first data is stored in a first domain of the wireless communication device and the second data is stored in a second domain of the wireless communication device,
wherein the first data is controlled by an organization and the second data is controlled by a user of the wireless communication device;
permitting a first software application to access the first data, the first software application executing at the wireless communication device and associated with the first domain; and
controlling whether a second software application is permitted to access the first data, the second software application executing at the wireless communication device and associated with the second domain.
2. The method of claim 1 , wherein the organization comprises an employer of the user.
3. The method of claim 1 , wherein the second software application is permitted to access the first data.
4. The method of claim 1 , wherein the second software application is not permitted to access the first data.
5. The method of claim 1 , further comprising permitting the second software application to access the second data.
6. The method of claim 1 , wherein the first data comprises data related to one or more contacts of an address book.
7. The method of claim 1 , wherein the first data comprises corporate data.
8. The method of claim 1 , wherein the second data comprises personal data.
9. A wireless communication device, comprising:
at least one memory storing first data and second data in the wireless communication device, wherein the first data is stored in a first domain of the wireless communication device and the second data is stored in a second domain of the wireless communication device, wherein the first data is controlled by an organization and the second data is controlled by a user of the wireless communication device; and
a controller configured to:
permit a first software application to access the first data, the first software application executing at the wireless communication device and associated with the first domain; and
control whether a second software application is permitted to access the first data, the second software application executing at the wireless communication device and associated with the second domain.
10. The wireless communication device of claim 9 , wherein the organization comprises an employer of the user.
11. The wireless communication device of claim 9 , wherein the second software application is permitted to access the first data.
12. The wireless communication device of claim 9 , wherein the second software application is not permitted to access the first data.
13. The wireless communication device of claim 9 , wherein the controller is configured to permit the second software application to access the second data.
14. The wireless communication device of claim 9 , wherein the first data comprises data related to one or more contacts of an address book.
15. The wireless communication device of claim 9 , wherein the first data comprises corporate data.
16. The wireless communication device of claim 9 , wherein the second data comprises personal data.
17. A non-transitory computer readable medium comprising program code executable by a processor such that, when executed, causes a wireless communication device to perform operations comprising:
storing first data and second data in the wireless communication device, wherein the first data is stored in a first domain of the wireless communication device and the second data is stored in a second domain of the wireless communication device, wherein the first data is controlled by an organization and the second data is controlled by a user of the wireless communication device;
permitting a first software application to access the first data, the first software application executing at the wireless communication device and associated with the first domain; and
controlling whether a second software application is permitted to access the first data, the second software application executing at the wireless communication device and associated with the second domain.
18. The non-transitory computer readable medium of claim 17 , wherein the organization comprises an employer of the user.
19. The non-transitory computer readable medium of claim 17 , wherein the second software application is permitted to access the first data.
20. The non-transitory computer readable medium of claim 17 , wherein the second software application is not permitted to access the first data.
21. The non-transitory computer readable medium of claim 17 , wherein the second software application is permitted to access the second data.
22. The non-transitory computer readable medium of claim 17 , wherein the first data comprises data related to one or more contacts of an address book.
23. The non-transitory computer readable medium of claim 17 , wherein the first data comprises corporate data.
24. The non-transitory computer readable medium of claim 17 , wherein the second data comprises personal data.