Managed Domains for Mobile Content Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In mobile advertising and marketing, advertisers face challenges in capturing consumer attention amidst overwhelming advertising messages, authentic app discovery, and user privacy concerns, particularly on mobile devices where personal information is at risk due to invasive app permissions and security vulnerabilities.
Innovation Solution
The creation of secure, isolated domains on mobile devices allows for the external management of content by third parties, ensuring user privacy and security while enabling tailored advertising and content distribution without compromising personal data, using techniques like domain isolation and application containerization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If advertisers use rich media advertising formats and increase advertising volume to capture consumer attention, then advertising effectiveness improves, but consumer privacy risk and security vulnerabilities increase
Solution Approach 1:
The system segments the mobile device into multiple isolated domains (personal domain and managed domains) where advertising content resides in separate containers from personal data. This segmentation allows advertising to be delivered effectively while preventing access to personal information, resolving the contradiction between advertising effectiveness and privacy protection.
Solution Approach 2:
The patent introduces a domain isolation mechanism as an intermediary layer between advertising content and personal data. This intermediary enforces security policies that control access between domains, enabling advertisers to reach consumers without compromising privacy, thus resolving the harmful effect of invasive advertising.
2Measurement precision
If third parties manage content on mobile devices to enable targeted advertising, then advertising precision improves, but device security and user control deteriorate
Solution Approach 1:
The system divides the device into isolated domains where third-party content managers can only access and manage content within their designated domain containers. This segmentation enables precise targeted advertising within the managed domain while preventing security risks from propagating to the personal domain, thus maintaining both advertising precision and device security.
Solution Approach 2:
Different domains are assigned different security qualities and access permissions. The personal domain maintains high security with full user control, while managed domains have controlled access permissions suitable for advertising content. This local differentiation of security qualities allows third-party management for advertising precision without compromising overall device security.
3Adaptability or versatility
If multiple apps and content are distributed on mobile devices, then content availability improves, but homescreen overcrowding and user confusion increase
Solution Approach 1:
The system segments content into personally owned content and third-party managed content in separate domains. This segmentation allows diverse content to be available on the device while preventing homescreen overcrowding by providing separate entry points and organization structures for different content sources, thus maintaining ease of operation.
Solution Approach 2:
The domain isolation mechanism acts as an intermediary that manages content distribution and presentation. It mediates between content availability requirements and user interface organization by providing structured access to managed content without cluttering the personal homescreen, thus resolving the contradiction between content versatility and operational simplicity.
4Adaptability or versatility
If app permissions are expanded to enable functionality, then app capability improves, but information security and privacy protection deteriorate
Solution Approach 1:
The system segments app permissions and data access by domain. Apps can have expanded capabilities within their managed domain containers while being isolated from the personal domain containing sensitive information. This segmentation enables app functionality without compromising information security, as permissions are enforced at the domain boundary.
Solution Approach 2:
Different domains have different permission qualities and security characteristics. The personal domain maintains strict security controls, while managed domains allow broader app capabilities suitable for advertising and content delivery. This local differentiation of permission qualities enables app versatility in managed domains without affecting information security in the personal domain.
Data Source
AI summary
A technique is disclosed for remotely managing isolated domains on mobile devices. A request is received from the mobile device to instantiate a managed domain. A managed domain configuration is determined and comprises a security policy controlling access to content of the managed domain of the subscribing mobile device, a content specification identifying the content to be downloaded by the subscribing mobile device into the managed domain, and a content configuration identifying a configuration of the content on the subscribing mobile device. The managed domain configuration is sent to the subscribing mobile device to instantiate a secure, managed domain whose policy, content and content configuration is remotely controlled. The technique is useful for advertising and brand promotion on mobile devices as it simultaneously enables detailed control over the presentation of content by a curator while ensuring privacy and security protection of the other apps, accounts and data on the mobile device.