Mobile Photo Security Tagging for Work-Personal Data Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions for mobile devices fail to effectively prevent the co-mingling of personal and workplace information, leading to duplication and potential data leakage, especially when using separate environments or virtual machines.
Innovation Solution
Implementing a secure tagging system that assigns data and application tags to create micro-security perimeters, ensuring that data and processes adhere to defined security policies, preventing the mixing of data with different tags and enforcing access controls based on these tags.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate personal and workplace environments are created on the same device, then data security is improved, but device complexity increases
Solution Approach 1:
The patent segments data into distinct capsules, each with its own security context and access controls. Instead of creating separate environments or virtual machines, the system divides data into discrete units (capsules) that can be independently managed, tagged, and protected according to their security requirements. This allows fine-grained security without the overhead of environment separation.
2Reliability
If virtual machines or sandboxed environments are used, then data isolation is improved, but productivity deteriorates due to duplication
Solution Approach 1:
The patent merges the benefits of data isolation with the efficiency of shared resources by implementing capsule-based security within a single environment. Multiple applications can share the same device environment while data remains isolated in capsules. This eliminates the need for duplicate applications in separate environments while maintaining data isolation through capsule tags and access controls.
3Reliability
If individual application certification is required, then data leakage prevention is improved, but ease of operation worsens
Solution Approach 1:
The patent extracts the security verification mechanism from the application level and implements it at the data level through capsule tags. Instead of requiring each application to be individually certified, the system tags data capsules with security attributes and enforces access controls based on these tags. This shifts the security burden from application certification to data protection, simplifying operation while maintaining leakage prevention.
Data Source
AI summary
Example mobile devices disclosed herein include a camera, memory including computer-executable instructions, and a processor to execute the instructions to at least associate a location of the mobile device with picture data obtained with the camera. The processor is also to assign a first data tag to the picture data when the location of the mobile device corresponds to a first area, the first data tag to identify a first security level for the picture data, or assign a second data tag to the picture data when the location of the mobile device does not correspond to the first area, the second data tag to identify a second security level for the picture data. The processor is further to determine whether to permit an application to access the picture data based on whether the first data tag or the second data tag is assigned to the picture data.