Multi-Persona Mobile Device Architecture for Secure Data Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile devices with multiple personas face challenges in securing and managing concurrent connections with different Quality-of-Service (QoS) requirements, as traditional devices treat networking components as a black box, failing to isolate data and prioritize connections effectively between personas.
Innovation Solution
A multi-persona aware mobile device architecture is introduced, allowing for independent and concurrent connectivity by defining virtual mobile devices with separate IP connectivity and QoS prioritization, utilizing a single transceiver and SIM, and an MP aware SIM card to manage multiple personas securely.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional networking components are treated as a black box, then device complexity is reduced, but data isolation and connection prioritization between personas cannot be achieved
Solution Approach 1:
The patent segments the networking components into persona-specific virtual networking stacks, allowing each persona to have its own isolated network configuration, IP address management, and QoS policies. This segmentation enables data isolation between personas while maintaining manageable complexity through modular architecture.
Solution Approach 2:
The patent introduces a networking component that acts as an intermediary layer between multiple personas and the physical network interface. This mediator manages IP addresses, routes traffic, and enforces QoS policies without requiring each persona to directly control hardware resources, thus achieving isolation without proportional increases in complexity.
2Adaptability or versatility
If multiple personas share the same mobile device, then device utility and adaptability increase, but secure management of concurrent connections with different QoS requirements becomes difficult
Solution Approach 1:
The patent implements a universal networking architecture where a single physical network interface and transceiver serve multiple personas simultaneously. The system provides multi-functionality by allowing the same hardware resources to be dynamically allocated and managed for different personas with distinct QoS requirements, enhancing adaptability without requiring separate physical devices.
Solution Approach 2:
The patent employs dynamic resource allocation where networking resources such as IP addresses, bandwidth, and connection priorities are dynamically assigned and adjusted based on which persona is active and what QoS requirements are currently needed. This dynamic management allows secure concurrent connections while adapting to changing usage patterns.
3Reliability
If independent IP connectivity is provided for each persona, then data isolation and QoS prioritization improve, but networking component complexity increases
Solution Approach 1:
The patent implements a nested architecture where virtual networking stacks and virtual devices are nested within the physical device framework. Each persona has its own virtual networking layer that is contained within the overall device architecture, allowing independent IP connectivity and secure isolation while leveraging the underlying shared physical resources to manage complexity.
Data Source
AI summary
Disclosed in some examples is a user-equipment including a transceiver; one or more processors configured to: provide a first mobile personality associated with a first mobile application executing on the one or more processors; provide a second mobile personality associated with a second mobile application executing on the one or more processors; and provide a first virtual mobile device associated with the first mobile personality and a second virtual mobile device associated with the second mobile personality, wherein the first and second virtual mobile devices provide independent connectivity to the first and second mobile applications via the transceiver.