Operation Perimeter Contact Record Access Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Electronic devices used for both personal and work activities face challenges in securely managing and isolating confidential work data from personal data, particularly in accessing and displaying contact records across multiple operation perimeters.

Innovation Solution

Implementing operation perimeters within the electronic device's operating system to control access, with separate storage resources for personal and work contact information, and using a processor to retrieve appropriate contact information based on the current operation perimeter, while allowing shared applications to access both perimeters with proper authorization.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If contact records are stored in separate storage resources for different operation perimeters, then data security and isolation are improved, but access complexity and retrieval difficulty increase

Engineering Contradiction:
Improvedata securityVSAvoidaccess complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a perimeter identification mechanism that acts as an intermediary between the contact record storage system and access requests. When a contact record is accessed, the system automatically identifies which operation perimeter(s) the contact is associated with and retrieves the appropriate contact information from the corresponding storage resource. This mediator approach maintains data security through separate storage while simplifying access by automating the perimeter identification and data retrieval process.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The contact record system is designed with multi-functionality to operate across multiple operation perimeters. Each contact record can be associated with one or more perimeters, and the system can automatically determine which perimeter context applies to each access request. This universal design allows the same contact record structure to serve multiple security contexts without requiring separate storage systems for each perimeter, thereby reducing access complexity while maintaining security.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If multiple operation perimeters are implemented to separate personal and work data, then data isolation and security are improved, but the ability to access shared contact information across perimeters deteriorates

Engineering Contradiction:
Improvedata isolationVSAvoidaccessibility of shared contacts
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent implements a dynamic contact record access system that adapts to the current operation perimeter context. When an application requests contact information, the system dynamically determines which operation perimeter the application is operating in and automatically retrieves contact records from the appropriate storage resource. This dynamic behavior allows shared contacts to be accessible across perimeters when needed while maintaining strict isolation for perimeter-specific contacts, thus improving ease of operation without compromising data isolation.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system performs preliminary identification of the current operation perimeter before contact record retrieval. By determining the operational context in advance and pre-identifying which storage resource contains the relevant contact information, the system eliminates the need for complex real-time access decisions. This preliminary action ensures that shared contacts can be quickly retrieved across perimeters while maintaining security boundaries, thereby improving ease of operation without sacrificing data isolation.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If separate storage resources are used for different operation perimeters, then data protection and security are improved, but system complexity and resource management difficulty increase

Engineering Contradiction:
Improvedata protectionVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts and isolates the perimeter identification logic from the contact record storage and retrieval process. By separating the function of identifying which operation perimeter is active from the function of storing and retrieving contact records, the system maintains simple, separate storage resources for each perimeter while managing system complexity through modular design. This extraction allows the storage system to remain simple and secure while the perimeter identification layer handles the complexity of multi-perimeter access management.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentEP2883184B1Accessing contact records in a device with multiple operation perimeters
Publication Date: 2019.10.09 BLACKBERRY LTD
  • EP2883184B1 patent drawingFigure 1
  • EP2883184B1 patent drawingFigure 2
  • EP2883184B1 patent drawingFigure 3

AI summary

A method and apparatus for accessing contact records in an electronic device with multiple operation perimeters is provided. When accessing contact records from within one operation perimeter, only contact information accessible from that operation perimeter is retrieved. An option is provided to also access contact records of an alternative operation perimeter. If the alternative operation perimeter has a higher security level than the current operation perimeter, a password or other authorization may be required. The contact records may be accessed, for example, to find information for an outgoing communication, to identify information associated with an incoming communication, or to edit a contact record.