Secure Data Storage Segmentation on Mobile Devices

The patent segments data storage by creating separate storage locations for different users or applications. Each storage location is isolated and can be independently managed with its own access controls, encryption keys, and security policies. This segmentation allows multiple users to access the same device with their own secure data partitions without interfering with each other, thereby maintaining high data security while managing access control complexity through modular organization.

The patent implements preliminary action by establishing security policies, generating encryption keys, and creating secure storage locations before data is stored. Access control lists and encryption schemes are pre-configured for each storage location, and security policies are defined in advance to govern key management, data access, and session termination. This preliminary setup ensures that when data is stored, the protective measures are already in place, reducing the risk of security vulnerabilities during actual data handling operations.

The patent applies local quality by implementing different security measures and encryption schemes for different storage locations based on their specific security requirements and access patterns. Frequently accessed data may use lighter encryption or be cached in secure memory, while highly sensitive data uses stronger encryption. Each storage location can be configured with its own security policy, allowing the system to optimize the balance between data integrity and access speed on a local, per-location basis rather than applying uniform encryption to all data.