Smartphone Multi-Domain Isolation via Hypervisor
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile communication devices lack the ability to operate in multiple isolated domains with differing levels of security and reliability without hardware modification, posing challenges in government, business, and personal settings.
Innovation Solution
A commercial off-the-shelf smartphone is adapted through software modifications to provide multiple operating modes or domains with varying security and reliability levels, using a provisioning process, memory isolation, and a communication control module to enforce restrictions and detect unauthorized modifications, while allowing secure and unsecure domain switching.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple isolated domains with differing security levels are implemented, then security and reliability are improved, but device complexity increases
Solution Approach 1:
The system divides the smartphone into multiple isolated domains (secure domain and unsecure domain), each with separate operating systems and memory spaces. This segmentation allows different security levels to coexist while maintaining isolation through the hypervisor layer, resolving the contradiction by structuring complexity into manageable, isolated segments rather than a monolithic system.
Solution Approach 2:
A hypervisor layer is introduced as an intermediary between the secure and unsecure domains, managing resource allocation and enforcing security policies. This intermediary abstracts the complexity of domain isolation and communication control, allowing secure operations without requiring direct complex interactions between domains.
2Ease of manufacture
If commercial off-the-shelf smartphone is used without hardware modification, then cost and ease of manufacture are improved, but security and reliability deteriorate
Solution Approach 1:
The invention replaces hardware-based security modifications with software-based solutions. Instead of modifying the physical smartphone hardware to achieve security, a virtualization layer (hypervisor) is implemented in software to create isolated domains with different security levels, thereby maintaining ease of deployment with commercial devices while achieving security through software architecture.
Solution Approach 2:
The system makes a single commercial smartphone capable of serving multiple functions and security requirements simultaneously. The device can operate as both a secure communication device and a regular consumer smartphone through the multi-domain architecture, eliminating the need for separate hardware devices for different security needs.
3Reliability
If strict communication restrictions between domains are enforced, then security is improved, but ease of operation deteriorates
Solution Approach 1:
The communication control module dynamically adjusts communication restrictions between domains based on security requirements and user actions. Rather than static isolation, the system allows controlled interactions when appropriate (such as when users explicitly switch domains or approve communications), balancing security enforcement with operational flexibility.
Solution Approach 2:
The system provides feedback mechanisms to users about domain switching and communication requests. Users are notified and can approve or deny cross-domain communications, creating a feedback loop that maintains security while allowing necessary operations. This feedback ensures users remain aware of and control domain interactions.
4Reliability
If domain isolation through memory confinement is implemented, then security is improved, but device complexity increases
Solution Approach 1:
The hypervisor acts as an intermediary memory management unit that handles the complexity of domain isolation. It manages memory allocation and access control between secure and unsecure domains, abstracting the complex memory management requirements from individual domains and centralizing control in the hypervisor layer.
Data Source
AI summary
A commercial off-the-shelf smartphone is adapted, through software modifications only, to provide multiple operating domains or domains that provide differing levels of security and reliability. Each operating domain is isolated from the others. Detection of unauthorized modification is provided. Cross domain activity notification is provided.