Cross domain notification

A mobile communication device configured to operate in multiple domains, the mobile communication device comprising:

• a processing module configured to run in a plurality of operating domains, each operating domain configured as an independent virtual machine, wherein at least one of the operating domains is a high-side domain and at least one of the operating domains is a low-side domain, the high-side domain being a secure domain and the low-side domain being an unsecure domain;
• a trusted indicator to provide an indication of activity associated with the high-side domain, the activity including at least one of an incoming call, an incoming text message, or a new email message, the trusted indicator configured to activate a user notification to indicate the activity;
• an input for switching between the low-side domain and the high-side domain, where after switching to the high-side domain, previous activity on the low-side domain is preserved, the input configured as an input only device that is activated by user input;
• and
• a trusted element that is independent of either the high-side domain or the low-side domain, the trusted element configured to:
• receive a signal from the input for switching between the low-side domain and the high-side domain;
• perform user authentication for switching from the low-side domain to the high-side domain, the user authentication including providing output authentication information from the trusted element to an output device and receiving input authentication information at the trusted element from an input device;
• and
• control a keypad and a display of the mobile communication device during the user authentication, the keypad configured to provide the input authentication information to the trusted element and the display configured to receive the output authentication information from the trusted element.

A method of preparing a mobile communication device such that a user can securely switch between operating domains of the mobile communication device, the method comprising:

• providing a mobile communication device having a plurality of operating domains each operating as an independent virtual machine, wherein at least one of the operating domains is a high-side domain and at least one of the operating domains is a low-side domain, the high-side domain being a secure domain and the low-side domain being an unsecure domain;
• providing a trusted indicator at the mobile communication device to indicate activity associated with the high-side domain, the trusted indicator indicating at least one of an incoming call, an incoming text, or a new email message directed to the high-side domain, the activity indicated by activating a user notification;
• providing an input on the mobile communication device for switching from the low-side domain to the high-side domain, the input configured as an input only device that is activated by user input, wherein after switching to the high-side domain, previous activity on the low-side domain is preserved;
• providing a trusted element within the mobile communication device that is independent of either the high-side domain or the low-side domain, the trusted element configured to:
• receive a signal from the input for switching from the low-side domain to the high-side domain;
• and
• perform user authentication for switching from the low-side domain to the high-side domain, the user authentication including providing output authentication information from the trusted element to an output device and receiving input authentication information at the trusted element from an input device;
• and
• control a keypad and a display of the mobile communication device during the user authentication, the keypad configured to provide the input authentication information to the trusted element and the display configured to receive the output authentication information from the trusted element.