System and method for secure control of resources of wireless mobile communication devices

A mobile device comprising:

• a memory comprising a plurality of domains including a first domain controlled by a first domain owner, and a second domain controlled by a second domain owner, wherein the first domain owner is an employer, and the second domain owner is an owner of the mobile device;
• and
• a domain controller configured to:
• receive a request to perform an operation, wherein the operation affects an asset;
• deny the request if the request originated from a different domain than the asset;
• and
• permit the request if the request originated from the same domain as the asset.

A method for control of resources of a mobile device, the method comprising:

• segregating the mobile device into a plurality of domains including a first domain controlled by a first domain owner, and a second domain controlled by a second domain owner, wherein the first domain owner is an employer, and the second domain owner is an employee of the employer;
• receiving a request to perform an operation, wherein the operation affects an asset of the mobile device;
• responsive to receiving the request:
• denying, by a domain controller, the request if the request originated from a different domain than the asset;
• and
• permitting, by the domain controller, the request if the request originated from the same domain as the asset.

A mobile device comprising:

• a memory comprising a plurality of domains including a first domain controlled by a first domain owner, and a second domain controlled by a second domain owner, wherein the first domain owner is an employer, and the second domain owner is an employee of the employer;
• and
• a domain controller configured to:
• receive a request to perform an operation, wherein the operation affects an asset;
• deny the request if the request originated from a different domain than the asset;
• and
• permit the request if the request originated from the same domain as the asset.

One or more non-transitory computer readable media storing instructions that when executed by one or more processors cause the one or more processors to:

• segregate a mobile device into a plurality of domains including a first domain controlled by a first domain owner, and a second domain controlled by a second domain owner, wherein the first domain owner is an employer, and the second domain owner is an owner of the mobile device;
• responsive to receiving a request to perform an operation, wherein the operation affects an asset of the mobile device:
• deny, by a domain controller, the request if the request originated from a different domain than the asset;
• and
• permit, by the domain controller, the request if the request originated from the same domain as the asset.

One or more non-transitory computer readable media storing instructions that when executed by one or more processors cause the one or more processors to:

• segregate a mobile device into a plurality of domains including a first domain controlled by a first domain owner, and a second domain controlled by a second domain owner, wherein the first domain owner is an employer, and the second domain owner is an employee of the employer;
• responsive to receiving a request to perform an operation, wherein the operation affects an asset of the mobile device:
• deny, by a domain controller, the request if the request originated from a different domain than the asset;
• and
• permit, by the domain controller, the request if the request originated from the same domain as the asset.