Method and apparatus for providing a secure virtual environment on a mobile device

A mobile device, comprising:

• a memory;
• and
• a processor coupled to the memory, wherein the processor is configured with processor-executable instructions to perform operations comprising:
• enabling access to a secure virtual environment on the mobile device, the secure virtual environment configured with a security policy;
• enabling only trusted applications to operate within the secure virtual environment according to the security policy;
• presenting a user interface with only the trusted applications;
• enabling a user to manipulate data with a trusted application in the secure virtual environment;
• encrypting the manipulated data with the secure virtual environment before the manipulated data exits the secure virtual environment;
• storing the encrypted data according to the security policy;
• receiving a delete command;
• using the secure virtual environment to erase secure data on the mobile device in response to the delete command;
• and
• locking access to the secure virtual environment at the mobile device in response to the received delete command.

A mobile device, comprising:

• means for means for enabling access to a secure virtual environment on the mobile device, the secure virtual environment configured with a security policy;
• means for enabling only trusted applications to operate within the secure virtual environment according to the security policy;
• means for presenting a user interface with only the trusted applications;
• means for enabling a user to manipulate data with a trusted application in the secure virtual environment;
• means for encrypting the manipulated data with the secure virtual environment before the manipulated data exits the secure virtual environment;
• and
• means for storing the encrypted data according to the security policy;
• means for receiving a delete command;
• means for using the secure virtual environment to erase secure data on the mobile device in response to the delete command;
• and
• means for locking access to the secure virtual environment at the mobile device in response to the received delete command.

A non-transitory processor-readable medium having stored thereon processor-executable instructions configured to cause a mobile device processor to perform operations comprising:

• enabling access to a secure virtual environment on the mobile device, the secure virtual environment configured with a security policy;
• enabling only trusted applications to operate within the secure virtual environment according to the security policy;
• presenting a user interface with only the trusted applications;
• enabling a user to manipulate data with a trusted application in the secure virtual environment;
• encrypting the manipulated data with the secure virtual environment before the manipulated data exits the secure virtual environment;
• storing the encrypted data according to the security policy;
• receiving a delete command;
• using the secure virtual environment to erase secure data on the mobile device in response to the delete command;
• and
• locking access to the secure virtual environment at the mobile device in response to the received delete command.