Patent ID: 8594652

Claim:
A method of preparing a mobile communication device using a provisioning process such that a user can securely switch between operating domains of the mobile communication device, the method comprising: providing the mobile communication device having a plurality of operating domains each operating as an independent virtual machine, wherein at least one of the operating domains is a high-side domain and at least one of the operating domains is a low-side domain, the high-side domain being a secure domain and the low-side domain being an unsecure domain; providing a trusted indicator at the mobile communication device to indicate activity associated with the high-side domain while the mobile communication device is operating in the low-side domain, the activity including at least one of an incoming call, an incoming text, or a new email message directed to the high-side domain, where existence of the activity is indicated by activating an external user notification; providing an input on the mobile communication device for switching from the low-side domain to the high-side domain, the input configured as an input only device that is activated by a physical input from a user of the mobile communication device; and providing a trusted element at the mobile communication device, the trusted element configured to: receive a signal associated with the physical input for switching from the low-side domain to the high-side domain; determine if user authentication is required for switching from the low-side domain to the high-side domain; and if the user authentication is required, perform the user authentication during which the trusted element is configured to receive input authentication information from the user via an input device.