Patent ID: 8752130

Claim:
A method for controlling a multi-stakeholder environment in a single electronic device, the method comprising: assigning a first domain to a first stakeholder, wherein the first domain comprises a first grouping of isolated applications and data, wherein the assigning a first domain includes setting aside system resources for the first grouping of isolated applications and data, wherein the first stakeholder is a manufacturer of the single electronic device, and wherein the first grouping of isolated applications and data includes applications installed on the single electronic device prior to it being delivered to a user; assigning a second domain to a second stakeholder, wherein the second domain comprises a second grouping of applications and data, wherein the assigning a second domain includes setting aside system resources for the second grouping of applications and data, wherein the second grouping of applications and data includes applications installed on the single electronic device after it is delivered to the user; defining a first access policy for the first domain, wherein the first access policy defines which stakeholders are permitted to access the applications and data in the first domain, wherein the access policy is based on type enforcement, wherein all processes and objects include attributes of the form user:role:type; and preventing applications or services in the second domain from accessing data or applications in the first domain according to the first access policy by loading the first access policy into an operating system kernel at runtime.