Mobile Wireless Device with Protected File System

摘要

A mobile wireless device programmed with a file system which is partitioned into multiple root directories. The partitioning of the file system 'cages' processes as it prevents them from seeing any files they should not have access to. A Trusted Computing Base verifies whether or not a process has the required privileges or capabilities to access root sub-trees. The particular directory a file is placed into automatically determines its accessibility to different processes-i.e. a process can only access files in certain root directories.