In this embodiment, the separation between maps or data layers within the maps is controlled by placing the maps or data layers in different domains or sub-domains also known as “origins”. Data layers or maps in different origins can only communicate via a mutually agreed protocol and cannot communicate in an unrestricted fashion. In an embodiment, to ensure data security and isolation between the maps, logic managers are also utilized as further described herein below with respect to FIGS. 3A and 3B.

Referring now to FIG. 3A, the secured logic managers 300-1 and 300-2 (hereinafter referred to collectively as secured logic managers 300 or individually as a secured logic manager 300) are instantiated for two maps and can exchange information related to the two maps, e.g., the parameters of the first map are sent to the second map. The unsecured logic managers 310-1 and 310-2 (hereinafter referred to collectively as unsecured logic managers 310 or individually as an unsecured logic manager 310) are also instantiated for the two maps. Each unsecured logic manager 310 can communicate only with its respective secured manager 300 (e.g., communication is allowed between unsecured logic manager 310-1 and secured logic manager 300-1).