Authentication for viewing content on electronic devices

Abstract

Access to the content of protected documents can be restricted, and systems and methods for obtaining access to the content of protected documents are provided. [Solution] An electronic device communicating with one or more displays and one or more input devices receives a protected document containing content from a transmitting device. In some examples, upon receiving the protected document, one or more prompts for one or more inputs to access the protected document can be displayed. While one or more prompts are displayed, one or more inputs can be detected. Upon detecting one or more inputs, and according to a determination that one or more inputs satisfy one or more criteria, including the criteria that each input is satisfied when authenticating a user, access to the content of the protected document is obtained.

Description

Technical Field

[0001] (Cross - reference to Related Applications) This application claims the benefit of U.S. Provisional Patent Application No. 63 / 699,798, filed on September 26, 2024; U.S. Provisional Patent Application No. 63 / 819,497, filed on June 6, 2025; U.S. Provisional Patent Application No. 63 / 880,966, filed on September 12, 2025; and U.S. Patent Application No. 19 / 330,424, filed on September 16, 2025, the content of which is hereby incorporated by reference in its entirety for all purposes.

[0002] This application generally relates to systems and methods for authenticating a user to view protected content on an electronic device associated with the user in a three - dimensional environment.

Background Art

[0003] Electronic devices permit and restrict access to documents based on user authentication. For example, access to various functions is optionally permitted in response to a user logging into the electronic device using a password.

Summary of the Invention

[0004] Some examples of the present disclosure are directed to systems and methods for an electronic device that communicates with a display and one or more input devices to receive a protected document containing content from a transmitting device. In some examples, in response to receiving the protected document, one or more prompts for each of one or more respective inputs for accessing the protected document can be displayed. While one or more prompts are being displayed, one or more respective inputs can be detected. In accordance with a determination that each of the one or more respective inputs satisfies one or more criteria, including criteria that are satisfied when the one or more respective inputs authenticate the user, the electronic device obtains access to the content of the protected document.

[0005] Some examples of this disclosure relate to a system and method for an electronic device communicating with one or more displays, one or more input devices, and a second electronic device to receive protected content transmitted by the second electronic device, the protected content being associated with the viewpoint of a user of the second electronic device and including at least a portion of the three-dimensional environment of the second electronic device. In some examples, upon receiving the protected content, the electronic device displays a first user interface associated with accessing the protected content via one or more displays. In some examples, the first user interface includes a representation of at least a portion of the three-dimensional environment that is visible from the viewpoint of a user of the second electronic device and is displayed with a first amount of occlusion, and an indication of an authentication process associated with obtaining access to the protected content. While displaying the first user interface, the electronic device detects one or more inputs via one or more input devices. In some examples, in response to the detection of one or more inputs and in accordance with the determination that one or more inputs satisfy one or more criteria, the electronic device acquires access to protected content transmitted by the second electronic device, which includes updating the display of at least a portion of the representation of the three-dimensional environment of the second electronic device to have a second shielding amount smaller than a first shielding amount. In some examples, in response to the detection of one or more inputs and in accordance with the determination that one or more inputs do not satisfy one or more criteria, the electronic device maintains the display of at least a portion of the representation of the three-dimensional environment of the second electronic device with a first shielding amount.

[0006] Some examples of this disclosure relate to methods for electronic devices that communicate with one or more displays and include one or more input devices. In some examples, while displaying protected content in a three-dimensional environment via one or more displays, the electronic device detects inputs corresponding to a request to perform one or more first actions involving the protected content via one or more input devices, including capturing an image of the protected content. In some examples, the image includes at least a portion of the three-dimensional environment surrounding the protected content that is visible from the viewpoint of a user of the electronic device. While this specification primarily refers to capturing an image of the protected content (and / or the environment surrounding the protected content that is visible from the viewpoint of a user of the electronic device), this disclosure is understood to apply to capturing one or more still images and / or videos, and may optically include screen recording or other video recording operations. In some examples, in response to detecting an input, the electronic device initiates a process to perform one or more first actions, including generating a first image corresponding to the image, and displays a representation of the first image in a three-dimensional environment via one or more displays. In some examples, the representation of the first image includes a visual indication that the visibility of protected content is limited, without including the protected content itself, and an occluded representation of at least a portion of the three-dimensional environment that is visible from the perspective of the user of the electronic device.

[0007] Some examples in this disclosure relate to systems and methods for restricting the sharing of protected content on electronic devices, such as transmitting devices. Additionally or alternatively, in some examples, the electronic device blocks screen recording or other copy / save functions to prevent viewers of the protected content from capturing or storing the protected content.

[0008] A complete description of these examples is provided in the "Drawings" and "Modes for Carrying Out the Invention," and it is understood that this "Summary of the Invention" does not in any way limit the scope of this disclosure.

[0009] To improve the understanding of the various examples described herein, refer to the following “Modes for Carrying Out the Invention” together with the following drawings. Similar reference numbers often refer to corresponding parts throughout the drawings. [Brief explanation of the drawing]

[0010] [Figure 1] This disclosure illustrates several examples of electronic devices that present an extended reality environment.

[0011] [Figure 2A] This disclosure shows block diagrams of exemplary architectures for electronic devices, including some examples. [Figure 2B] This disclosure shows block diagrams of exemplary architectures for electronic devices, including some examples.

[0012] [Figure 3] This disclosure illustrates some exemplary transmitting electronic devices by example.

[0013] [Figure 4] This disclosure illustrates several exemplary transmitting devices.

[0014] [Figure 5A] This disclosure illustrates exemplary receiving electronic devices and interactions with them through several examples. [Figure 5B] This disclosure illustrates exemplary receiving electronic devices and interactions with them through several examples.

[0015] [Figure 6] Several examples from this disclosure illustrate the exemplary prompts associated with one or more authentication options.

[0016] [Figure 7] This disclosure provides several examples of exemplary notifications associated with authentication failures.

[0017] [Figure 8] Shows another exemplary prompt associated with one or more authentication options, according to some examples of the present disclosure.

[0018] [Figure 9A] Shows another exemplary prompt and confirmation notification, according to some examples of the present disclosure. [Figure 9B] Shows another exemplary prompt and confirmation notification, according to some examples of the present disclosure. [Figure 9C] Shows another exemplary prompt and confirmation notification, according to some examples of the present disclosure.

[0019] [Figure 10] Shows exemplary verification inputs for an electronic device within a reliable location boundary, according to some examples of the present disclosure.

[0020] [Figure 11] Shows exemplary authentication options for an electronic device located within a reliable location boundary, according to some examples of the present disclosure.

[0021] [Figure 12] Shows another exemplary prompt associated with one or more authentication options, according to some examples of the present disclosure.

[0022] [Figure 13] Shows exemplary verification inputs using a verification card in a three-dimensional environment, according to some examples of the present disclosure. [Figure 14] Shows exemplary verification inputs using a verification card in a three-dimensional environment, according to some examples of the present disclosure.

[0023] [Figure 15] Is a flowchart showing an exemplary method for obtaining access to protected content, according to some examples of the present disclosure.

[0024] [Figure 16] This flowchart illustrates exemplary methods for obtaining access to protected content within a trusted location, using several examples from this disclosure.

[0025] [Figure 17] Examples of transmitting electronic devices are shown by some examples of the disclosure.

[0026] [Figure 18] This disclosure provides several examples of receiving electronic devices and interactions with them.

[0027] [Figure 19] This disclosure provides several examples of receiving electronic devices and interactions with them. [Figure 20] This disclosure provides several examples of receiving electronic devices and interactions with them. [Figure 21] This disclosure provides several examples of receiving electronic devices and interactions with them. [Figure 22] This disclosure provides several examples of receiving electronic devices and interactions with them.

[0028] [Figure 23A] This disclosure provides several examples of receiving electronic devices and interactions with them. [Figure 23B] This disclosure provides several examples of receiving electronic devices and interactions with them.

[0029] [Figure 24] This disclosure provides several examples illustrating exemplary verification inputs for electronic devices within a trusted location boundary.

[0030] [Figure 25]This flowchart illustrates some examples of methods for obtaining access to protected content in this disclosure.

[0031] [Figure 26] This disclosure provides several examples of electronic devices that display protected content and interactions with such devices. [Figure 27] This disclosure provides several examples of electronic devices that display protected content and interactions with such devices. [Figure 28] This disclosure provides several examples of electronic devices that display protected content and interactions with such devices.

[0032] [Figure 29] This flowchart illustrates exemplary methods for navigating restricted content, using several examples from this disclosure. [Modes for carrying out the invention]

[0033] Some examples of this disclosure relate to systems and methods for an electronic device communicating with a display and one or more input devices to receive a protected document containing content from a transmitting device. In some examples, upon receiving the protected document, one or more prompts may be displayed for one or more inputs to access the protected document. While one or more prompts are displayed, one or more inputs may be detected. Upon detecting one or more inputs, and in accordance with a determination that one or more inputs satisfy one or more criteria, including criteria that are satisfied when one or more inputs authenticate a user, the electronic device obtains access to the content of the protected document.

[0034] Some examples of this disclosure relate to a system and method for an electronic device communicating with one or more displays, one or more input devices, and a second electronic device to receive protected content transmitted by the second electronic device, the protected content being associated with the viewpoint of a user of the second electronic device and including at least a portion of the three-dimensional environment of the second electronic device. In some examples, upon receiving the protected content, the electronic device displays a first user interface associated with accessing the protected content via one or more displays. In some examples, the first user interface includes a representation of at least a portion of the three-dimensional environment that is visible from the viewpoint of a user of the second electronic device and is displayed with a first amount of occlusion, and an indication of an authentication process associated with obtaining access to the protected content. While displaying the first user interface, the electronic device detects one or more inputs via one or more input devices. In some examples, in response to the detection of one or more inputs and in accordance with the determination that one or more inputs satisfy one or more criteria, the electronic device acquires access to protected content transmitted by the second electronic device, which includes updating the display of at least a portion of the representation of the three-dimensional environment of the second electronic device to have a second shielding amount smaller than a first shielding amount. In some examples, in response to the detection of one or more inputs and in accordance with the determination that one or more inputs do not satisfy one or more criteria, the electronic device maintains the display of at least a portion of the representation of the three-dimensional environment of the second electronic device with a first shielding amount.

[0035] Some examples of this disclosure relate to methods for electronic devices that communicate with one or more displays and include one or more input devices. In some examples, while displaying protected content in a three-dimensional environment via one or more displays, the electronic device detects inputs via one or more input devices that correspond to a request to perform one or more first actions involving the protected content, including capturing an image of the protected content. In some examples, the image includes at least a portion of the three-dimensional environment surrounding the protected content that is visible from the viewpoint of a user of the electronic device. In some examples, in response to detecting an input, the electronic device initiates a process to perform one or more first actions, including generating a first image corresponding to the image, and displays a representation of the first image in the three-dimensional environment via one or more displays. In some examples, the representation of the first image includes a visual indication that the visibility of the protected content is limited, without including the protected content, and an occluded representation of at least a portion of the three-dimensional environment that is visible from the viewpoint of a user of the electronic device.

[0036] Figure 1 shows an electronic device 101 that presents a three-dimensional environment (e.g., an extended reality (XR) environment, or a computer-generated reality (CGR) environment, optionally including representations of physical and / or virtual objects) in some examples of the present disclosure. In some examples, as shown in Figure 1, the electronic device 101 is a head-mounted display or other head-mountable device configured to be worn on the head of the user of the electronic device 101. Examples of the electronic device 101 are described below with reference to the architectural block diagram in Figure 2A. As shown in Figure 1, the electronic device 101 and the table 106 are located within a physical environment. The physical environment may include physical features such as physical surfaces (e.g., floor, wall) or physical objects (e.g., table, lamp, etc.). In some examples, the electronic device 101 may be configured to detect and / or capture an image of the physical environment, including the table 106 (shown within the field of view of the electronic device 101).

[0037] In some examples, as shown in Figure 1, the electronic device 101 includes one or more internal image sensors 114a (e.g., eye-tracking cameras as described below with reference to Figures 2A-2B) oriented toward the user's face. In some examples, the internal image sensors 114a are used for eye tracking (e.g., detecting the user's gaze). The internal image sensors 114a are optionally positioned in the left and right portions of the display 120 to enable eye tracking of the user's left and right eyes. In some examples, the electronic device 101 also includes external image sensors 114b and 114c facing outward from the user to detect and / or capture the movement of the physical environment of the electronic device 101 and / or the user's hands or other body parts.

[0038] In some examples, the display 120 has a field of view visible to the user. In some examples, the field of view visible to the user is the same as the field of view of the external image sensors 114b and 114c. For example, if the display 120 is optionally part of a head-mounted device, the field of view of the display 120 is optionally the same as or similar to the field of view of the user's eyes. In some examples, the field of view visible to the user is different from the field of view of the external image sensors 114b and 114c (e.g., narrower than the field of view of the external image sensors 114b and 114c). In other examples, the field of view of the display 120 may be smaller than the field of view of the user's eyes. The user's viewpoint determines which content is visible within the field of view, and the viewpoint generally defines the location and orientation relative to the three-dimensional environment. As the user's viewpoint moves, the field of view of the three-dimensional environment also moves accordingly. In some examples, the electronic device 101 may be an optical see-through device, where the display 120 is a transparent or translucent display through which a portion of the physical environment can be directly seen. In some examples, the display 120 may be contained within a transparent lens, or it may overlap the entire transparent lens or a portion thereof. In other examples, the electronic device may be a video passthrough device in which the display 120 is an opaque display configured to display an image of the physical environment using images captured by external image sensors 114b and 114c. Although Figure 1 shows a single display, it is understood that the display 120 optionally includes two or more displays. For example, the display 120 optionally includes a stereo pair of displays (e.g., left and right display panels for the user's left and right eyes) having displayed outputs that are merged (e.g., by the user's brain) to create a view of the content shown in Figure 1.In some examples, as will be described in more detail below with reference to Figures 2A and 2B, the display 120 includes a transparent or translucent surface (e.g., a lens) that does not have a display function (e.g., is therefore unable to generate and display virtual objects 104), or a corresponding alternative, presenting a direct view of the physical environment within the user's field of view (e.g., the user's field of vision).

[0039] In some examples, the electronic device 101 is configured to display a virtual object 104 in a three-dimensional environment (for example, in response to a trigger). The virtual object 104 is represented by a cube, as shown in Figure 1, which does not exist in the physical environment but is displayed in the three-dimensional environment by being placed on a table 106 (for example, a real-world table or its representation). Optionally, the virtual object 104 is displayed on the surface of the table 106 in the three-dimensional environment, as shown via the display 120 of the electronic device 101, in response to the detection of a plane of the table 106 in the physical environment 100.

[0040] The virtual object 104 is a representative virtual object, and it is understood that one or more different virtual objects (of various numbers of dimensions, such as two-dimensional or other three-dimensional virtual objects) can be contained within and rendered in a three-dimensional environment. For example, a virtual object can represent an application or user interface displayed in a three-dimensional environment. In some examples, a virtual object can represent content corresponding to an application and / or content displayed via a user interface in a three-dimensional environment. In some examples, the virtual object 104 is optionally interactive, allowing the user to virtually touch, tap, move, rotate, or otherwise interact with the virtual object 104, and is configured to respond to user input (e.g., air gestures such as air pinch gestures, air tap gestures, and / or air touch gestures).

[0041] As described herein, one or more air pinch gestures performed by a user (e.g., using hand 103 in Figure 1) are detected by one or more input devices of the electronic device 101 and interpreted as one or more user inputs directed to content displayed by the electronic device 101. In addition or instead, in some examples, one or more user inputs interpreted by the electronic device 101 as directed to content displayed by the electronic device 101 (e.g., virtual object 104) are detected via one or more hardware input devices (e.g., controllers, touchpads, proximity sensors, buttons, sliders, knobs, etc.) rather than via one or more input devices configured to detect air gestures such as one or more air pinch gestures performed by a user. Such depictions are intended to be illustrative rather than limiting, and users may optionally provide user input using different air gestures and / or other forms of input.

[0042] In some examples, electronic device 101 may be configured to communicate with a second electronic device, such as a companion device. For example, as shown in Figure 1, electronic device 101 optionally communicates with electronic device 160. In some examples, electronic device 160 corresponds to a mobile electronic device such as a smartphone, tablet computer, smartwatch, laptop computer, or other electronic device. In some examples, electronic device 160 corresponds to a non-mobile electronic device (e.g., a desktop computer, server, etc.) that is generally stationary and not easily moved within the physical environment. Additional examples of electronic device 160 are described below with reference to the architectural block diagram in Figure 2B. In some examples, electronic device 101 and electronic device 160 are associated with the same user. For example, in Figure 1, electronic device 101 may be positioned on the user's head (e.g., worn on the head), and electronic device 160 may be positioned near electronic device 101, such as in the user's hand 103 (e.g., the hand 103 is holding electronic device 160), in the user's pocket or bag, or on a surface near the user. Electronic devices 101 and 160 are optionally associated with the same user account of the user (for example, the user is logged into the user account on both electronic devices 101 and 160). Additional details regarding communication between electronic device 101 and electronic device 160 are given below with reference to Figures 2A and 2B.

[0043] In some examples, displaying an object within a three-dimensional environment is triggered by or enables interaction with one or more user interface objects within that environment. For example, initiating the display of an object within a three-dimensional environment may involve interaction with one or more virtual options / affordances displayed within the three-dimensional environment. In some examples, the user's gaze may be tracked by an electronic device as input to identify one or more virtual options / affordances to be selected when initiating the display of an object within the three-dimensional environment. For example, gaze can be used to identify one or more virtual options / affordances to be selected using another selection input. In some examples, virtual options / affordances may be selected using hand-tracking input detected via an input device communicating with an electronic device. In some examples, an object displayed within a three-dimensional environment may be moved and / or oriented within the three-dimensional environment according to a movement input detected via an input device.

[0044] The following description describes an electronic device that communicates with one or more displays and one or more input devices. The electronic device is understood to optionally communicate with one or more other physical user interface devices, such as a touch-sensitive surface, a physical keyboard, a mouse, a joystick, a hand-tracking device, an eye-tracking device, or a stylus. Furthermore, as described above, the described electronic device, display, and touch-sensitive surface are understood to optionally be distributed between two or more devices. Therefore, as used in this disclosure, information displayed on or by an electronic device is used optionally to describe information output by the electronic device for display on a separate display device (touch-sensitive or non-touch-sensitive). Similarly, as used in this disclosure, input received on an electronic device (e.g., touch input received on a touch-sensitive surface of the electronic device, or touch input received on the surface of a stylus) is used optionally to describe input received on an input device separate from the input device from which the electronic device receives input information.

[0045] The device generally supports a variety of applications, including drawing applications, presentation applications, word processing applications, website creation applications, disk authoring applications, spreadsheet applications, game applications, telephone applications, video conferencing applications, email applications, instant messaging applications, training support applications, photo management applications, digital camera applications, digital video camera applications, web browsing applications, digital music playback applications, TV channel viewing applications, and / or digital video playback applications.

[0046] Figures 2A and 2B show block diagrams of exemplary architectures of electronic devices according to some examples of the present disclosure. In some examples, electronic device 201 and / or electronic device 260 comprises one or more electronic devices. For example, each electronic device 201 could be a portable device, an auxiliary device for communicating with another device, a head-mounted display, a head-mounted speaker, and so on. In some examples, electronic device 201 corresponds to electronic device 101 described with reference to Figure 1. In some examples, electronic device 260 corresponds to electronic device 160 described with reference to Figure 1.

[0047] As shown in Figure 2A, the electronic device 201 optionally includes one or more sensors, such as one or more hand tracking sensors 202, one or more location sensors 204A, one or more image sensors 206A (optionally corresponding to internal image sensors 114a and / or external image sensors 114b and 114c in Figure 1), one or more touch-sensing surfaces 209A, one or more motion and / or orientation sensors 210A, one or more eye tracking sensors 212, one or more microphones 213A or other sound sensors, and one or more body tracking sensors (e.g., torso and / or head tracking sensors). The electronic device 201 optionally includes one or more output devices, such as one or more display generating components 214A corresponding to the display 120 in Figure 1, one or more speakers 216A, and one or more tactile output devices (not shown). The electronic device 201 optionally includes one or more processors 218A, one or more memories 220A, and / or communication circuits 222A. For communication between the aforementioned components of the electronic device 201, one or more communication buses 208A are optionally used.

[0048] In addition, the electronic device 260 optionally includes the same or similar components as the electronic device 201. For example, as shown in Figure 2B, the electronic device 260 optionally includes one or more location sensors 204B, one or more image sensors 206B, one or more touch-sensing surfaces 209B, one or more orientation sensors 210B, one or more microphones 213B, one or more display generation components 214B, one or more speakers 216B, one or more processors 218B, one or more memories 220B, and / or communication circuits 222B. Optionally, one or more communication buses 208B are used for communication between the aforementioned components of the electronic device 260.

[0049] Electronic devices 201 and 260 are optionally configured to communicate via a wired or wireless connection between the two electronic devices (for example, via communication circuits 222A and 222B). For example, as shown in Figure 2A, electronic device 260 may function as a companion device to electronic device 201. For example, in some examples, electronic device 260 processes sensor inputs from electronic devices 201 and 260 and / or generates content for display using the display generation component 214A of electronic device 201.

[0050] Communication circuits 222A and 222B optionally include circuits for communicating with electronic devices and networks such as the Internet, intranets, wired networks and / or wireless networks, cellular networks and wireless local area networks (LANs). Communication circuits 222A and 222B optionally include circuits for communicating using short-range communication such as near-field communication (NFC) and / or Bluetooth®. In some examples, communication circuits 222A and 222B include or support Wi-Fi (e.g., 802.11 protocol), Ethernet, ultra-wideband ("UWB"), high-frequency systems (e.g., 900MHz, 2.4GHz, and 5.6GHz communication systems), or any other communication protocol, or any combination thereof.

[0051] One or more processors 218A, 218B include one or more general-purpose processors, one or more graphics processors, and / or one or more digital signal processors. In some examples, one or more processors 218A, 218B include one or more microprocessors, one or more central processing units, one or more application-specific integrated circuits, one or more field-programmable gate arrays, one or more programmable logic devices, or a combination of such devices. In some examples, memory 220A and / or 220B is a non-temporary computer-readable storage medium (e.g., flash memory, random-access memory, or other volatile or non-volatile memory or storage device) that stores computer-readable instructions configured to be executed by one or more processors 218A, 218B to perform the techniques, processes, and / or methods described herein. In some examples, memory 220A and / or 220B may include two or more non-temporary computer-readable storage media. Non-temporary computer-readable storage media can be any (non-signal) medium capable of tangibly storing or storing computer-executable instructions used by or in connection with an instruction execution system, apparatus, or device. In some examples, the storage medium is temporary computer-readable storage media. In some examples, the storage medium is non-temporary computer-readable storage media. Non-temporary computer-readable storage media may include, but are not limited to, magnetic storage devices, optical storage devices, and / or semiconductor storage devices. Examples of such storage devices include magnetic disks, compact discs (CDs), digital versatile discs (DVDs), or optical discs based on Blu-ray technology, as well as persistent solid-state memory such as flash drives and solid-state drives.

[0052] In some examples, one or more display generating components 214A, 214B include a single display (e.g., a liquid-crystal display (LCD), an organic light-emitting diode (OLED), or another type of display). In some examples, one or more display generating components 214A, 214B include multiple displays. In some examples, one or more display generating components 214A, 214B may include touch-enabled displays (e.g., touchscreens), projectors, holographic projectors, retinal projectors, transparent or translucent displays, etc. In some examples, the electronic device does not include one or more display generating components 214A or 214B. For example, instead of one or more display generating components 214A or 214B, some electronic devices include transparent or translucent lenses or other surfaces that are not configured to display or present virtual content. However, in such cases, it should be understood that electronic device 201 and / or electronic device 260 may optionally be equipped with one or more other components shown in Figures 2A and 2B and described herein, such as one or more hand tracking sensors 202, one or more eye tracking sensors 212, one or more image sensors 206A, and / or one or more motion and / or orientation sensors 210A. Alternatively, in some examples, one or more display generation components 214A or 214B are provided separately from electronic devices 201 and / or 260. For example, one or more display generation components 214A, 214B communicate with electronic device 201 (and / or electronic device 260) but are not integrated with electronic devices 201 and / or electronic devices 260 (e.g., within the housing of electronic devices 201, 260). In some examples, electronic devices 201 and 260 each include one or more touch-sensitive surfaces 209A and 209B for receiving user input such as tap input and swipe input or other gestures (e.g., hand gestures or finger gestures).In some examples, one or more display generating components 214A, 214B and one or more touch-sensitive surfaces 209A, 209B form one or more touch-sensitive displays (for example, touchscreens integrated with each of the electronic devices 201 and 260, or external touchscreens of each of the electronic devices 201 and 260 that communicate with each of the electronic devices 201 and 260).

[0053] Each electronic device 201 and 260 optionally includes one or more image sensors 206A and 206B. The one or more image sensors 206A, 206B optionally include one or more visible light image sensors, such as charge-coupled device (CCD) sensors and / or complementary metal-oxide-semiconductor (CMOS) sensors, capable of operating to acquire images of physical objects from a real-world environment. The one or more image sensors 206A, 206B also optionally include one or more IR sensors, such as passive or active infrared (IR) sensors, for detecting infrared light from a real-world environment. For example, an active IR sensor includes an IR emitter for emitting infrared light into the real-world environment. The one or more image sensors 206A, 206B also optionally include one or more cameras configured to capture the movement of physical objects in a real-world environment. One or more image sensors 206A, 206B also optionally include one or more depth sensors configured to detect the distance of a physical object from electronic devices 201, 260. In some examples, information from one or more depth sensors can enable the device to identify an object in a real-world environment and distinguish it from other objects in the real-world environment. In some examples, one or more depth sensors can enable the device to determine the texture and / or topography of an object in a real-world environment. In some examples, one or more image sensors 206A or 206B are contained within an electronic device different from electronic devices 201 and / or 260. For example, one or more image sensors 206A, 206B communicate with electronic devices 201, 260 but are not integrated with electronic devices 201, 260 (e.g., within the housing of electronic devices 201, 260).In particular, in some examples, one or more cameras with one or more image sensors 206A, 206B are integrated and / or coupled with one or more devices separate from electronic devices 201 and / or 260, such as one or more input and / or output devices (e.g., one or more speakers such as earphones or headphones and / or one or more microphones) that include one or more image sensors 206A, 206B (for example, but communicating with electronic devices 201 and / or 260). In some examples, electronic device 201 or electronic device 260 corresponds to a head-worn speaker (e.g., headphones or earbuds). In such cases, electronic device 201 or electronic device 260 is equipped with a subset of other components shown in Figures 2A and 2B and described herein. In some such examples, the electronic device 201 or electronic device 260 is equipped with one or more image sensors 206A, 206B, one or more motion and / or orientation sensors 210A, 210B, and / or speakers 216A, 216B.

[0054] In some examples, electronic devices 201, 260 use a combination of CCD sensors, event cameras, and depth sensors to detect the physical environment surrounding the electronic devices 201, 260. In some examples, one or more image sensors 206A, 206B include a first image sensor and a second image sensor. The first and second image sensors work together and are configured to selectively capture different information about physical objects in the real-world environment. In some examples, the first image sensor is a visible light image sensor and the second image sensor is a depth sensor. In some examples, electronic devices 201, 260 use one or more image sensors 206A, 206B to detect the position and orientation of the electronic devices 201, 260 and / or one or more display generating components 214A, 214B in the real-world environment. For example, electronic devices 201 and 260 use one or more image sensors 206A and 206B to track the position and orientation of one or more display generating components 214A and 214B relative to one or more stationary objects in a real-world environment.

[0055] In some examples, electronic devices 201 and 260 each include one or more microphones 213A and 213B, or other sound sensors. Electronic devices 201 and 260 optionally use one or more microphones 213A and 213B to detect sounds from the user and / or the user's real-world environment. In some examples, one or more microphones 213A and 213B optionally include an array of microphones (multiple microphones) working together to identify ambient noise or to locate sound sources in the space of the real-world environment.

[0056] Electronic devices 201 and 260 each include one or more location sensors 204A and 204B for detecting the location of electronic device 201 and / or one or more display generation components 214A, and the location of electronic device 260 and / or one or more display generation components 214B, respectively. For example, one or more location sensors 204A, 204B may include a global positioning system (GPS) receiver that receives data from one or more satellites, enabling electronic devices 201 and 260 to determine the absolute position of the devices in the physical world.

[0057] Electronic devices 201 and 260 each include one or more orientation sensors 210A and 210B for detecting the orientation and / or movement of electronic device 260 and / or one or more display generating components 214A, and the orientation and / or movement of electronic device 201 and / or one or more display generating components 214B, respectively. For example, electronic devices 201 and 260 use one or more orientation sensors 210A and 210B to track changes in the position and / or orientation of electronic devices 201 and 260 and / or one or more display generating components 214A and 214B relative to physical objects in a real-world environment. The one or more orientation sensors 210A and 210B optionally include one or more gyroscopes and / or one or more accelerometers.

[0058] The electronic device 201 includes, in some examples, one or more hand tracking sensors 202 and / or one or more eye tracking sensors 212. Although the electronic device 201 is referred to as a hand tracking sensor or an eye tracking sensor, it is understood that it may optionally include, additionally or alternatively, one or more other body tracking sensors, such as one or more leg, one or more torso, and / or one or more head tracking sensors. The one or more hand tracking sensors 202 are configured to track the position and / or location of one or more parts of the user's hand and / or the motion of one or more parts of the user's hand relative to one or more display generating components 214A and / or another defined coordinate system. The one or more eye tracking sensors 212 are configured to track the position and movement of the user's gaze (e.g., more commonly, the user's attention including the eyes, face, or head) relative to the real world or a three-dimensional environment and / or to one or more display generating components 214A. In some examples, one or more hand tracking sensors 202 and / or one or more eye tracking sensors 212 are implemented together with one or more display generating components 214A. In some examples, one or more hand tracking sensors 202 and / or one or more eye tracking sensors 212 are implemented separately from one or more display generating components 214A. In some examples, the electronic device 201 does not, alternatively, include one or more hand tracking sensors 202 and / or one or more eye tracking sensors 212. In some such examples, one or more display generating components 214A may be utilized by an electronic device 260 to provide a three-dimensional environment, and the electronic device 260 may utilize inputs and other data collected via one or more other sensors of the electronic device 201 (e.g., one or more location sensors 204A, one or more image sensors 206A, one or more touch-sensing surfaces 209A, one or more motion and / or orientation sensors 210A, and / or one or more microphones 213A or other sound sensors) as inputs and data to be processed by one or more processors 218B of the electronic device 260.Additionally or alternatively, the electronic device 260 may optionally utilize one or more display generating components 214A by the electronic device 260 to provide a three-dimensional environment, in some such examples that do not include other components shown in Figure 2B, such as a location sensor 204B, an image sensor 206B, and / or a touch-sensing surface 209B, and the electronic device 260 may utilize inputs and other data collected via one or more motion and / or orientation sensors 210A (and / or one or more microphones 213A) of the electronic device 201 as inputs.

[0059] In some examples, one or more hand tracking sensors 202 (and / or one or more other body tracking sensors such as leg, torso, and / or one or more head tracking sensors) may be used, along with one or more image sensors 206 (e.g., one or more IR cameras, 3D cameras, depth cameras, etc.) that capture three-dimensional information from the real world, including one or more body parts (e.g., the hands, legs, or torso of a human user). In some examples, the hand may be resolved with sufficient resolution to distinguish the fingers and their respective positions. In some examples, one or more image sensors 206A may be positioned relative to the user so as to define the field of view of the one or more image sensors 206A and the interaction space where the finger / hand position, orientation, and / or movement captured by the image sensors are used as input (e.g., to distinguish the user's stationary hand from other hands of other people in the real-world environment). Tracking fingers / hands for input (e.g., gestures, touches, taps, etc.) may have the advantage of not requiring the user to touch, hold, or wear any kind of beacon, sensor, or other marker.

[0060] In some examples, one or more eye-tracking sensors 212 include at least one eye-tracking camera (e.g., an IR camera) and / or an illumination source (e.g., an IR light source, LED, etc.) that emits light toward the user's eye. The eye-tracking camera may be directed toward the user's eye so as to receive reflected IR light from the light source directly or indirectly through the eye. In some examples, both eyes are tracked separately by their respective eye-tracking cameras and illumination sources, and the focus / line of sight can be determined from tracking both eyes. In some examples, one eye (e.g., the dominant eye) is tracked by one or more respective eye-tracking cameras / illumination sources.

[0061] Electronic devices 201 and 260 are not limited to the components and configurations shown in Figures 2A and 2B, and may include fewer, other, or additional components in multiple configurations. In some examples, electronic device 201 and / or electronic device 260 can each be implemented (e.g., as a system) among multiple electronic devices. In some such examples, each (or more) electronic device may each include one or more of the same components described above, such as various sensors, one or more display generation components, one or more speakers, one or more processors, one or more memories, and / or communication circuits. Persons (single or multiple) who use electronic device 201 and / or electronic device 260 are optionally referred to herein as users (single or multiple) of the device.

[0062] Here, we consider an example of authenticating a user to access protected content. For example, protected content may be transmitted from a transmitting device to a receiving electronic device (e.g., electronic device 201). In one or more examples, the transmitting device includes the same or similar components having the same or similar functions as the electronic devices shown in Figure 2. In some examples, one or more authentication options may be selected by the user of the transmitting device. For example, Figure 3 shows a display 302 of the transmitting device. The transmitting device may be a mobile device, laptop, desktop, head-mounted display device, or any electronic device described herein.

[0063] The display 302 may optionally present a virtual window 304 that includes a protected content indicator 306 (for example, information about the protected content such as the title, glyphs / icons representing the document type, etc.), one or more recipients 308 (for example, User A), one or more authentication options 310, and one or more user interface buttons 312 for activating or canceling the sharing of the protected content.

[0064] The protected content indicator 306 may be associated with protected content being transmitted from a transmitting device to a receiving electronic device. In some examples, the protected content may be a document, image, video, or other content. In some examples, the protected content may be editable by a user of the receiving electronic device (e.g., electronic device 201). For example, a user of the receiving electronic device may receive an executable document that requires a signature from the user of the receiving electronic device. Thus, in such an example, once the user of the receiving electronic device gains access to the executable document, the user of the receiving electronic device may add a signature (e.g., an electronic signature) to the executable document.

[0065] In some examples, the protected content indicator 306 may include an emblem representing the content of the protected content. For example, the protected content indicator 306 may be a play button emblem indicating that the protected content contains video. In some examples, the protected content indicator 306 may be interactive. For example, the protected content indicator 306 may be activated by a selection (e.g., a click or press) from the user of the transmitting electronic device. Once activated, the user of the transmitting electronic device may be prompted to select another file. Additionally or alternatively, once activated, a different virtual window may be displayed on the display 302, containing additional details associated with the protected content (e.g., file size, last modified date, etc.).

[0066] The virtual window 304 may contain a recipient 308. In some embodiments, the recipient 308 may be a known user of the receiving electronic device. In some examples, the recipient 308 corresponds to a suggested recipient, such as a user belonging to the sender device's contact list (e.g., a favorite contact, recently interacted contact, or new contact in a contact list of a communication application, messaging application, email application, social media application, etc.). The recipient 308 can be manually entered into the sender electronic device (e.g., selected from a contact list and / or manually entered via text insertion by the user of the sender electronic device). In some examples, the intended recipient may not be a person using the receiving device. In one or more examples, the recipient 308 may be activated by selection from the user of the sender electronic device (e.g., by a click or press). Once activated, the user of the sender electronic device may be prompted to select another recipient from their contact list. In some examples, once activated, the user of the sender electronic device may be prompted to manually enter information associated with the recipient.

[0067] To maintain the security of the protected content, the protected content includes one or more authentication options 310. In some examples, a device or user-defined default authentication option 310 is presented. In some examples, the sender can select one or more authentication options 310 that the user of the receiving electronic device must perform before being granted access to the protected content. For example, by activating an authentication option (e.g., via a press, tap, or click), the sender electronic device can close a virtual window 304 and open a virtual window 404, as described below. Furthermore, one or more authentication options 310 are described in more detail below. Alternatively, in some examples, the receiver can select from one or more authentication options 310, through which the receiver is authenticated by the receiving electronic device before gaining access to the protected content.

[0068] One or more user interface buttons 312 can be displayed in the virtual window 304. In one or more examples, one or more user interface buttons 312 may include a "Share" button. Activating the "Share" button can initiate the transmission of protected content from the sending device to the receiving electronic device. In some examples, one or more user interface buttons 312 may include a "Cancel" button. Activating the Cancel button can close the virtual window 304 on the display 302. Furthermore, activating the Cancel button can stop the transmission of protected content to the receiving electronic device.

[0069] Figure 4 shows an exemplary transmitting electronic device in some examples of the present disclosure. As shown in Figure 4, the display 402 of the transmitting electronic device may include (for example, display) a virtual window 404 and a protected content indicator 406. The virtual window 404 and the protected content indicator 406 may be any virtual window and protected content indicator, respectively, as described herein. The virtual window 404 may include one or more authentication options 408 and an expiration option 410. As shown in Figure 4, the one or more authentication options 408 may include a toggle slider that, when selected (for example, toggled to the right), activates one or more authentication options. In some examples, the authentication options 408 may include a radial menu, a drop-down menu, an options carousel, etc. For example, in Figure 4, one or more authentication options 408 corresponding to code verification and virtual representation image verification may be active. When protected content is transmitted to a receiving electronic device, the user of the receiving electronic device must satisfy the respective authentication requirements associated with one or more active authentication options (e.g., code verification authentication and virtual representation image verification) in order to obtain access to the protected content. The expiration option 410 can determine how long a user on the receiving electronic device has access to the protected content. In some examples, the expiration option 410 can indicate that access to the protected content will never expire. In other examples, the expiration option 410 can indicate that access to the protected content will expire within an hour, a day, a week, a month, etc. The expiration option 410 can be linked to individual applications on the sending electronic device (e.g., calendar applications, reminder applications, memo applications, email applications, etc.) and can automatically populate individual expiration dates associated with the expiration option 410 within those individual applications.The expiration option 410 indicates how long a user of the receiving electronic device can access the protected content, but it should be noted that the user of the receiving electronic device must still meet the selected authentication requirements associated with one or more authentication options 408 in order to gain access to the protected content. In one or more examples, the time-based analysis option 412 is optionally selected to monitor time-based actions associated with the protected content, as will be described in more detail below.

[0070] Figure 5A shows an electronic device 501 having a display 502 configured to display a virtual window 504. The virtual window 504 is displayed in a three-dimensional (3D) environment and may include one or more authentication options 506 and one or more user interface buttons 510 and 512. Note that the electronic devices (one or more) shown in Figures 5A to 14 may optionally correspond to the receiving devices described above. The one or more authentication options 506 may include ice scan, code verification authentication, virtual representation image verification, etc. In some examples, the one or more authentication options 506 may be selected by the user of the sending device as described herein. In some examples, the virtual window 504 may include an indication that a time-based analysis 508 associated with the protected content will be monitored. The time-based analysis may include timestamps associated with various actions performed on the protected content. For example, the time-based analysis 508 may include indications of when access to the protected content is permitted, when the protected content is no longer accessed by the user of the electronic device 501, when modifications are made to the protected content, or other things. The time-based analysis 508 may be returned to the sending device in real time to provide live updates on the protected content. In some examples, the user of the electronic device 501 may revoke access based on at least the time-based analysis 508. The time-based analysis 508 may indicate that more than 24 hours have passed since the user of the electronic device 501 gained access to the protected content, and accordingly, the sending device may revoke the user's access to the protected content. The time-based analysis 508 may include timestamps corresponding to one or more modifications to the protected content. For example, the protected content may be an editable portable document format (PDF) file.A time-based analysis 508 associated with an editable PDF file may have a timestamp corresponding to the user of the electronic device 501 editing a portion of the text contained in the PDF file. It should be noted that the user of the electronic device 501 may optionally opt in to sharing the time-based analysis with the transmitting electronic device. However, in some examples, if the transmitting electronic device optionally chooses to monitor the time-based analysis, the user of the electronic device 501 does not need to opt out of sharing the time-based analysis with the transmitting electronic device.

[0071] Further reference to the virtual window 504, one or more user interface buttons 510 and 512 can be displayed within the virtual window 504. One or more user interface buttons 510 and 512 can cause one or more changes to the display of the virtual window 504 via the display 502. For example, user interface button 510 may include a "close" button. The "close" button can close the virtual window 504 on the display 502. Closing the virtual window 504 also causes the receiving device to send an indication to the transmitting electronic device that the protected content has not been accessed. Furthermore, in Figure 5A, user interface button 512 may include a "continue" button. Selecting the "continue" button can initiate an authentication process corresponding to one or more selected authentication options 506. For example, selecting the "continue" button can close the virtual window 504 and prompt the user of the electronic device 501 with one or more authentication prompt windows, as will be described in more detail herein. One or more authentication prompt windows corresponding to one or more authentication options 506 can be displayed in any order. In some examples, instead of displaying one or more authentication prompt windows, an audio and / or haptic prompt is initiated. Note that the audio and / or haptic prompt may be associated with individual options of one or more authentication options 506 without having a visual indication of each option of the one or more authentication options 506. Note that one or more user interface buttons 510 and 512 may be selected via one or more gestures performed by the user's hand on one or more input devices and / or electronic devices 501.

[0072] Figure 5B shows the hand of an electronic device 501 performing one or more gestures to select one or more options on a display 502 via a hand 520 performing a “pinch” gesture as shown in Figure 5A. Note that the electronic device 501 may have one or more cameras configured to monitor the one or more gestures performed by the hand 520. In some examples, the gaze location 522 of one or more eyes of the user of the electronic device 501 may indicate a location on the display 502 to which the gestures performed by the hand 520 may be directed. Note that one or more cameras of the electronic device 501 may be configured to perform eye tracking of one or more eyes of the user to set the gaze location 522, as similarly described above with reference to Figure 2. In some examples, the gaze location 522 may indicate that one or more eyes are focused on a portion of a virtual window 504 that has a “continue” option, as shown in Figure 5B. Therefore, in some examples, a user interface button may be selected by the electronic device 501 in response to the detection of a hand 520 performing a pinch gesture while the gaze location 522 is directed toward the user interface button. Furthermore, as described herein, it should be noted that the electronic device 501 may detect a hand 520 performing one or more gestures (e.g., air pinch gesture, air tap or touch gesture, air swipe gesture, air toss gesture, etc.) directed toward one or more additional or alternative virtual objects in the 3D environment (e.g., different from the virtual window 504) in order to perform a corresponding action with a virtual object displayed via the display 502.

[0073] Figure 6 shows a display 602 that displays a digital prompt 604 associated with one or more authentication options described herein. The digital prompt 604 may include an ice scan indicator 606. The ice scan indicator 606 may include a visual representation of the associated authentication. For example, the ice scan indicator 606 may be associated with the ice scan authentication options described above. In some examples, the ice scan indicator 606 can act as a visual command to prepare the user of the electronic device 601 to scan one or more of the user's eyes. In some examples, when the display 602 displays a digital prompt 604 (e.g., an ice scan prompt), one or more cameras 608 of the electronic device 601 may focus on one or more of the user's eyes to perform an ice scan. In some examples, upon determining that the ice scan was successful, the ice scan indicator 606 may change color (e.g., from a first color to a second color, such as red to blue) to confirm to the user of the electronic device 601 that the ice scan was successful. In some examples, the ice scan indicator 606 may disappear from the display 602, and a checkmark indicator may appear to confirm to the user of the electronic device 601 that the ice scan was successful.

[0074] Figure 7 shows a display 702 displaying a failure window 704. In some examples, the display 702 may display a failure window 704 when the user's ice scan on the electronic device 701 fails. In another example, the display 702 may display a failure window when the electronic device loses connectivity to a wireless network. In yet another example, the display 702 may display a failure window if the transmitting electronic device revokes access to protected content while the user of the electronic device 701 is attempting to provide one or more authentication inputs. The failure window 704 may include selectable options (e.g., user interface buttons) such as a retry option 706 and a cancel option 708. In some examples, selecting the retry option 706 may cause the display 702 to redisplay the ice scan prompt shown in Figure 6 above. In some examples, after a second (or third or fourth) attempt to perform an ice scan on the user of the electronic device, the electronic device 701 stops displaying the failure window 704 and completely abandons the authentication process. In one or more examples, the display 702 displays a virtual window and / or a notification that authentication failed. In some examples, display 702 displays an alternative authentication prompt (e.g., virtual representation image verification) instead of retrying the ice scan. In some examples, selecting the cancel option 708 can stop the authentication process from proceeding. Note that the user of the electronic device 701 may perform one or more gestures with their own hands to select the retry option 706 or the cancel option 708.

[0075] Figure 8 shows a display 802 displaying a virtual representation image verification prompt 804. In some examples, the virtual representation image verification prompt 804 may include a persona window 806, a user interface button 810, and a user interface button 808. In some examples, the persona window 806 may include a live feed of the persona of the electronic device 801. The persona may be a virtual representation of the user of the electronic device 801, such as an avatar corresponding to the user of the electronic device 801, an image of the user of the electronic device 801, or a video feed of the user of the electronic device 801. In some examples, the persona corresponds to a virtual representation of the user previously captured and / or generated and stored in the electronic device 801. For example, the electronic device 801 may have only one virtual representation of the user stored in the electronic device 801. In some examples, the persona of the user of the electronic device 801 is captured and / or generated in the electronic device 801 during the authentication process. In some examples, the persona window 806 may have a countdown before taking a snapshot of the persona (e.g., virtual representation image verification). Once virtual representation image verification is obtained, selecting user interface button 808 causes electronic device 801 to send the virtual representation image verification to the transmitting electronic device. In some examples, selecting user interface button 810 may cause the authentication process to be abandoned entirely. In some examples, after a second (or third or fourth) attempt to obtain the virtual representation image verification of the user of electronic device 801, if the verification of the virtual representation image verification still fails, electronic device 801 may abandon the authentication process entirely. Note that the user of electronic device 801 may perform one or more gestures with their hands to select user interface buttons 808 and 810.

[0076] Figure 9A shows a display 902 displaying a code verification prompt 904. In some examples, the code verification prompt 904 may include one or more character fields 906, a resend option 908, and a cancel option 910. One or more character fields 906 may be empty until a verification code is provided. For example, one or more character fields 906 may be empty until a user of the electronic device 901 enters one or more characters of the verification code into each of the one or more character fields 906. A user of the electronic device 901 may obtain a verification code from an additional electronic device associated with the user of the electronic device 901. For example, an additional device may be a mobile phone or tablet registered with the user of the electronic device 901. An additional device associated with the user of the electronic device 901 may display a verification code. Following the display of the verification code by the additional device, a user of the electronic device 901 may enter the verification code into the electronic device by performing one or more gestures with the user's hand to select one or more characters corresponding to the characters of the verification code (for example, via a digital keyboard displayed on the display 902). In some examples, the user of electronic device 901 may enter a verification code into an additional device, which may send an indication to electronic device 901 that the verification code has been entered (e.g., verified). In some examples, if the verification code is not received on the additional device associated with the user of electronic device 901, the user of electronic device 901 may select resend option 908. Selecting the resend option may provide the user of electronic device 901 with the option to send an updated verification code to a different device than the additional device, or via a different medium (e.g., telephone, email). Note that if the user selects resend option 908, the previously sent verification code will not be accepted as authentication input to electronic device 901.In some cases, after a second (or third or fourth) attempt to input a verification code into the electronic device 901, the verification of the verification code still fails, and the electronic device 901 can completely abandon the authentication process. In some cases, selecting the cancel option 910 can cause the electronic device 901 to stop the authentication process from progressing.

[0077] Figure 9B shows a display 902 displaying a code verification prompt 904. In some examples, the display 902 presents a three-dimensional (3D) environment surrounding the electronic device 901. For example, as described above, an additional electronic device 912 associated with the user of the electronic device 901 is presented on the display 902. In some examples, the additional electronic device 912 may include an additional device display 914 that displays a verification code 916. For example, in accordance with the display 902 displaying the code verification prompt 904, the additional device display 914 may display the verification code 916. In response to the additional device display 914 displaying the verification code 916, the user of the electronic device 901 may enter the verification code 916 into the electronic device 901 using the method described herein. In some examples, the user of the electronic device 901 may select an auto-entry option 918. For example, depending on the selection of the auto-entry option 918, one or more cameras 920 of the electronic device 901 may acquire an image from the display 914 of an additional device and perform optical character recognition or any other preferred character recognition to extract a verification code 916 from the acquired image. Having extracted the verification code 916, the electronic device 901 may automatically enter the verification code 916 into the code verification prompt 904. Once the verification code 916 is correctly entered into the electronic device 901, the display 902 may display a confirmation notice 922, as shown in Figure 9C. In some examples, the confirmation notice 922 may include a checkmark indicating that the verification code 916 is correct, as shown in Figure 9C. In one or more examples, the verification code 916 may only be visible to one or more cameras 920 of the electronic device 901. For example, the verification code 916 displayed on the display 914 of an additional device is not visible to individuals present in the three-dimensional environment surrounding the electronic device 901 and the additional electronic device 912.

[0078] Additionally or alternatively, in some examples, access to protected content may be geographically restricted. Optionally, access to protected content is permitted as long as the electronic device remains within a trusted location boundary. Optionally, access to protected content is available using less restrictive authorization. Figure 10 illustrates that user 1008 provides one or more inputs 1010 to electronic device 1006 for verification within a trusted location boundary 1000. In some examples, electronic device 1006 may connect to a wired or wireless network associated with a trusted location. This connection can be identified by a Media Access Control (MAC) address and / or Internet Protocol (IP) address associated with electronic device 1006. In some examples, location services for electronic device 1006 may be enabled to allow a transmitting electronic device to verify that the electronic device is within a trusted location. In some examples, the trusted location boundary 1000 may be a physical location. For example, the trusted location boundary 1000 may be a building associated with a trusted entity (e.g., a company, school, workplace, home, etc.). In some examples, the trusted boundary may be multiple buildings associated with a trusted entity. It should be noted that trusted entities may be verified through a verification process before the commencement of the authentication process described above, so that locations associated with the trusted entity may have reduced verification requirements for devices located within and / or adjacent to the locations associated with the trusted entity. In some examples, a transmitting electronic device 1002 may transmit protected content 1004 to an electronic device 1006 located within a trusted location boundary 1000. For example, while the receiving device is located within a trusted location boundary 1000, the transmitting electronic device 1002 may transmit protected content 1004 with one or more selected authentication options, as described above in Figures 3 and 4.In some examples, the protected content 1004 may include one or more authentication requirements for access, as described herein. In some examples, a user 1008 associated with the electronic device 1006 may provide one or more inputs 1010 to satisfy one or more authentication requirements, as described herein. In some examples, access to the protected content is revoked when the electronic device 1006 is no longer located within the trusted location boundary 1000. In some examples, user 1008 may be part of a trusted entity associated with the trusted location boundary 1000. For example, user 1008 may be an employee or employer associated with the trusted entity. In some examples, the number of authentication requirements may be less than the number of authentication requirements if the electronic device 1006 and user 1008 were outside the trusted location boundary 1000. For example, when the electronic device 1006 is within the trusted location boundary 1000, the authentication method may include only a badge scan and / or verification code. However, when the electronic device 1006 is outside the trusted location boundary 1000, one or more authentication methods include ice scanning, verification code authentication, and virtual representation image authentication.

[0079] In some examples, alternative authentication methods are provided within a trusted location boundary. For example, an employee badge may grant access to protected content at the workplace. Figure 11 shows an electronic device 1101 located within a trusted location, having a display 1102 configured to display a virtual window 1104. For example, when protected content is shared with the electronic device 1101, it is located within the trusted location boundary 1000 in Figure 10, which causes the electronic device 1101 to display the virtual window 1104. The virtual window 1104 may include one or more authentication options 1106 and one or more user interface buttons 1108 and 1110. One or more authentication options 1106 may include ice scans, badge verification, etc. In some examples, one or more authentication options 1106 may be selected by the user of the sending device, as described herein. Note that since the electronic device 1101 is within a trusted location, the number of authentication options 1106 may be less than the number of authentication options shown in Figure 5A. One or more user interface buttons 1108 and 1110 can cause one or more changes to the display of the virtual window 1104. For example, user interface button 1108 may include a "close" button. The "close" button can close the virtual window 1104 on the display 1102 (for example, stop it from being displayed). Closing the virtual window 1104 can also cause the electronic device 1101 to send an indication to the sending device that the protected content is not being accessed. Furthermore, user interface button 1110 may include a "continue" button. The "continue" button may be selectable to initiate an authentication process corresponding to one or more selected authentication options 1106. For example, the "continue" button may be selectable to close the virtual window 1104 and prompt the user of the electronic device 1101 with one or more authentication prompt windows, as will be described in more detail herein.One or more authentication prompt windows corresponding to one or more authentication options 1106 can be displayed in any order. Note that one or more user interface buttons 1108 and 1110 can be engaged / selected via one or more gestures performed by the user of one or more input devices and / or electronic devices 1101.

[0080] Figure 12 shows a display 1202 displaying a digital prompt 1204 associated with one or more authentication options described herein. The digital prompt 1204 may include a badge scan indicator 1206. The badge scan indicator 1206 may be a visual representation of the associated authentication option. For example, the badge scan indicator 1206 may be associated with badge scan authentication. Badge scan can prompt the user of electronic device 1201 to position a badge associated with the user within the field of view of one or more cameras of the electronic device 1201 so that one or more cameras can capture one or more images of the badge. In some examples, the badge serves as an indication (e.g., proof) of confirmation (e.g., proof) that the user is associated with a trusted entity (e.g., an employee and / or employer of a particular trusted company, business, or other entity). In some examples, the badge scan indicator 1206 can serve as a visual instruction to the user of electronic device 1201 to prepare to scan the user's badge. In some examples, when the display 1202 displays a digital prompt 1204 (e.g., a badge scan prompt), one or more cameras 1208 of the electronic device 1201 can identify the user's badge on the electronic device 1201 to perform a badge scan, as similarly described below. In some examples, upon determining that the badge scan was successful, the badge scan indicator 1206 can change color (e.g., from a first color to a second color, such as red to blue) to confirm to the user of the electronic device 1201 that the badge scan was successful.

[0081] Figure 13 shows a display 1302 presenting an environmental passthrough 1304 showing the surroundings of the electronic device 1301. In some examples, the display 1302 may show a badge 1306 associated with the user of the electronic device 1301. For example, the badge 1306 may be within the field of view of one or more cameras 1308 of the electronic device 1301 while the electronic device is in use. In some examples, the environmental passthrough 1304 may be a live view of the surroundings of the electronic device 1301 acquired by one or more cameras 1308 configured to capture one or more gestures performed by the user of the electronic device 1301. In some examples, as shown in Figure 13, the display 1302 may show the badge 1306 using virtual contours and / or virtual shading effects to indicate that the badge 1306 is recognized by the electronic device 1301. In some examples, the user of the electronic device 1301 may select a badge verification option 1310. Depending on whether the user of electronic device 1301 has selected the badge verification option, one or more cameras 1308 may acquire one or more images of badge 1306 for analysis by electronic device 1301. For example, electronic device 1301 may perform object recognition and / or other image processing techniques on one or more acquired images of badge 1306 to verify that the badge is associated with the trusted entity described above. Note that the electronic device may also authenticate the user of electronic device 1301 by performing an ice scan (for example, as similarly shown in Figure 6) before performing badge verification. By performing an ice scan, the electronic device can identify the user of electronic device 1301. The identification can then be compared with object recognition performed on one or more acquired images of badge 1306. Badge verification may be determined to be successful according to the determination that the user identification from the ice scan matches the object recognition of badge 1306 (for example, that the ice scan and the identified badge are associated with the same user).It should be noted that the electronic device 1301 can use geolocation to determine if the electronic device is located in a reliable location.

[0082] Figure 14 shows a display 1402 presenting an environment passthrough 1404 showing the surroundings of the electronic device 1401. In some examples, the badge 1408 is not within the field of view of one or more cameras 1412 of the electronic device 1401 and / or is not sufficiently positioned relative to the viewpoint of one or more cameras 1412 in order to enable the electronic device 1401 to perform badge verification. Therefore, the display 1402 can display a badge scan window 1406 associated with the user of the electronic device 1401 to prompt the user to position the user's badge within the field of view of one or more cameras 1412. In Figure 14, the user of the electronic device 1401 can bring the badge 1408 into the view of one or more cameras 1412 with the user's hand 1410, as indicated by the badge scan window 1406. Once it is in the field of view of one or more cameras 1412, as indicated by the badge scan window 1406, one or more cameras 1412 can automatically acquire / capture one or more images of the badge 1408. In some examples, one or more cameras 1412 acquire one or more images of the badge 1408 for the electronic device 1301 to perform object recognition. As described above with reference to Figure 13, the identification of the user (e.g., previously performed) based on the eye scan performed by the electronic device 1401 can be compared with the object recognition performed on one or more acquired images of the badge 1408. Following the determination that the user identification from the eye scan matches the face recognition of the badge 1408, the badge verification can be determined to be successful, as described above. Note that if the verification of the badge scan still fails after a second (or third or fourth) attempt to successfully perform the badge scan associated with the user of the electronic device 1401, the electronic device 1401 may completely abandon the authentication process. Furthermore, note that the electronic devices, environment, and / or inputs described above with reference to Figures 3 to 14 are, optionally, the same or similar.Furthermore, any display described herein may display protected content once one or more authentication methods have been successfully completed.

[0083] While the exemplary user interfaces and user interface elements shown in Figures 3 to 14 are described above as being displayed and / or contained within a virtual window, it should be understood that in some examples, the exemplary user interfaces and user interface elements are provided within additional or alternative virtual objects presented by the electronic device 101 in the three-dimensional environment. For example, the user interfaces and / or user interface elements are presented as interactive standalone (e.g., individual) virtual objects within the three-dimensional environment, rather than being contained within a virtual window or other container in the three-dimensional environment.

[0084] Figure 15 is a flowchart illustrating a method 1500 for obtaining access to protected content, according to some examples of the present disclosure. In some embodiments, an electronic device can perform the method 1500. In some examples, the electronic device is optionally a head-mounted display similar to or corresponding to the electronic device 201 and / or the electronic device 101 in Figure 2. Optionally, one or more operations of the method 1500 are programmed with instructions stored using a non-temporary computer-readable storage medium.

[0085] In step 1502, the electronic device can determine whether one or more authentication requirements are met. These one or more authentication requirements may include one or more authentication methods performed as described herein. For example, one of the one or more authentication requirements may include performing an ice scan to verify the identity of the user of the electronic device. In some examples, if one or more requirements are not met, the electronic device may repeat step 1502 until one or more authentication requirements are met. If one or more authentication requirements are met, the electronic device may gain access to the protected content. For example, a user of the electronic device may provide one or more inputs to the electronic device to meet one or more authentication requirements. Depending on whether the user has provided one or more inputs to the electronic device that meet one or more authentication requirements, the user of the electronic device may gain access to the protected content. It should be noted that an electronic device performing method 1500 can improve existing authentication processes and provide improved security to users sharing and / or viewing content, which helps improve user-device interaction and reduces the consumption of computing resources.

[0086] Method 1500 is an example, and it should be understood that more, fewer, or different operations may be performed in the same or different order. In addition, the operations of Method 1500 described above may optionally be implemented by executing one or more functional modules of an information processing device, such as a general-purpose processor (e.g., as described with respect to Figure 2) or an application-specific chip, and / or by other components in Figure 2.

[0087] Figure 16 is a flowchart illustrating method 1600 for obtaining access to protected content in a trusted location, according to some examples of the present disclosure. In some embodiments, an electronic device can perform method 1600. In some examples, the electronic device is optionally a head-mounted display similar to or corresponding to electronic device 201 and / or electronic device 101 in Figure 2. Optionally, one or more operations of method 1600 are programmed with instructions stored using a non-temporary computer-readable storage medium.

[0088] In 1602, the transmitting device can determine whether the electronic device is in a trusted location. In some cases, the transmitting device can determine whether the electronic device can use geolocation to determine whether the electronic device is in a trusted location. In some cases, the transmitting device can determine that the electronic device is not in a trusted location. Therefore, in 1604, the user of the electronic device may be required to provide one or more authentication inputs to the electronic device. If one or more authentication inputs do not meet one or more authentication requirements, in 1606, the user of the electronic device may be denied access to the protected content. If one or more authentication inputs meet one or more authentication requirements, the user of the electronic device may obtain access to the protected content in 1610.

[0089] In 1608, the transmitting device can determine that the electronic device is in a trusted location. Therefore, in 1608, the user of the electronic device may be required to provide the electronic device with one or more reduced authentication inputs. Note that one or more reduced authentication inputs may be fewer than one or more authentication inputs. If one or more reduced authentication inputs satisfy one or more authentication requirements, the user of the electronic device may obtain access to the protected content in 1610. In some examples, if one or more reduced authentication inputs fail to satisfy one or more authentication requirements, the user of the electronic device may be denied access to the protected content in 1606. Note that an electronic device implementing method 1600 can improve existing authentication processes and provide improved security to users sharing and / or viewing content, which helps improve user-device interaction and reduces the consumption of computing resources.

[0090] Method 1600 is an example, and it should be understood that more, fewer, or different operations may be performed in the same or different order. In addition, the operations of Method 1600 described above may optionally be implemented by executing one or more functional modules of an information processing device such as a general-purpose processor (e.g., as described with respect to Figure 2) or an application-specific chip, and / or by other components in Figure 2.

[0091] Here, we consider an example of viewing protected content on an electronic device (e.g., a head-mounted display device). For example, protected content may be transmitted from a transmitting device to a receiving electronic device (e.g., electronic device 201). In one or more examples, the transmitting device includes the same or similar components having the same or similar functions as the electronic devices described in Figure 2. In some examples, one or more authentication options may be selected by the user of the transmitting device. For example, as shown in Figure 17, which illustrates an example of a transmitting electronic device according to some examples of the present disclosure, an exemplary transmitting device displays a virtual window 1704 via a display 1702 that optionally contains information about the protected content, such as the title and glyphs / icons representing the document type, one or more recipients 1708 (e.g., user A), one or more authentication options 1710 (e.g., iScan), and one or more user interface buttons 1712 for starting or canceling the sharing of the protected content.

[0092] The protected content indicator 1706 may be associated with protected content being transmitted from a transmitting device to a receiving electronic device. In some examples, the protected content may be a document, image, video, or other content. In some examples, the protected content may be editable by the user of the receiving electronic device (e.g., electronic device 201). For example, the user of the receiving electronic device may receive a screen recording of the display on the transmitting electronic device that is available for playback by the user of the receiving electronic device. Thus, in such an example, once the user of the receiving electronic device gains access to the screen recording, the user of the receiving electronic device can provide input directed to the screen recording and begin playback of the screen recording of the display on the transmitting electronic device via the display of the receiving electronic device.

[0093] In some examples, the protected content indicator 1706 may include an emblem representing the content of the protected content. For example, the protected content indicator 1706 may be a play button emblem indicating that the protected content contains a video. In some examples, the protected content indicator 1706 may be interactive. For example, the protected content indicator 1706 may be activated by a selection provided by the user of the transmitting electronic device (e.g., by performing an air gesture directed towards the protected content indicator 1706). Once activated, the user of the transmitting electronic device may be prompted to select another file (e.g., another video and / or photo). Additionally or alternatively, once activated, a different virtual window may appear on the display 1702, containing additional details associated with the protected content (e.g., file size, last modified date, etc.).

[0094] The virtual window 1704 may include a recipient 1708, as described above. In some embodiments, the recipient 308 may be a known user of the receiving electronic device. In some examples, the recipient 1708 corresponds to a suggested recipient, such as a user belonging to the sender device's contact list (e.g., a favorite contact, recently interacted contact, or new contact in a contact list of a communication application, messaging application, email application, social media application, etc.). The recipient 1708 can be manually entered into the sender electronic device (e.g., selected from a contact list and / or manually entered via text insertion by the user of the sender electronic device). In some examples, the intended recipient may be a person using the receiving device. In one or more examples, the recipient 1708 may be activated / selected by a selection from the user of the sender electronic device (e.g., a pinch air gesture performed by the user of the sender electronic device). Once activated, the user of the sender electronic device may be prompted to select another (e.g., an additional) recipient from their contact list. In some examples, once activated, the user of the sender electronic device may be prompted to manually enter information associated with the recipient.

[0095] In some examples, the transmitting electronic device displays device- or user-defined default authentication options 1710. In some examples, the user of the transmitting electronic device can select one or more authentication options 1710 that the user of the receiving electronic device must perform before being granted access to the protected content. Alternatively, in some examples, the receiving side can select from one or more authentication options 1710, through which the receiving side is authenticated by the receiving electronic device before obtaining access to the protected content. In some examples, one or more authentication options 1710 include and / or have one or more characteristics of the authentication options described herein.

[0096] One or more user interface buttons 1712 may be displayed within the virtual window 1704, as described above. In one or more examples, one or more user interface buttons 1712 may include a “Share” button. Activation of the “Share” button can initiate the transmission of protected content from the transmitting device to the receiving electronic device. For example, in Figure 17, the transmitting electronic device detects that the user’s hand 1720 on the transmitting electronic device performs an air gesture (e.g., an air pinch gesture) while the user’s gaze location 1722 on the transmitting electronic device is directed towards the “Share” button displayed on the virtual window 1704. In some examples, one or more user interface buttons 1712 may include a “Cancel” button. Activation of the Cancel button can close the virtual window 1704 on the display 1702 (e.g., stop it from being displayed). Furthermore, activation of the Cancel button can stop the transmission of protected content to the receiving electronic device. In some examples, the protected content may include a screen recording of the transmitting electronic device’s display. For example, a screen recording may include a view of the user's viewport and / or field of view of the transmitting electronic device, including a passthrough of the transmitting electronic device and the physical environment (e.g., the room) in which the user of the transmitting electronic device is located. In some examples, as will be described in more detail below, when shared with another electronic device (e.g., a receiving electronic device), the passthrough of the transmitting electronic device's physical environment contained in the protected content is visually obscured, so that when the receiving electronic device receives the protected content, the transmitting electronic device's physical environment is not visible in the user's viewport of the receiving electronic device, thereby maintaining and / or improving user privacy.

[0097] Figure 18 shows an exemplary receiving electronic device by some example of the present disclosure. As shown in Figure 18, the display 1802 of the receiving electronic device may include (for example, may display) a virtual window 1804 associated with accessing the protected content transmitted by the transmitting device described above, and one or more authentication options 1806. In some examples, the one or more authentication options 1806 correspond to one or more authentication options 1710 selected / specified by the user of the transmitting device, as described above with reference to Figure 17. In some examples, depending on whether the virtual window 1804 is displayed (for example, when and / or while it is displayed), the receiving electronic device displays a 3D environment occlusion 1808 in the viewport of the user of the transmitting electronic device via the receiving electronic device's display 1802. In some examples, the 3D environment occlusion 1808 may include blurring the 3D environment in the viewport of the user of the receiving electronic device, excluding the virtual window 1804. For example, the receiving electronic device first displays an environment passthrough (e.g., environment passthrough 1803 as described below), and in response to displaying the virtual window 1804, the receiving electronic device stops displaying the environment passthrough and displays occlusion 1808, or overlays occlusion 1808 on the environment passthrough that is visible via display 1802. In some examples, occlusion 1808 of a 3D environment may include blacking out the 3D environment in the viewport of the user of the receiving electronic device, except for the virtual window 1804 (e.g., displaying a black background behind the virtual window 1804). In some examples, the receiving electronic device displays occlusion 1808 in response to receiving protected content from the transmitting electronic device. That is, in some examples, the receiving electronic device displays occlusion 1808 before displaying the virtual window 1804. In some examples, the receiving electronic device displays both the virtual window 1804 and occlusion 1808 simultaneously in response to receiving protected content from the transmitting electronic device.

[0098] In some examples, the virtual window 1804 includes a selectable continue button 1810 to initiate an authentication process for accessing protected content. In some examples, the receiving electronic device detects the selection of the continue button 1810. In some examples, the selection may optionally be provided by the user's hand 520 of the receiving electronic device (e.g., via an air pinch gesture) while the user's gaze location 522 of the receiving electronic device is directed towards the continue button 1810. In some examples, the selection of the continue button 1810 may include touch input, input provided by one or more external devices communicably connected to the receiving electronic device, and / or additional air gestures performed by the user's hand 520 of the receiving electronic device. In response to detecting the selection of the continue button 1810, the receiving electronic device initiates an authentication process corresponding to one or more authentication options 1806 displayed on the virtual window 1804. For example, in response to detecting the selection of the continue button 1810, the receiving electronic device initiates an eye scan of the user of the receiving electronic device, as described more in detail above with reference to Figures 6 and 7.

[0099] In Figure 19, as described herein, depending on the success of user authentication of the receiving electronic device, the receiving electronic device (e.g., including the user of the receiving electronic device) can access the protected content received from the transmitting electronic device, as shown on the display 1802 of the receiving electronic device. In some examples, the protected content may be a screen recording captured by the transmitting electronic device, as described above. In some examples, the protected content received from the transmitting electronic device may be displayed in a protected content window 1812. In some examples, the protected content window 1812 may include a close affordance and a grabber bar. In response to detecting input directed towards the close affordance, the receiving electronic device may stop displaying the protected content window 1812. In some examples, in response to detecting input directed towards the grabber bar (e.g., air pinch and drag gestures performed by the user of the receiving electronic device), the receiving electronic device may move the protected content window 1812 in a three-dimensional environment according to the magnitude (e.g., speed, distance, and / or duration) and / or direction of the input. In some examples, the protected content window may include video (e.g., a screen recording of a display on the transmitting electronic device). In some examples, the receiving electronic device detects input (e.g., a pinch air gesture) directed to the screen recording playback button 1814 to start playback of the screen recording. In Figure 19, as suggested above, the user of the receiving electronic device has successfully authenticated (e.g., upon successful execution of an ice scan), resulting in the receiving electronic device displaying the protected content in a three-dimensional environment (e.g., within the protected content window 1812), as shown in the figure.

[0100] Figure 20 shows a display 1802 displaying a snapshot of playback of protected content in the shared protected content window 1812. In Figure 20, the receiving device optionally plays back the screen recording of Figure 19 in response to detecting input directed to the play button 1814 described above. In some examples, while playing back protected content on the protected content window 1812, the receiving electronic device may display a scrub bar 1816 (for example, controls that allow the user to navigate within a video clip by dragging a handle or clicking specific points along the bar) along with the protected content window 1812 in a three-dimensional environment (e.g., displayed within the protected content window 1812, overlaid on it, underneath it, or otherwise adjacent to it). In some examples, the scrub bar 1816 may include a play button 1816a (e.g., a pause button and / or a play button) and volume buttons 1816b. Upon detecting input directed to the play button 1816a, the receiving electronic device optionally pauses or resumes playback of the protected content (e.g., screen recording) within the protected content window 1812. Upon detecting input directed to the volume button 1816b, the receiving electronic device can adjust the volume of the protected content playback. In some examples, the user of the receiving electronic device can navigate to different points (e.g., time frames) in the playback of the protected content by providing input directed to the scrub bar 1816.

[0101] Figure 21 shows an exemplary receiving electronic device (e.g., corresponding to the receiving electronic device in Figure 18) in some examples of the present disclosure. As shown in Figure 21, the display 1802 of the receiving electronic device may include (e.g., display) a virtual window 1804 and one or more authentication options 1806, as described in more detail above with reference to Figure 18. In some examples, as shown in Figure 18, after receiving protected content from the transmitting electronic device and displaying the virtual window 1804 associated with accessing the protected content, the receiving electronic device may discontinue displaying the virtual window 1804 in the three-dimensional environment upon determining that the receiving electronic device does not detect input directed to the continue button 1810 within a threshold time for displaying the virtual window 1804 (e.g., 15, 30, 45, 60, 75, 90, 120 seconds, etc.). In the example in Figure 21, the receiving electronic device does not detect input directed to the continue button 1810 for a first duration 2102 that is shorter than the threshold duration 2104 (e.g., threshold time) indicated by the time bar 2106. Therefore, as shown in Figure 21, the receiving electronic device maintains the display of the virtual window 1804 and occlusion 1808 in the three-dimensional environment (e.g., continues displaying). In some examples, as suggested above, the first duration 2102 begins in response to the receiving electronic device receiving protected content from the transmitting electronic device. In some examples, the first duration 2102 begins when the receiving electronic device displays the virtual window 1804 with the occlusion 1808.

[0102] In Figure 22, if the receiving electronic device does not detect input directed to the continue button 1810 for a second duration 2108 that is longer than the threshold duration 2104, the receiving electronic device may cease displaying the occlusion 1808 and virtual window 1804 in the three-dimensional environment. As shown in Figure 22, when the receiving electronic device ceases displaying the virtual window 1804 and occlusion 1808 described above, the environment passthrough 1803 becomes visible in the viewport of the receiving electronic device. In addition, in some examples, the receiving electronic device displays menu 2230 (e.g., the home screen user interface of the receiving electronic device) on the display 1802 of the receiving electronic device (optionally, in response to detecting input for displaying menu 2230, such as the selection of a hardware input element of the receiving electronic device (e.g., a physical button or switch)). In some cases, the user of the transmitting electronic device may, upon determination that the second duration exceeds the threshold duration of 2104, resend the same or different protected content and initiate a similar content sharing process, as described above with reference to Figures 18-20.

[0103] Figures 23A and 23B illustrate exemplary receiving electronic devices in some examples of the present disclosure. In some examples, as shown in Figure 23A, the receiving electronic device displays a first virtual window 2304 and a second virtual window 2306 on display 2302. In some examples, the first virtual window 2304 can accommodate a video chat or call (or other live messaging and / or video conferencing user interface and / or application) with the transmitting electronic device (e.g., the receiving electronic device is in a video chat or call with the transmitting electronic device). In some examples, the transmitting electronic device initiates screen sharing with the receiving electronic device while the electronic device is participating in a video chat or call, as shown in the first virtual window 2304 in Figure 23B. In some examples, upon determination that the transmitting electronic device has attempted to share its screen with the receiving electronic device, the transmitting electronic device generates a notification (e.g., an audio notification, a visual notification, a haptic notification) to alert the user of the transmitting electronic device that at least a portion of the content the user is trying to share with the receiving electronic device is restricted. For example, the transmitting electronic device may, upon determination that it has attempted to share its screen with the receiving electronic device, generate an audio notification (e.g., an alert-specific tone) indicating that at least a portion of the content the user is trying to share with the receiving electronic device is restricted. In some examples, upon determination that the transmitting electronic device has attempted to share restricted content with the receiving electronic device, the transmitting electronic device may generate a notification containing any combination of visual, audible, and haptic alerts. For example, the notification may include a text popup, alert tone, and vibration from the transmitting electronic device indicating that the content the user of the transmitting electronic device is trying to send and / or share is restricted.In some examples, screen sharing includes protected content such that the user of the receiving electronic device can (and / or is required to) provide one or more inputs (e.g., an air pinch gesture performed by hand 520 while gaze location 522 is directed towards one or more authentication options 2310) to satisfy one or more criteria for authenticating the user's identity information by performing one or more authentication processes corresponding to one or more authentication options 2310, as similarly described above. In some examples, one or more authentication options 2310 may be selected by the user of the transmitting electronic device, as described above with reference to Figure 17. Additionally or alternatively, the receiving electronic device may optionally not display one or more authentication options 2310 as shown in Figure 23A. For example, in response to a transmitting electronic device initiating screen sharing or window sharing (e.g., or similar content sharing technology) with a receiving electronic device, and in accordance with a determination that the screen sharing includes protected content (e.g., content not accessible by the receiving electronic device), the receiving electronic device may display the first virtual window 2304 in such a way that it is blacked out or otherwise obscured, as similarly shown in Figure 23A, except for the subwindow 2316 in Figure 23B which contains a representation of the user of the transmitting electronic device. In some examples, if the first virtual window 2304 is associated with a video conferencing application in an active conference call, the transmitting electronic device initiating screen sharing may be any electronic device other than the receiving electronic device which is a participant in the active conference call.In some cases, when an electronic device other than the receiving electronic device starts screen sharing of protected content, the receiving electronic device displays the first virtual window 2304 as blacked out, except for a subwindow 2316 which may contain a representation of the user of the participant (and / or other participant) of the active conference call who initiated the sharing of the protected content.

[0104] In some examples, upon determining that the protected content shared during a video call includes audio, the receiving electronic device may mute the audio associated with the protected content until the user of the receiving electronic device is authenticated, as indicated by the audio indicator 2312. However, in some examples, audio from the video call itself (e.g., audio from the user of the transmitting electronic device captured via one or more microphones of the transmitting electronic device) is not muted by the receiving electronic device. In some examples, the second virtual window 2306 may be associated with another application on the receiving electronic device (e.g., a photo application, music application, messaging application, etc.). In some examples, the second virtual window 2306 in Figure 23A is not included in the protected content being sent from the transmitting electronic device. For example, the receiving electronic device displays the second virtual window 2306 on display 2302 before the transmitting electronic device sends the protected content (e.g., before the receiving electronic device displays the "Protected View" interface on the first virtual window 2304). In some examples, the second virtual window 2306 corresponds to and / or is associated with an application local to the receiving electronic device. That is, the content displayed in the second virtual window 2306 is displayed via an application running on the receiving electronic device, such as when the user of the receiving electronic device provides input to launch the application corresponding to the second virtual window 2306. Therefore, in some examples, the receiving electronic device does not apply occlusion (e.g., display) to the content of the second virtual window 2306 and / or does not mute the audio associated with (e.g., output with) the content of the second virtual window 2306.

[0105] In Figure 23B, following the determination that the authentication process initiated in Figure 23A was successful, the receiving electronic device displays protected content (e.g., the menu 2314 of the transmitting electronic device) on and / or within the first virtual window 2304. In some examples, the first virtual window 2304 includes a subwindow 2316 (e.g., user interface elements within the first virtual window 2304) that displays a representation of the user of the transmitting electronic device. For example, as described above, the user of the receiving electronic device and the user of the transmitting electronic device are participating in and / or communicating via a video call. Therefore, in Figure 23B, when the protected content (e.g., screen sharing including menu 2314) is displayed by the receiving electronic device, the receiving electronic device also displays an image or video representation of the user of the transmitting electronic device. In some examples, following the determination that the authentication process initiated in Figure 23A was successful, audio (e.g., audio captured via one or more microphones of the transmitting electronic device) is enabled for both the protected content and the user of the transmitting electronic device.

[0106] While the exemplary user interfaces and user interface elements shown in Figures 17 to 23 are described above as being displayed and / or contained within a virtual window, it should be understood that in some examples, the exemplary user interfaces and user interface elements are provided within additional or alternative virtual objects presented by the electronic device 101 in the three-dimensional environment. For example, the user interfaces and / or user interface elements are presented as interactive standalone (e.g., individual) virtual objects within the three-dimensional environment, rather than being contained within a virtual window or other container in the three-dimensional environment.

[0107] In some examples, access to protected content may be geographically restricted. Optionally, access to protected content is permitted as long as the electronic device remains within a trusted location boundary. Optionally, access to protected content is available using less restrictive authorization (e.g., as described above). Figure 24 shows that user 1008 provides one or more inputs 1010 to the first electronic device 1006 (e.g., the receiving electronic device) for verification within a trusted location boundary 1000. In some examples, the first electronic device 1006 may be connected to a wired or wireless network associated with a trusted location. This connection may be indicated by a Media Access Control (MAC) address and / or Internet Protocol (IP) address associated with the electronic device 1006. In some examples, location services on the electronic device 1006 (e.g., GPS or other location tracking) may be enabled so that the transmitting electronic device can verify that the first electronic device 1006 is within a trusted location. In some examples, the trusted location boundary 1000 may be a physical location. For example, a trusted location boundary 1000 could be a building associated with a trusted entity (e.g., a company, school, workplace, home, etc.). In some examples, a trusted boundary may be multiple buildings associated with a trusted entity, or may include multiple buildings. It should be noted that a trusted entity may be verified through a verification process prior to the commencement of the authentication process described above, so that a location associated with the trusted entity may require reduced verification requirements for devices located within and / or adjacent to the location associated with the trusted entity. In some examples, a second electronic device (e.g., a transmitting electronic device) 1002 may transmit protected content 1004 to a first electronic device 1006 located within the trusted location boundary 1000.For example, the transmitting electronic device 1002 can transmit protected content 1004 having one or more selected authentication options, as described above in Figures 3 and 4, while both the receiving electronic device (e.g., the first electronic device 1006) and the transmitting electronic device (e.g., the second electronic device 1002) are located within a trusted location boundary 1000. In some examples, both the first electronic device 1006 and the second transmitting electronic device 1002 are associated with a trusted location. In some examples, the second transmitting electronic device 1002 can connect to a wired or wireless network associated with the same trusted location as the first electronic device 1006. In some examples, the protected content 1004 may include (e.g., require) one or more authentication requirements to obtain access to the protected content 1004, as described herein. In some examples, a user 1008 associated with the first electronic device 1006 may provide one or more inputs 1010 to satisfy one or more authentication requirements, as described herein. In some examples, access to the protected content is revoked when the first electronic device 1006 is no longer located within the trusted location boundary 1000. In some examples, user 1008 may be part of a trusted entity associated with the trusted location boundary 1000. For example, user 1008 may be an employee or employer associated with the trusted entity, a student associated with the trusted entity, or a resident or family member associated with the trusted entity. In some examples, the number of authentication requirements may be less than the number of authentication requirements if electronic device 1006 and / or user 1008 were outside the trusted location boundary 1000.

[0108] Figure 25 is a flowchart illustrating a method 2500 for obtaining access to protected content, according to some examples of the present disclosure. In some embodiments, an electronic device can perform the method 2500. In some examples, the electronic device is optionally a head-mounted display similar to or corresponding to the electronic device 201 and / or the electronic device 101 in Figure 2. Optionally, one or more operations of the method 2500 are programmed with instructions stored using a non-temporary computer-readable storage medium.

[0109] In step 2502, the electronic device can determine whether one or more authentication requirements are met. One or more authentication requirements may include one or more authentication methods performed (e.g., provided authentication inputs) as described herein. For example, one of the one or more authentication requirements may include performing an ice scan to verify the identity of the user of the electronic device. In some examples, one of the one or more authentication requirements may include entering a code that matches a code stored on the electronic device or otherwise accessible by the electronic device (e.g., a default access code). In some examples, if one or more requirements are not met, the electronic device may repeat step 2502 until one or more authentication requirements are met. If one or more authentication requirements are met, the electronic device may obtain access to the protected content. For example, the user of the electronic device may provide one or more inputs to the electronic device to satisfy one or more authentication requirements. Depending on the inputs provided to the electronic device that satisfy one or more authentication requirements, the user of the electronic device may obtain access to the protected content. It should be noted that electronic devices implementing Method 2500 can improve existing authentication processes and provide enhanced security to users sharing and / or viewing content, which helps improve user-device interaction and reduces the consumption of computing resources.

[0110] Method 2500 is an example, and it should be understood that more, fewer, or different operations may be performed in the same or different order. In addition, the operations of Method 2500 described above may optionally be implemented by executing one or more functional modules of an information processing device, such as a general-purpose processor (e.g., as described with respect to Figure 2) or an application-specific chip, and / or by other components in Figure 2.

[0111] In some cases, an application, when run on an electronic device, contains application data that restricts certain functions of the electronic device (e.g., screen capture, screen recording, screen sharing, etc.) while the application is open on the electronic device. Therefore, sensitive information displayed on an application cannot be captured, copied, and / or shared with another electronic device and / or another user, as outlined below.

[0112] Figure 26 shows a display 2602 of an exemplary electronic device that displays a virtual window 2604 in a three-dimensional environment. In some examples, the electronic device displays the virtual window 2604 within an immersive environment. For example, the immersive environment may include the electronic device displaying a mountain landscape view, a desert view, or a city background behind the virtual window 2604. In some examples, the virtual window 2604 may include one or more user interface elements for interaction with the virtual window, optionally including a close affordance and a grabber bar, as shown. In response to detecting input directed towards the close affordance (e.g., an air pinch gesture), the electronic device may cease displaying the virtual window 2604. In some examples, in response to detecting input directed towards the grabber bar (e.g., air pinch and drag gestures performed by the user's hand on the electronic device), the electronic device may move the virtual window 2604 within the three-dimensional environment according to the magnitude (e.g., speed, distance, and / or duration) and / or direction of the input. In some examples, the virtual window 2604 contains and / or corresponds to the application user interface 2606. In Figure 26, an exemplary mobile banking application is displayed (for example, by the user providing input to the application icon corresponding to the mobile banking application, thereby launching the mobile banking application and displaying the virtual window 2604). The electronic device displays the virtual window 2604 containing the application user interface 2606 within a three-dimensional environment. In some examples, the application user interface 2606 may contain application user interface information 2608 and application user interface protection information 2610. In some examples, as shown in Figure 26, the application user interface information 2608 and application user interface protection information 2610 can be displayed simultaneously.In some examples, application user interface information 2608 may be displayed when the application associated with the virtual window 2604 is first launched. In some examples, application user interface protection information 2610 may be displayed when the user of the electronic device verifies their identity (e.g., via biometric authentication). In some examples, both application user interface information 2608 and application user interface protection information 2610 may be displayed once the user's identity of the electronic device has been verified.

[0113] In some examples, application user interface information 2608 includes information displayed when the application corresponding to application user interface 2606 is launched. In some examples, application user interface information 2608 includes non-confidential information that can be viewed by other electronic devices and / or users. For example, application user interface information 2608 includes the name associated with the user of the electronic device and / or a partial account number of the account associated with the user of the electronic device. In some examples, application user interface information 2608 may include information within the application that can be viewed (e.g., shared) by a separate electronic device and / or user. For example, in Figure 26, application user interface 2606 includes account balance information associated with a user (e.g., "Jane Doe") who is optionally a user of the electronic device. In some examples, the account information is available for viewing because the application corresponding to application user interface 2606 is in "Remember Me" mode, which allows the user of the electronic device to view application user interface information that would normally be protected by biometric authentication. In some examples, the user of the electronic device has already successfully completed the authentication process (e.g., biometric scan) associated with the application corresponding to user interface 2606. For example, depending on the success of the authentication process, the electronic device displays an application user interface 2606 (for example, as shown in Figure 26). In some examples, once the user identification information of the electronic device is verified, the electronic device may additionally or alternatively display sensitive information (for example, application user interface protection information 2610) in the application user information 2608.Additionally or alternatively, the account balance information included in the application user information 2608 can be marked or flagged as sensitive information (for example, similar to the application user interface protection information 2610) based on application-specific preferences, as will be described in more detail below. For example, the user of an electronic device and / or the developer of an application associated with a virtual window 2604 can choose which information is displayed by the electronic device as application user interface information 2608 and application user interface protection information 2610 when the electronic device runs the application associated with the virtual window 2604.

[0114] In some examples, the application user interface protection information 2610 includes information associated with the user of the electronic device that is confidential and cannot be shared with other electronic devices and / or users. For example, as shown in Figure 26, the application user interface protection information 2610 may include the name of the user (optionally, the user of the electronic device), the date of birth of the user of the electronic device, and the social security number of the user of the electronic device (for example, as shown in Figure 26). In some examples, the application user interface protection information 2610 is displayed depending on whether the user of the electronic device has verified their identification information through an authentication process, as described in more detail above. In some examples, further authentication is required to access the application user interface protection information 2610. For example, if the user of the electronic device has completed a first authentication process (e.g., biometric scanning) to access the application user interface 2606, the user may provide further authentication information (e.g., a PIN, two-factor authentication, or an identification card scan) that allows access to view (e.g., displayed by the electronic device) the application user interface protection information 2610.

[0115] In some cases, based on the application, application user interface information 2608 and application user interface protection information 2610 cannot be shared via screen sharing and / or screen recording. For example, application data associated with an application used to run the application on an electronic device indicates which parts of the application user interface information are protected (e.g., application user interface protection information 2610). Thus, the application data may further include indications of which functions are restricted (e.g., screen capture, screen recording, etc.) while a user of the electronic device is interacting with and / or viewing the application user interface information. For example, the electronic device prevents and / or restricts the capture and / or reproduction of protected and / or user sensitive information contained in application user interface information 2608 and / or application user interface protection information 2610 (e.g., via screen capture, screen recording, and / or screen sharing, etc.).

[0116] In some examples, if a user of an electronic device takes a screen capture of display 2602 (for example, by providing other inputs in response to a request to capture one or more images (e.g., screenshots or screen recordings) of protected information and / or user confidential information), the electronic device is subsequently unable to share the screen capture of display 2602 containing the protected information (for example, the function is disabled and / or the function is enabled but modified so that the electronic device cannot). For example, as shown in Figure 26, if a user of an electronic device provides one or more inputs to buttons 102a and 102b (e.g., simultaneous pressing of buttons 102a and 102b), the electronic device performs one or more actions (e.g., described below) based on a request to capture and / or generate a snapshot of display 2602. In some examples, the snapshot of display 2602 may include a passthrough of the physical environment in which the electronic device and / or the user of the electronic device are located. In some examples, a snapshot of display 2602 may include only virtual window 2604 (or any other selected virtual window displayed on display 2602). In some examples, a snapshot of display 2602 may include a passthrough of the physical environment in which the electronic device and / or the user of the electronic device is located, and any virtual window displayed on display 2602 (including, for example, virtual window 2604).

[0117] In some examples, when an electronic device captures a screen capture of display 2602, the electronic device displays a three-dimensional environment, including the virtual window 2604 and the screen capture window 2712, through display 2702, as shown in Figure 27. In some examples, the screen capture window 2712 corresponds to a snapshot captured by the user of the electronic device, as shown in Figure 26. In some examples, the screen capture window 2712 may optionally be displayed as a picture-in-picture window in the corner of display 2702 (e.g., the lower right corner). In some examples, the screen capture window 2712 may be displayed as an overlay on top of (e.g., in front of) the virtual window 2604 on display 2702. In some examples, the screen capture window 2712 may be displayed in any part of display 2702 such that there is no spatial conflict between the screen capture window 2712 and the virtual window 2604, or between it and any other windows and / or objects displayed on display 2702. In some examples, it is understood that when electronic device 101 captures a screen capture of display 2602, electronic device 101 does not display the screen capture window 2712. For example, electronic device 101 refrains from displaying an indication that the screen capture was performed on electronic device 101. Additionally or alternatively, the screen capture of display 2602 may be saved after being generated on the electronic device to a photo repository application or other data (e.g., file) repository application (e.g., a photo application or library application). In some examples, the screen capture of display 2602 may be automatically saved to a photo repository application on the electronic device.

[0118] In some examples, as shown in Figure 27, the user of the electronic device provides input directed to the screen capture window 2712 (e.g., an air pinch gesture performed by the user's hand 2722) so that the screen capture window 2712 is enlarged (e.g., its size is increased). Additionally or alternatively, if the electronic device 101 does not display the screen capture window 2712, the user of the electronic device can navigate (e.g., via one or more input sequences) to a photo repository application on the electronic device where screen captures of display 2602 are stored. Once the user navigates to the photo repository application, the user of the electronic device can provide input directed to the screen capture of display 2602 (e.g., selection via an air pinch gesture, etc.). In response to detecting input directed to the screen capture of display 2602, the electronic device optionally displays the screen capture of display 2602 as an image, as will be described in more detail below.

[0119] In response to detecting input directed to the screen capture window 2712 or input within the photo repository application described above, the electronic device displays the virtual window 2604 and the restricted access window 2804 (e.g., displayed as an overlay on the virtual window 2604) in a three-dimensional environment via the display 2802, as shown in Figure 28. In some examples, the restricted access window 2804 corresponds to the screen capture window 2712 in Figure 27. In some examples, as shown in Figure 28, the restricted access window 2804 includes complete occlusion, partial occlusion, or blurring of the contents of the virtual window 2604 so that the contents of the virtual window 2604 are not identifiable. For example, as described above, the user of the electronic device in Figure 26 provides input in response to a request to capture a screenshot or screen recording that includes the virtual window 2604 (e.g., the contents of the virtual window 2604 described above). As shown in Figures 27 and 28, the electronic device generates one or more images in response to an input detection (e.g., performs one or more actions in response to an input detection), but the one or more images do not contain the content of the virtual window 2604. For example, as shown in Figure 28, the images generated by the electronic device in response to an input detection do not contain the application user interface information 2608 and the application user interface protection information 2610. In some examples, as shown in Figure 28, when the electronic device generates an image (e.g., within the restricted access window 2804) in response to an input corresponding to a request to capture a screenshot or screen recording of the display 2602 in Figure 26, the electronic device applies occlusion 2808 to the content of the virtual window 2604 contained in the screen capture window 2712, and / or on it. For example, the electronic device blurs the content displayed / contained in the screen capture or screen recording (e.g., the content of the screen capture window 2712).In some examples, the occlusion 2808 included in the restricted access window 2804 may include blacking out so that the content is displayed / included in a screen capture or screen recording (e.g., the content of the screen capture window 2712). In addition, in some examples, the occlusion 2808 applied to the restricted access window 2804 may also apply to environmental passthroughs included in a screen capture of the display 2602 (e.g., representations of the physical environment in which the electronic device and / or the user of the electronic device are located). In some examples, as shown in Figure 28, the restricted access window 2804 includes an indication 2810 that access is restricted. In some examples, as shown in Figure 28, the indication 2810 includes a graphical representation such as a symbol / glyph (e.g., a lock icon) indicating that access to the content (e.g., its visibility) is blocked. In some examples, the indication 2810 includes text indicating that access is blocked, and in some examples, provides instructions to enable access, such as through an authentication process as described herein.

[0120] Returning to Figure 26, in some examples, upon detecting input that shares a screen (e.g., display 2602) or a specific window displayed via display 2602 (e.g., virtual window 2604), the electronic device may display a restricted access window 2804 or a similar window, as shown in Figure 28, to indicate that the information on display 2602 is protected information that is not available for sharing. For example, upon detecting input that shares a screen (e.g., display 2602), similar to the inputs described above regarding sharing documents and other content, the electronic device may stop displaying the virtual window 2604 and start displaying the restricted access window 2804. In some examples, the electronic device may, instead, update the display of the virtual window 2604 in response to such input to include occlusion 2806 and / or indication 2810 that are overlaid on and / or obscure the protected content contained in the virtual window 2604 in a three-dimensional environment (e.g., application user interface information 2606 and / or application user interface protection information 2610). It should be noted that the application data associated with the application corresponding to the application displayed in the virtual window 2604 may include one or more indications of which actions (e.g., screen sharing, screen capture) are permitted for the user of the electronic device and / or the electronic device itself. Additionally or alternatively, in some examples, the electronic device 101 generates and presents a notification that the content the user of the electronic device attempted to capture and / or record contains restricted content, thereby resulting in the display of the restricted access window 2804.For example, returning to Figure 26, when the electronic device detects input provided by the user in response to a request to capture (e.g., take a screenshot or screen recording) or share (e.g., via screen sharing) one or more images of protected information and / or user-confidential information, the electronic device displays a notification or other user interface or message and / or outputs audio indicating to the user that capturing and / or sharing one or more images of protected information and / or user-confidential information is restricted. In some examples, the notification is provided as an alternative to displaying the screen capture window 2712.

[0121] Figure 29 is a flowchart illustrating Method 2900 for navigating to restricted content, according to some examples of the present disclosure. In some embodiments, an electronic device can perform Method 2900. In some examples, the electronic device is optionally a head-mounted display similar to or corresponding to Electronic Device 201 and / or Electronic Device 101 in Figure 2. Optionally, one or more operations of Method 2900 are programmed with instructions stored using a non-temporary computer-readable storage medium.

[0122] In some examples, in block 2902, while displaying protected content in a three-dimensional environment (e.g., application user interface protected information 2610 in the virtual window 2604 in Figure 26) via one or more displays, the electronic device detects inputs corresponding to requests to perform one or more first actions involving the protected content, including capturing an image of the protected content via one or more input devices, the image including at least a portion of the three-dimensional environment that surrounds the protected content (e.g., passing through the protected content in the virtual window 2604 in Figure 26) and is visible from the viewpoint of a user of the electronic device, such as a user of the electronic device providing input to buttons 102a and 102b of the electronic device, as shown in Figure 26.

[0123] In some examples, in block 2904, in response to detecting input, the electronic device initiates a process to perform one or more first actions, including generating a first image corresponding to an image (e.g., a screenshot / record is captured and saved to a Photos app), such as the electronic device generating a screen capture window 2712 and optionally subsequently displaying the screen capture window 2712, as shown in Figure 27. In some examples, in block 2906, in response to detecting input, the electronic device displays a representation of the first image in a three-dimensional environment via one or more displays, such as the electronic device displaying a restricted access window 2804 corresponding to the screen capture window 2712, as shown in Figure 28. In some examples, the representation of the first image includes a visual indication that the visibility of protected content is restricted without including the protected content, such as the indication 2810 of the restricted access window 2804, and an occlusion representation of at least a portion of the three-dimensional environment that is visible from the user's perspective of the electronic device, such as the occlusion 2806 shown in Figure 28.

[0124] Method 2600 is an example, and it should be understood that more, fewer, or different operations may be performed in the same or different order. In addition, the operations of Method 2600 described above may optionally be implemented by executing one or more functional modules of an information processing device such as a general-purpose processor (e.g., as described with respect to Figure 2) or an application-specific chip, and / or by other components in Figure 2.

[0125] Accordingly, some examples of the present disclosure relate to methods in an electronic device that communicates with one or more displays and one or more input devices, which include receiving a protected document containing content from a transmitting device, presenting one or more prompts for one or more inputs to access the protected document in response to receiving the protected document, detecting one or more inputs via one or more input devices, and obtaining access to the content of the protected document in response to detecting one or more inputs, according to a determination that one or more inputs satisfy one or more criteria, including criteria that are satisfied when one or more inputs authenticate a user.

[0126] In addition or alternatively, in some examples, each of the one or more inputs includes a first image, the first image includes an image of one or more of the user's eyes, the images of one or more of the user's eyes are compared to one or more stored images of one or more of the user's eyes on an electronic device, and the user is authenticated when the images of one or more of the user's eyes match at least one of the one or more stored images of one or more of the user's eyes on an electronic device, and the user is de-authenticated when the images of one or more of the user's eyes do not match at least one of the one or more stored images of one or more of the user's eyes on an electronic device. In addition or alternatively, in some examples, detecting each of the one or more inputs includes detecting an image of an identification badge, processing the image of the identification badge to extract one or more facial features from the identification badge, and comparing one or more facial features extracted from the identification badge to one or more stored facial features associated with an authenticated member of the company.

[0127] In addition or alternatively, in some examples, each of the one or more inputs includes a first individual input among the one or more inputs, the first individual input including an authentication code displayed on a secondary device different from the electronic device and associated with the user of the electronic device, and the determination that each of the one or more inputs satisfies one or more criteria follows the determination that the authentication code has been properly entered into the electronic device. In addition or alternatively, in some examples, one or more criteria include a first criterion that is satisfied when the electronic device is within a threshold distance of an authorized location, each of the one or more inputs includes providing access to the current location of the electronic device, and the method further includes, in response to detecting each of the one or more inputs, obtaining access to the contents of a protected document in accordance with the determination that the electronic device is within a threshold distance of an authorized location, and displaying one or more second digital prompts for accessing the protected document via one or more displays in accordance with the determination that the electronic device is not within a threshold distance of an authorized location.

[0128] In addition or alternatively, in some examples, the method further includes verifying location data associated with an electronic device in response to receiving a protected document, the verification including determining whether the location data associated with the electronic device is accessible, identifying the location of the electronic device based on the location data and obtaining access to the protected document in response to the determination that the location data is accessible, and requesting the user of the electronic device to access the location data associated with the electronic device in response to the determination that the location data is not accessible, and upon receiving access to the location data associated with the electronic device, identifying the location of the electronic device based on the location data and obtaining access to the protected document. In addition or alternatively, in some examples, the method includes verifying location data associated with an electronic device in response to receiving a protected document; identifying, in response to verifying the location data, that the electronic device is within a threshold distance of an authorized location; identifying that the electronic device is not within a threshold distance of an authorized location; displaying a first prompt of one or more prompts via one or more displays; detecting a first individual input of one or more respective inputs via one or more input devices; and obtaining access to the protected document in accordance with the determination that the first individual input of one or more respective inputs meets a criterion.

[0129] In addition or alternatively, in some examples, detecting one or more inputs further includes detecting a visual representation of the user of the electronic device and transmitting data corresponding to the visual representation of the user of the electronic device to the transmitting device. In addition or alternatively, in some examples, the method further includes transmitting usage data from the electronic device to the transmitting device after gaining access to the content of the protected document, the usage data including one or more timestamps corresponding to one or more actions associated with the content of the protected document. In some examples, the usage data further includes one or more indications of at least one modification to the content of the protected document. In some examples, in response to detecting one or more inputs, the method further includes preventing access to the content of the protected document according to a determination that one or more inputs do not meet one or more criteria.

[0130] In addition or alternatively, in some examples, obtaining access to the content of a protected document further includes disabling one or more content sharing functions of an electronic device and restricting the screen capture function of an electronic device. In addition or alternatively, in some examples, individual prompts of one or more prompts include instructions for a user to follow to enter one or more respective inputs that satisfy one or more criteria, and the instructions include at least a visual component. In addition or alternatively, in some examples, the method further includes displaying a virtual window via one or more displays in response to receiving a protected document, the virtual window including identification information of the intended recipient and at least graphics associated with at least an authentication process, and at least an authentication process corresponding to one of the one or more prompts. In addition or alternatively, in some examples, displaying one or more prompts further includes displaying a first prompt from one or more prompts and a second prompt from one or more prompts, where the first and second prompts are distinct; detecting a first individual input from each of one or more inputs and a second individual input from each of one or more inputs; and determining that the first individual input from each of one or more inputs and the second individual input from each of one or more inputs satisfy one or more criteria. In addition or alternatively, in some examples, the method further includes, in response to detecting one or more inputs, displaying a second prompt from one or more prompts via one or more displays, in accordance with the determination that the first individual input from each of one or more inputs corresponding to the first prompt of one or more prompts does not satisfy one or more criteria, wherein the second prompt from one or more prompts is different from the first prompt from one or more prompts and corresponds to a second individual input from each of one or more inputs.

[0131] Accordingly, as described above, some examples of the present disclosure relate to a method in which an electronic device communicating with one or more displays, one or more input devices, and a second electronic device receives protected content transmitted by the second electronic device, the protected content being associated with the viewpoint of a user of the second electronic device and including at least a portion of the three-dimensional environment of the second electronic device. In some examples, upon receiving the protected content, a first user interface associated with accessing the protected content is displayed via one or more displays, the first user interface including a representation of at least a portion of the three-dimensional environment visible from the viewpoint of a user of the second electronic device, and the representation of at least a portion of the three-dimensional environment is displayed with a first amount of occlusion. Additionally or alternatively, in some examples, the representation of at least a portion of the three-dimensional environment includes an indication of an authentication process associated with obtaining access to the protected content and detecting one or more inputs via one or more input devices while the first user interface is being displayed. In some examples, in response to the detection of one or more inputs and in accordance with the determination that one or more inputs satisfy one or more criteria, obtaining access to protected content transmitted by a second electronic device includes updating the display of at least a portion of the representation of the third-dimensional environment of the second electronic device to have a second occlusion amount smaller than the first occlusion amount. Additionally or alternatively, in some examples, in response to the detection of one or more inputs and in accordance with the determination that one or more inputs do not satisfy one or more criteria, the display of at least a portion of the representation of the third-dimensional environment of the second electronic device is maintained at the first occlusion amount.

[0132] Additionally or alternatively, in some examples, receiving protected content transmitted by a second electronic device includes receiving a screen capture associated with the protected content that is visible from the viewpoint of the user of the second electronic device. Additionally or alternatively, in some examples, the screen capture corresponds to a screenshot containing the protected content that is visible from the viewpoint of the user of the second electronic device. Additionally or alternatively, in some examples, the screen capture corresponds to a screen recording containing the protected content that is visible from the viewpoint of the user of the second electronic device. Additionally or alternatively, in some examples, displaying an indication of an authentication process associated with obtaining access to the protected content further includes displaying one or more prompts for individual inputs to satisfy one or more criteria via one or more displays, the one or more prompts being overlaid on at least a representation of a three-dimensional environment. Additionally or alternatively, in some examples, detecting one or more inputs further includes capturing an eye scan of the user of an electronic device via one or more input devices, the one or more criteria being satisfied when the captured eye scan matches at least one or more stored eye scans stored in the electronic device. In addition or alternatively, in some examples, detecting one or more inputs further includes detecting one or more air gestures performed by the user of an electronic device via one or more input devices, and one or more criteria include criteria that are met when one or more inputs authenticate the identity of the user of the electronic device.

[0133] Additionally or alternatively, in some examples, detecting one or more air gestures performed by a user of an electronic device includes detecting the input of a passcode associated with obtaining access to protected content, directed to a first user interface, wherein one or more criteria include criteria that are met when the input of a passcode associated with obtaining access to protected content matches a stored authentication passcode. Additionally or alternatively, in some examples, displaying an indication of an authentication process associated with obtaining access to protected content further includes displaying a first prompt for individual inputs to satisfy one or more criteria. Additionally or alternatively, the method further includes, in response to detecting one or more inputs and in accordance with the determination that one or more inputs include a first input corresponding to a request to display a second prompt different from the first prompt, displaying a second user interface including a second prompt via one or more displays. In some examples, while displaying a second user interface, detecting one or more second inputs via one or more input devices, and obtaining access to protected content transmitted by a second electronic device in response to the detection of one or more second inputs and in accordance with the determination that one or more second inputs meet one or more criteria, includes updating the display of at least a representation of the three-dimensional environment of the second electronic device to have a second amount of occlusion.

[0134] Additionally or alternatively, in some examples, detecting one or more inputs further includes detecting the gaze of the user of an electronic device via one or more input devices, and one or more criteria include criteria that are met when the gaze of the user of the electronic device is directed towards a portion of a first user interface associated with obtaining access to protected content. Additionally or alternatively, in some examples, detecting one or more inputs includes detecting individual inputs provided by one or more separate electronic devices associated with the user of the electronic device, and one or more criteria include criteria that are met when one or more inputs provided by one or more separate electronic devices authenticate the identity of the user of the electronic device. Additionally or alternatively, in some examples, one or more criteria include criteria that are met when one or more inputs are detected at a time threshold of the first user interface being displayed.

[0135] In some cases, the display of at least a portion of the representation of the three-dimensional environment of the second electronic device is stopped in response to the detection of one or more inputs, and in accordance with the determination that one or more inputs meet one or more additional criteria because they were detected after a time threshold of the first user interface on which the one or more inputs are displayed. Additionally or alternatively, in some cases, the display of indications for the authentication process associated with obtaining access to protected content is stopped in response to the detection of one or more inputs, and in accordance with the determination that one or more inputs meet one or more additional criteria because one or more inputs are detected after a time threshold of the first user interface on which the one or more inputs are displayed.

[0136] Additionally or alternatively, in some examples, displaying a representation of at least a portion of a three-dimensional environment having a first occlusion amount includes blurring at least a portion of the representation of the three-dimensional environment. Additionally or alternatively, in some examples, displaying a representation of at least a portion of a three-dimensional environment having a first occlusion amount includes reducing the brightness of at least a portion of the representation of the three-dimensional environment. Additionally or alternatively, in some examples, the second occlusion amount includes zero occlusion.

[0137] In addition or alternatively, in some examples, protected content transmitted by a second electronic device is received by the electronic device during a communication session with the second electronic device, and receiving protected content transmitted by a second electronic device includes receiving a request to share a separate user interface displayed by the second electronic device within the communication session. In addition or alternatively, in some examples, displaying the first user interface includes displaying a separate user interface with a first amount of occlusion within a virtual window in the first user interface via one or more displays.

[0138] In addition or alternatively, in some examples, the protected content is associated with the corresponding audio, and the method further includes, upon receiving the protected content transmitted by the second electronic device, disabling the audio sharing and recording operations by the electronic device directed to the audio corresponding to the protected content. In addition or alternatively, in some examples, upon receiving the protected content, the sharing functionality of an application on an electronic device not associated with the protected content is maintained. In addition or alternatively, in some examples, the electronic device and the second electronic device are associated with a common enterprise.

[0139] Additionally or alternatively, in some examples, an electronic device and a second electronic device are associated with a common enterprise according to the determination that the electronic device is within a threshold distance from the second electronic device. Additionally or alternatively, in some examples, an electronic device and a second electronic device are associated with a common enterprise according to the determination that the electronic device and the second electronic device share a communication network associated with the common enterprise. Additionally or alternatively, in some examples, in response to receiving protected content, displaying an indication of an authentication process associated with obtaining access to protected content includes displaying a first prompt to provide an identification (ID) badge scan, one or more of which include criteria that are met when it is determined that an ID badge scan of a first ID badge associated with the user of the electronic device is associated with a common enterprise. Additionally or alternatively, in some examples, at least one of the electronic device and the second electronic device includes a head-mounted display (HMD).

[0140] Accordingly, as described above, some examples of the present disclosure relate to a method in which an electronic device communicating with one or more displays and one or more input devices includes detecting inputs corresponding to a request to perform one or more first actions involving protected content, which include displaying the protected content in a three-dimensional environment via one or more displays, and capturing an image of the protected content via one or more input devices. In some examples, the image includes at least a portion of the three-dimensional environment surrounding the protected content that is visible from the viewpoint of a user of the electronic device. Additionally or alternatively, in response to detecting an input, the electronic device initiates a process to perform one or more first actions, which includes generating a first image corresponding to the image, and displaying a representation of the first image in the three-dimensional environment via one or more displays. Additionally or alternatively, the representation of the first image includes a visual indication that the visibility of the protected content is limited, and an occluded representation of at least a portion of the three-dimensional environment that is visible from the viewpoint of a user of the electronic device, without including the protected content.

[0141] Some examples of the present disclosure relate to an electronic device comprising one or more processors, memory, and means for performing any of the methods described above.

[0142] Some examples of the present disclosure relate to a computer-readable storage medium storing one or more programs, wherein the one or more programs, when executed by one or more processors of an electronic device, include instructions causing the electronic device to perform one of the methods described above.

[0143] This disclosure intends that, in some examples, the data used may include personal data that uniquely identifies a particular person, or personal data that can be used to contact or locate a particular person. Such personal data may include demographic data, content consumption activity, location-based data, telephone numbers, email addresses, Twitter IDs, home addresses, data or records relating to a user's health or fitness level (e.g., vital signs measurements, medication information, exercise information), date of birth, or any other identifying or personal information. Specifically, one aspect of this disclosure, as described herein, is tracking a user's biometric data.

[0144] This disclosure acknowledges that such use of personal data in this technology may be in the user's best interest. For example, personal data may be used to display suggestion text that changes based on changes in the user's biometric data. For example, the suggestion text may be updated based on changes in the user's age, height, weight, and / or health history.

[0145] This disclosure aims to ensure that entities involved in the collection, analysis, disclosure, transfer, storage, or other use of such personal data adhere to robust privacy policies and / or privacy practices. Specifically, such entities shall implement and consistently use privacy policies and practices that are generally recognized as meeting or exceeding industry or government requirements for the strict confidentiality of personal data. Such policies should be readily accessible to users and should be updated as data collection and / or use changes. Personal data from users shall be collected for the lawful and legitimate use of the entity and shall not be shared or sold outside the scope of such lawful use. Furthermore, such collection / sharing should be carried out only after obtaining informed consent from the user. In addition, such entities shall take all necessary measures to protect and secure access to such personal data and ensure that others with access to such personal data adhere to those privacy policies and procedures. Furthermore, such entities may undergo third-party evaluations to demonstrate their compliance with widely accepted privacy policies and practices. Furthermore, policies and practices should be tailored to the specific types of personal data collected and / or accessed, and should comply with applicable laws and standards, including jurisdiction-specific considerations. For example, in the United States, the collection or access to certain health data may be subject to federal and / or state laws, such as the Health Insurance Portability and Accountability Act (HIPAA), while health data in other countries may be subject to other regulations and policies and should be addressed accordingly. Therefore, each country should maintain different privacy practices with respect to different types of personal data.

[0146] Notwithstanding the foregoing, this disclosure also intends to provide examples of how users can selectively prevent the use of or access to personal data. Specifically, this disclosure intends to provide hardware and / or software elements to prevent or block access to such personal data. For example, the technology could be configured to allow a user to choose to “opt in” or “opt out” of participating in the collection of personal data during or at any time thereafter when registering for the service. In another example, a user could choose not to enable the recording of personal data in a particular application (e.g., Application 1 and / or Application 2). In addition to providing “opt-in” and “opt-out” options, this disclosure intends to provide notices regarding access to or use of personal data. For example, a user may be notified when the collection of personal data begins, and then notified again immediately before the personal data is accessed by a device(s).

[0147] Furthermore, the intent of this disclosure is that personal data should be managed and processed in a manner that minimizes the risk of unintentional or unauthorized access or use. Risks can be minimized by limiting data collection and deleting data when it is no longer needed. In addition, where applicable, data anonymization can be used in certain health-related applications to protect user privacy. Anonymization can be facilitated, where appropriate, by removing certain identifiers (e.g., birth dates), controlling the amount or specificity of data stored (e.g., collecting location data at the city level rather than the address level), controlling how data is stored (e.g., aggregating data across all users), and / or by other means.

[0148] The above description of the purpose of this explanation is based on specific examples. However, the above illustrative description is not intended to be exhaustive or to limit this disclosure to the exact form disclosed. Many modifications and variations are possible in light of the above teachings. The examples have been selected and described to best illustrate the principles of this disclosure and their practical application, thereby enabling those skilled in the art to best use this disclosure and the various described examples with various modifications suitable for the specific use intended.

Claims

1. It is a method, In an electronic device that communicates with one or more displays, one or more input devices, and a second electronic device, Receiving protected content transmitted by the second electronic device, which is associated with the user's perspective of the second electronic device and includes at least a portion of the three-dimensional environment of the second electronic device, A first user interface associated with accessing the protected content via one or more displays in response to receiving the protected content, A representation of at least a portion of the three-dimensional environment that is visible from the user's perspective of the second electronic device and displayed with a first amount of occlusion, and Displaying a first user interface that includes an indication of the authentication process associated with obtaining access to the protected content, While the first user interface is displayed, one or more inputs are detected via the one or more input devices, In response to detecting one or more of the above inputs, Acquiring access to the protected content transmitted by the second electronic device, in accordance with the determination that one or more inputs satisfy one or more criteria, includes updating the display of at least a portion of the representation of the three-dimensional environment of the second electronic device to have a second shielding amount smaller than the first shielding amount. A method comprising maintaining the display of at least a portion of the representation of the three-dimensional environment of the second electronic device by the first amount of occlusion, in accordance with the determination that one or more of the inputs do not satisfy one or more of the criteria.

2. The method according to claim 1, wherein receiving protected content transmitted by the second electronic device includes receiving a screen capture associated with the protected content, which is visible from the perspective of a user of the second electronic device.

3. The method according to claim 2, wherein the screen capture corresponds to a screenshot including the protected content that is visible from the viewpoint of a user of the second electronic device.

4. Displaying an indication of the authentication process associated with obtaining access to the protected content is, The method according to claim 1, further comprising displaying, via one or more displays, one or more prompts for individual inputs to satisfy one or more criteria, the prompts being overlaid on a representation of at least a portion of the three-dimensional environment.

5. Detecting one or more inputs further includes capturing the user's eye scan of the electronic device via the one or more input devices. The method according to claim 1, wherein the one or more criteria include criteria that are met when the captured ice scan matches at least one or more stored ice scans stored on the electronic device.

6. The detection of one or more inputs further includes detecting one or more air gestures performed by the user of the electronic device via the one or more input devices. The method according to claim 1, wherein the one or more criteria include criteria that are satisfied when the one or more inputs authenticate the user identification information of the electronic device.

7. Displaying an indication of the authentication process associated with obtaining access to the protected content further includes displaying a first prompt for individual inputs to satisfy one or more criteria, In response to detecting one or more of the above inputs, In accordance with the determination that one or more of the inputs include a first input corresponding to a request to display a second prompt different from the first prompt, a second user interface including the second prompt is displayed via one or more displays. While the second user interface is displayed, one or more second inputs are detected via one or more input devices. In response to detecting one or more of the second inputs, The method according to claim 1, further comprising obtaining access to the protected content transmitted by the second electronic device, in accordance with the determination that one or more of the second inputs satisfy one or more of the criteria, and including updating the display of at least a portion of the representation of the three-dimensional environment of the second electronic device to have the second amount of shielding.

8. The detection of one or more inputs includes detecting individual inputs provided by one or more electronic devices, which are different from the electronic device, and which are associated with the user of the electronic device. The method according to claim 1, wherein the one or more criteria include criteria that are satisfied when the one or more inputs provided by each of the one or more electronic devices authenticate the user identification information of the electronic device.

9. The method according to claim 1, wherein the one or more criteria include criteria that are met when the one or more inputs are detected at a time threshold of the displayed first user interface.

10. In response to detecting one or more of the above inputs, Since the one or more inputs are detected after the time threshold of the first user interface is displayed, according to the determination that the one or more inputs satisfy one or more additional criteria, To discontinue the display of at least a portion of the representation of the three-dimensional environment of the second electronic device, The method according to claim 9, further comprising discontinuing the display of an indication of the authentication process associated with obtaining access to the protected content.

11. The method according to claim 1, wherein displaying at least a portion of the representation of the three-dimensional environment with the first amount of occlusion includes blurring at least a portion of the representation of the three-dimensional environment.

12. The method according to claim 1, wherein displaying at least a portion of the representation of the three-dimensional environment with the first amount of occlusion includes reducing the brightness of at least a portion of the representation of the three-dimensional environment.

13. The method according to claim 1, wherein the second amount of occlusion includes zero occlusion.

14. The protected content transmitted by the second electronic device is received by the electronic device during a communication session with the second electronic device. Receiving the protected content transmitted by the second electronic device is equivalent to receiving a request to share a separate user interface displayed by the second electronic device within the communication session. The method according to claim 1, further comprising displaying the individual user interfaces within a virtual window in the first user interface with a first amount of occlusion via one or more displays.

15. The aforementioned protected content is associated with the corresponding audio, The method according to claim 1, further comprising disabling the audio sharing and audio recording operations by the electronic device directed to the audio corresponding to the protected content in response to receiving the protected content transmitted by the second electronic device.

16. The aforementioned electronic device and the second electronic device are associated with a common company. The method according to claim 1, wherein the electronic device and the second electronic device are associated with the common enterprise according to the determination that the electronic device is within a threshold distance from the second electronic device.

17. In response to receiving the protected content, displaying an indication of the authentication process associated with obtaining access to the protected content includes displaying a first prompt to provide an identification (ID) badge scan. The method according to claim 16, wherein the one or more criteria include criteria that are met when an ID badge scan of a first ID badge associated with a user of the electronic device is determined to be associated with the common company.

18. The method according to claim 1, wherein at least one of the aforementioned electronic device and the second electronic device includes a head-mounted display (HMD).

19. It is an electronic device, One or more processors, Memory and A system comprising one or more programs, wherein the one or more programs are stored in the memory and are configured to be executed by the one or more processors, A command to receive protected content transmitted by a second electronic device, which is associated with the user's perspective of the second electronic device and includes at least a portion of the three-dimensional environment of the second electronic device, A first user interface associated with accessing the protected content via one or more displays in response to receiving the protected content, A representation of at least a portion of the three-dimensional environment that is visible from the user's perspective of the second electronic device and displayed with a first amount of occlusion, and A command to display a first user interface including an indication of an authentication process associated with obtaining access to the protected content, A command to detect one or more inputs via one or more input devices while the first user interface is displayed, In response to detecting one or more of the above inputs, An acquisition command to acquire access to the protected content transmitted by the second electronic device, in accordance with the determination that one or more inputs satisfy one or more criteria, the acquisition command includes updating the display of at least a portion of the representation of the three-dimensional environment of the second electronic device to have a second shielding amount smaller than the first shielding amount, An electronic device comprising: an instruction to maintain the display of at least a portion of the three-dimensional environment of the second electronic device at the first occlusion amount, in accordance with the determination that one or more of the inputs do not satisfy one or more of the criteria.

20. A non-temporary computer-readable storage medium storing one or more programs, wherein the one or more programs include instructions, and when the instructions are executed by one or more processors of an electronic device, the electronic device... Protected content transmitted by a second electronic device, which is associated with the user's perspective of the second electronic device and includes at least a portion of the three-dimensional environment of the second electronic device, is received. A first user interface associated with accessing the protected content via one or more displays in response to receiving the protected content, A representation of at least a portion of the three-dimensional environment that is visible from the user's perspective of the second electronic device and displayed with a first amount of occlusion, and Display a first user interface that includes an indication of the authentication process associated with obtaining access to the protected content. While the first user interface is displayed, one or more inputs are detected via one or more input devices. In response to detecting one or more of the above inputs, In accordance with the determination that one or more inputs satisfy one or more criteria, access to the protected content transmitted by the second electronic device is obtained, and such acquisition includes updating the display of at least a portion of the representation of the three-dimensional environment of the second electronic device to have a second shielding amount smaller than the first shielding amount. A non-temporary computer-readable storage medium that maintains the display of at least a portion of the representation of the three-dimensional environment of the second electronic device at the first occlusion amount, according to the determination that one or more of the aforementioned inputs do not satisfy one or more of the aforementioned criteria.

Images