Bounded Application Display Regions to Block Untrusted Overlays
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies face challenges in managing the display of content from multiple applications in a way that prevents untrusted applications from overlaying content onto trusted applications, potentially misleading users.
Innovation Solution
The implementation involves designating bounded volumetric regions for content display, where a device determines whether a second application's content request obstructs the field of view of a first trusted application. If it does, the request is denied to maintain security and user trust.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple applications are allowed to display content freely in a graphical environment, then application versatility and user choice are improved, but security risks increase as untrusted applications can overlay content onto trusted applications
Solution Approach 1:
The graphical environment is segmented into multiple depth buffers that create distinct display layers. Trusted applications are assigned to specific depth layers, and the system enforces rules that prevent untrusted applications from overlaying content onto trusted application layers. This segmentation allows multiple applications to display simultaneously while maintaining security boundaries between them.
2Ease of operation
If untrusted applications are permitted to display content in the foreground, then ease of operation for recent applications is improved, but harmful factors increase as users may be misled by fraudulent overlays
Solution Approach 1:
The system introduces an intermediary security mechanism that mediates between untrusted applications and trusted application content. This intermediary evaluates depth buffer relationships and application trust levels to determine whether content display requests are permitted. The intermediary prevents fraudulent overlays while still allowing legitimate foreground display, thus protecting users from deception without unduly restricting application accessibility.
3Reliability
If content overlaying is restricted to prevent fraud, then content authenticity is improved, but device complexity increases due to field of view obstruction detection
Solution Approach 1:
The system resolves the complexity of field of view detection by transitioning to a third-dimensional depth buffer approach. Instead of analyzing two-dimensional screen coordinates and field of view angles, the system uses depth values associated with each pixel to determine content layering relationships. This dimensional change simplifies the detection mechanism while maintaining accurate control over content authenticity and preventing fraudulent overlays.
Data Source
AI summary
Various implementations disclosed herein include devices, systems, and methods for designating a bounded volumetric region in which an application can display content. In some implementations, a device includes a display, one or more processors, and a memory. While displaying first content associated with a first application within a first bounded region, the device detects a request from a second application to display second content in a second bounded region. If the first application has a first characteristic, the device determines whether the second bounded region obstructs a field of view of the first bounded region from the device. If the second bounded region obstructs the field of view of the first bounded region, the device determines whether to deny the request to display the second content in the second bounded region.