Bounded Volumetric Display Regions Against Untrusted Overlays
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing devices struggle to prevent untrusted applications from overlaying content onto trusted applications, potentially misleading users and compromising security in graphical environments.
Innovation Solution
Devices designate a bounded volumetric region for trusted applications to display content, preventing untrusted applications from obstructing the field of view or overlapping with trusted content, using gaze information and security characteristics to manage content display.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If untrusted applications are allowed to display content in graphical environments, then application versatility and user interface flexibility are improved, but security and content integrity deteriorate due to potential overlaying of untrusted content on trusted applications
Solution Approach 1:
The patent divides the graphical display environment into distinct spatial regions or layers, separating trusted application content from untrusted application content. This segmentation allows multiple applications to display simultaneously while maintaining security boundaries that prevent untrusted content from overlaying trusted content, thus resolving the contradiction between display flexibility and content integrity.
Solution Approach 2:
The patent introduces a security manager or intermediary system that mediates between applications and the display. This intermediary monitors and controls what content can be displayed, allowing versatile application functionality while preventing untrusted applications from compromising trusted content through improper overlaying, thereby maintaining both flexibility and security.
2Reliability
If content display restrictions are imposed on applications, then content security and user trust are improved, but user interface flexibility and application functionality are reduced
Solution Approach 1:
The patent applies different display permissions and restrictions to different spatial regions and content types. Trusted applications receive full display rights in their designated regions, while untrusted applications have limited rights. This localized differentiation maintains user interface flexibility for trusted content while enforcing security restrictions only where necessary, resolving the contradiction between security and ease of operation.
3Adaptability or versatility
If multiple applications display content simultaneously in the same spatial region, then user interface flexibility is improved, but user confusion and misidentification of content source increase
Solution Approach 1:
The patent segments the display into distinct spatial regions or layers associated with different applications. This segmentation ensures that even when multiple applications display simultaneously, their content remains visually distinguishable and properly attributed to their respective sources, preventing user confusion while maintaining multi-application capability.
Solution Approach 2:
The patent employs visual differentiation techniques including color coding, transparency levels, or visual markers to distinguish content from different applications. This allows multiple applications to display in the same general spatial region while maintaining clear visual identification of content sources, thus preventing user confusion and preserving information clarity.
Data Source
AI summary
Various implementations disclosed herein include devices, systems, and methods for designating a bounded volumetric region in which an application can display content. In some implementations, a device includes a display, one or more processors, and a memory. While displaying first content associated with a first application within a first bounded region, the device detects a request from a second application to display second content in a second bounded region. If the first application has a first characteristic, the second application has a second characteristic, and the first characteristic has a higher classification than the second characteristic, the device determines whether the second bounded region obstructs a line of sight to the first bounded region from the device. If the second bounded region obstructs the line of sight to the first bounded region, the device determines whether to deny the request to display the second content in the second bounded region.