# US 11,443,059 B2 · System and method to prevent surveillance and preserve privacy in virtual reality > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,443,059 B2 - Document ID: US11443059B2 - Status: Granted - Kind: B2 - Application number: 16/480,275 - Filed: 2018-01-31 - Published: 2019-12-05 - Granted: 2022-09-13 - Earliest claimed: 2017-02-07 - Assignees: IOT Holdings, Inc. - Applicants: IoT Holdings, Inc. - Inventors: Benjamin Falchuk; Shoshana Loeb; Ralph Neff - Web page: https://patentgrep.com/patent/US11443059B2 ## CPC - G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes} - G06F 3/04815: Interaction with a metaphor-based environment or interaction object displayed as three-dimensional [3D], e.g. changing the user viewpoint with respect to the environment or object - G06T 19/00: Manipulating three-dimensional [3D] models or images for computer graphics - H04L 63/0407: {wherein the identity of one or more communicating identities is hidden (cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00)} - H04L 63/0421: {Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer} - H04W 12/02: Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] - H04W 12/033: of the user plane, e.g. user's traffic - H04W 12/67: Risk-dependent, e.g. selecting a security level depending on risk profiles - G06F 2221/2109: Game systems - G06F 2221/2111: Location-sensitive, e.g. geographical location, GPS - G06T 2219/024: Multi-user, collaborative environment - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06T: IMAGE DATA PROCESSING OR GENERATION, IN GENERAL - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Preserving user privacy and preventing surveillance on behalf of users of a virtual reality world. One or more plans are available when a privacy or surveillance risk to a user is detected. In one plan, configurable scripts execute on behalf of the user to create a confusing array of clone avatars that obfuscate the real user avatar behavior. A malevolent avatar, attempting to surveil the user, may have difficulty distinguishing the clones from the user and may miss out on private insights he might otherwise have learned from the user's behavior. In another exemplary privacy plan, a copy of part of the virtual world is spawned, occupied exclusively by the user's avatar, and then merged into the main world. Privacy plans may be selected manually or automatically in response to perceived privacy threats to strike a balance between privacy and enjoyment within the virtual world. ## Claims ### Claim 1 A method comprising: providing, to a VR user having an avatar in a virtual reality (VR) world, a first privacy plan configuration interface, the first privacy plan configuration interface enabling a selection from among a plurality of privacy plans, wherein each privacy plan is operable to conceal activities performed by the avatar within the VR world; receiving, from the VR user, a first selection indicating a first selected one of the plurality of privacy plans; monitoring trigger conditions including at least a location of the avatar in the VR world; and automatically activating the selected first privacy plan during interaction of the user's avatar in the VR world, responsive to detecting a trigger condition. ### Claim 2 (depends on 1) The method of claim 1 further comprising: receiving, from the VR user, a second selection indicating a second selected one of the plurality of privacy plans; and activating the selected second privacy plan during interaction of the user's avatar in the VR world. ### Claim 3 (depends on 1) The method of claim 1 further comprising: responsive to receiving the first selection, selectively enabling or disabling selection options in the privacy plan configuration interface, based on compatibility with the first selected privacy plan. ### Claim 4 (depends on 3) The method of claim 3 further comprising: through the privacy plan configuration interface, receiving selection of a second selected privacy plan compatible with the first selected privacy plan; and activating the selected second privacy plan in combination with the first selected privacy plan during interaction of the user's avatar in the VR world. ### Claim 5 (depends on 1) The method of claim 1 wherein the trigger conditions are specified by the VR user. ### Claim 6 (depends on 1) The method of claim 1 wherein the trigger conditions include conditions not specified by the VR user. ### Claim 7 (depends on 1) The method of claim 1 wherein the plurality of privacy plans comprises at least two selected from the list consisting of: generating one or more clones of the VR user's avatar, the clones moving autonomously through the VR world; teleporting the VR user's avatar to a remote location; generating a private copy of at least a portion of the VR world; and locking other avatars out of a location in the VR world. ### Claim 8 (depends on 7) The method of claim 7 wherein the clones perform scripted behaviors. ### Claim 9 (depends on 7) The method of claim 7 wherein the clones are similar in appearance to the VR user's avatar. ### Claim 10 (depends on 7) The method of claim 7 wherein the clones are spawned at substantially the same VR world location as the VR user's avatar. ### Claim 11 (depends on 1) The method of claim 1 wherein the selected first privacy plan comprises: determining whether the VR user's avatar is observable by other avatars; and responsive to determining that the VR user's avatar is not observable by other avatars, disguising the VR user's avatar. ### Claim 12 (depends on 7) The method of claim 7 further comprising: merging alterations of the private copy with the VR world. ### Claim 13 (depends on 7) The method of claim 7 further comprising: monitoring trigger conditions; responsive to detecting a trigger condition, automatically selecting a privacy plan for the VR user; and implementing or recommending, to the VR user, the automatically selected privacy plan. ### Claim 14 (depends on 1) The method of claim 1, wherein the avatar has a location in the VR world, and wherein the selected first privacy plan obfuscates the location of the avatar in the VR world. ### Claim 15 A system comprising a processor and a non-transitory computer-readable medium storing instructions that, when executed, are operative to perform functions comprising: providing, to a VR user having an avatar in a virtual reality (VR) world, a first privacy plan configuration interface, the first privacy plan configuration interface enabling a selection from among a plurality of privacy plans, wherein each privacy plan is operable to conceal activities performed by the avatar within the VR world; receiving, from the VR user, a first selection indicating a first selected one of the plurality of privacy plans; monitoring trigger conditions including at least a location of the avatar in the VR world; and automatically activating the selected first privacy plan during interaction of the user's avatar in the VR world responsive to detecting a trigger condition. ### Claim 16 (depends on 15) The system of claim 15, wherein the avatar has a location in the VR world, and wherein the selected first privacy plan obfuscates the location of the avatar in the VR world. ### Claim 17 (depends on 15) The system of claim 15 wherein the plurality of privacy plans comprises at least two selected from the list consisting of: generating one or more clones of the VR user's avatar, the clones moving autonomously through the VR world; teleporting the VR user's avatar to a remote location; generating a private copy of at least a portion of the VR world; and locking other avatars out of a location in the VR world. ### Claim 18 (depends on 15) The system of claim 15, wherein the selected first privacy plan comprises: determining whether the VR user's avatar is observable by other avatars; and responsive to determining that the VR user's avatar is not observable by other avatars, disguising the VR user's avatar.