# US 2020/0401687 A1 · Secure authorization via modal window > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2020/0401687 A1 - Document ID: US20200401687A1 - Status: Published application - Kind: A1 - Application number: 16/894,170 - Filed: 2020-06-05 - Published: 2020-12-24 - Earliest claimed: 2019-06-21 - Assignees: Magic Leap, Inc. - Applicants: Magic Leap, Inc. - Inventors: Genevieve Mak - Web page: https://patentgrep.com/patent/US20200401687A1 ## CPC - G06F 21/36: by graphic or iconic representation - G06F 3/011: {Arrangements for interaction with the human body, e.g. for user immersion in virtual reality (blind teaching G09B21/00)} - G06F 3/012: {Head tracking input arrangements} - G06F 3/0481: based on specific properties of the displayed interaction object or a metaphor-based environment, e.g. interaction with desktop elements like windows or icons, or assisted by a cursor's changing behaviour or appearance - G06F 3/0482: Interaction with lists of selectable items, e.g. menus - G06F 9/451: Execution arrangements for user interfaces - G06F 21/31: User authentication - G06F 21/33: using certificates - G06T 19/006: {Mixed reality (object pose determination, tracking or camera calibration for mixed reality G06T7/00)} - H04W 12/33: using wearable devices, e.g. using a smartwatch or smart-glasses - G06F 2203/04804: Transparency, e.g. transparent or translucent windows - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06T: IMAGE DATA PROCESSING OR GENERATION, IN GENERAL - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract The disclosure relates to systems and methods for authorization of a user in a spatial 3D environment. The systems and methods can include receiving a request from an application executing on a mixed reality display system to authorize the user with a web service, displaying to the user an authorization window configured to accept user input associated with authorization by the web service and to prevent the application or other applications from receiving the user input, communicating the user input to the web service, receiving an access token from the web service, in which the access token is indicative of successful authorization by the web service, and communicating the access token to the application for authorization of the user. The authorization window can be a modal window displayed in an immersive mode by the mixed reality display system. ## Claims ### Claim 1 A display system for displaying virtual content in a three-dimensional (3D) spatial environment, the display system comprising: a head-mounted display configured to present virtual content to an eye of a user of the display system; and circuitry in communication with the head-mounted display, the circuitry configured to: execute an application configured to present application-specific virtual content to the user; receive an authorization request from the application to authorize the user with a web service; background the application; execute an authorization service configured to: cause the head-mounted display to present to the user a modal authorization window configured to accept user input and to prevent the application or other applications from receiving the user input; receive the user input associated with authorization by the web service; communicate the user input to the web service; receive an access token from the web service, the access token indicative of successful authorization by the web service; and communicate the access token to the application; terminate the authorization service; and foreground the application. ### Claim 2 (depends on 1) The display system of claim 1, wherein the application comprises an immersive application. ### Claim 3 (depends on 1) The display system of claim 1, wherein the head-mounted display is configured to present the application-specific virtual content and not to display to virtual content generated by other applications executed by the display system. ### Claim 4 (depends on 1) The display system of claim 1, wherein the application comprises a landscape application. ### Claim 5 (depends on 1) The display system of claim 1, wherein the head-mounted display is configured to present the application-specific virtual content and also to display to virtual content generated by other applications executed by the display system. ### Claim 6 (depends on 1) The display system of claim 1, wherein said backgrounding the application comprises causing the circuitry to perform one or more of: execute the application at a lower priority, hide the application-specific virtual content, reduce an opacity or luminance of the application-specific virtual content, increase a transparency of the application-specific virtual content, increase a display depth of the application-specific virtual content, decrease a size of the application-specific virtual content, or prevent the application from receiving user input. ### Claim 7 (depends on 1) The display system of claim 1, wherein said foregrounding the application comprises causing the circuitry to perform one or more of: execute the application at a higher priority, display the application-specific virtual content, increase an opacity or luminance of the application-specific virtual content, decrease a transparency of the application-specific virtual content, decrease a display depth of the application-specific virtual content, increase a size of the application-specific virtual content, or allow the application to receive user input. ### Claim 8 (depends on 1) The display system of claim 1, wherein the head-mounted display is configured to display the modal authorization window in a lazy headlock setting. ### Claim 9 (depends on 1) The display system of claim 1, wherein the head-mounted display is configured to display the modal authorization window at a position that moves in response to a head movement of the user. ### Claim 10 (depends on 9) The display system of claim 9, wherein the authorization window from the web service comprises one or more of: a sign-on window, a window configured to accept a user password, or a window configured to accept user payment credentials. ### Claim 11 (depends on 1) The display system of claim 1, wherein the authorization service is executed as a child of the application. ### Claim 12 (depends on 1) The display system of claim 1, wherein the authorization service is called from the application via an application programming interface (API) call. ### Claim 13 (depends on 1) The display system of claim 1, wherein the web service is a third-party web service accessed remotely from the display system. ### Claim 14 A method for authorizing a user of a mixed reality display system, the method comprising: receiving a request from an application executing on the mixed reality display system to authorize the user with a web service; displaying to the user an authorization window configured to accept user input associated with authorization by the web service and to prevent the application or other applications from receiving the user input; communicating the user input to the web service; receiving an access token from the web service, the access token indicative of successful authorization by the web service; and communicating the access token to the application. ### Claim 15 (depends on 14) The method of claim 14, further comprising backgrounding the application prior to displaying to the user the authorization window and foregrounding the application after receiving the access token from the web service. ### Claim 16 (depends on 15) The method of claim 15, wherein the authorization window comprises a modal window. ### Claim 17 (depends on 15) The method of claim 15, wherein the authorization window is a child of the application. ### Claim 18 A method for authorizing a user of a mixed reality display system, the method comprising: executing an application on the mixed reality display system, the application generating application-specific virtual content for display to the user; registering a web address associated with the application; displaying to the user a modal authorization window while hiding the application-specific virtual content from display to the user; receiving a web response status code in response to user input entered via the modal authorization window; and communicating the web response status code to the application using the web address associated with the application. ### Claim 19 (depends on 18) The method of claim 18, wherein hiding the application-specific virtual content comprises one or more of: not displaying the application-specific virtual content, reducing opacity or luminance of the application-specific virtual content, increasing transparency of the application-specific virtual content, increasing display depth of the application-specific virtual content, decreasing a size of the application-specific virtual content, or displaying the modal authorization window in an immersive mode. ### Claim 20 (depends on 19) The method of claim 19, wherein the modal authorization window prevents the application or other applications from receiving the user input.