Office Action 1: Notice of Allowance (2024-08-30)

CLAIMS:
U. S. Patent Application Attorney Docket: 22135-1685001 / 220568US01

WHAT IS CLAIMED IS:

1\. A computer-implemented method comprising:
identifying a request to initiate a data privacy integration protocol in a multiple- application landscape for an object with a first identifier;
determining that at least one context-using application participant of the data privacy integration protocol relies on a context-providing application participant of the data privacy integration protocol for resolving the first identifier to a local identifier local to a context of the context-providing application participant;
sending a resolution request to each context-providing application participant that can provide resolution for at least one context-using application;
receiving, from each context-providing application participant in response to the resolution request, a local identifier corresponding to the first identifier that is local to the context of the context-providing application participant;
sending a first data privacy integration protocol work package that includes the local identifier to each context-using application participant;
receiving a first data privacy integration protocol response from each context-using application participant that includes a result of a respective context-using participant executing the first data privacy integration protocol work package using the local identifier;
sending a second data privacy integration protocol work package that includes the first identifier to each protocol application participant other than context-using application participants;
receiving a second data privacy integration protocol response from each non- context-using application participant that includes a result of a respective non-context- using participant executing the second data privacy integration protocol work package using the first identifier; and
determining a data privacy integration protocol result based on evaluating first data privacy integration protocol responses received from context-using application participants and second data privacy integration protocol responses received from non-context-using application participants.

U. S. Patent Application Attorney Docket: 22135-1685001 / 220568US01

2\. The computer-implemented method of claim 1, wherein the data privacy integration protocol is an integrated end of purpose protocol and the request is to determine whether the object can be blocked.

3\. The computer-implemented method of claim 1, wherein the data privacy integration protocol is an aligned purpose disassociation protocol and the request is to determine whether a purpose can be disassociated from the object.

4\. The computer-implemented method of claim 1, wherein the data privacy integration protocol is an integrated personal data retrieval protocol, the object corresponds to a data subject, and the request is to gather data concerning the data subject.

5\. The computer-implemented method of claim 1, wherein a first context- using application participant understands the local identifier of a first context-providing protocol participant.

6\. The computer-implemented method of claim 5, wherein the first context- providing protocol participant replicates data including an object with the local identifier to the first context-using protocol participant.

7\. The computer-implemented method of claim 1, wherein the first identifier is a common identifier understood by multiple applications of the multiple-application landscape.

8\. The computer-implemented method of claim 7, wherein the common identifier is assigned to the object by an object redistribution service.

9\. The computer-implemented method of claim 8, wherein the object redistribution service is a master data integration service.

U. S. Patent Application Attorney Docket: 22135-1685001 / 220568US01

10\. The computer-implemented method of claim 1, wherein the first identifier is received in a request from a requester that initiates the data privacy integration protocol.

11\. The computer-implemented method of claim 1, wherein an initial request from a requester includes a second identifier different from the first identifier, the method further comprising:
sending a second resolution request to a first context-providing application participant to resolve the second identifier to a common identifier understood by multiple applications of the multiple-application landscape;
receiving the common identifier as the first identifier in response to the second resolution request; and
modifying the initial request to include the first identifier rather than the second identifier.

12\. The computer-implemented method of claim 1, further comprising:
receiving a second request that includes a second identifier from a first context- using application;
sending a second resolution request to a first context-providing application to resolve the second identifier to a local identifier; and
providing the local identifier in a third data privacy integration work package to a second context-using application.
13\. The computer-implemented method of claim 1, further comprising receiving, from a first context-providing application participant in response to the resolution request, along with the local identifier, a second local identifier corresponding to the first identifier that is local to a second context understood by the context-providing application participant.

U. S. Patent Application Attorney Docket: 22135-1685001 / 220568US01

14\. A system comprising:
one or more computers; and
a computer-readable medium coupled to the one or more computers having instructions stored thereon which, when executed by the one or more computers, cause the one or more computers to perform operations comprising:
identifying a request to initiate a data privacy integration protocol in a multiple-application landscape for an object with a first identifier;
determining that at least one context-using application participant of the data privacy integration protocol relies on a context-providing application participant of the data privacy integration protocol for resolving the first identifier to a local identifier local to a context of the context-providing application participant;
sending a resolution request to each context-providing application participant that can provide resolution for at least one context-using application;
receiving, from each context-providing application participant in response to the resolution request, a local identifier corresponding to the first identifier that is local to the context of the context-providing application participant;
sending a first data privacy integration protocol work package that includes the local identifier to each context-using application participant;
receiving a first data privacy integration protocol response from each context-using application participant that includes a result of a respective context-using participant executing the first data privacy integration protocol work package using the local identifier;
sending a second data privacy integration protocol work package that includes the first identifier to each protocol application participant other than context-using application participants;
receiving a second data privacy integration protocol response from each non-context-using application participant that includes a result of a respective non-context- using participant executing the second data privacy integration protocol work package using the first identifier; and
determining a data privacy integration protocol result based on evaluating first data privacy integration protocol responses received from context-using application U. S. Patent Application Attorney Docket: 22135-1685001 / 220568US01 participants and second data privacy integration protocol responses received from non- context-using application participants.

15\. The system of claim 14, wherein the data privacy integration protocol is an integrated end of purpose protocol and the request is to determine whether the object can be blocked.

16\. The system of claim 14, wherein the data privacy integration protocol is an aligned purpose disassociation protocol and the request is to determine whether a purpose can be disassociated from the object.

17\. The system of claim 14, wherein the data privacy integration protocol is an integrated personal data retrieval protocol, the object corresponds to a data subject, and the request is to gather data concerning the data subject.

U. S. Patent Application Attorney Docket: 22135-1685001 / 220568US01

18\. A non-transitory, computer-readable medium coupled to one or more processors and having instructions stored thereon which, when executed by the one or more processors, cause the one or more processors to perform operations, the operations comprising:
identifying a request to initiate a data privacy integration protocol in a multiple- application landscape for an object with a first identifier;
determining that at least one context-using application participant of the data privacy integration protocol relies on a context-providing application participant of the data privacy integration protocol for resolving the first identifier to a local identifier local to a context of the context-providing application participant;
sending a resolution request to each context-providing application participant that can provide resolution for at least one context-using application;
receiving, from each context-providing application participant in response to the resolution request, a local identifier corresponding to the first identifier that is local to the context of the context-providing application participant;
sending a first data privacy integration protocol work package that includes the local identifier to each context-using application participant;
receiving a first data privacy integration protocol response from each context-using application participant that includes a result of a respective context-using participant executing the first data privacy integration protocol work package using the local identifier;
sending a second data privacy integration protocol work package that includes the first identifier to each protocol application participant other than context-using application participants;
receiving a second data privacy integration protocol response from each non- context-using application participant that includes a result of a respective non-context- using participant executing the second data privacy integration protocol work package using the first identifier; and
determining a data privacy integration protocol result based on evaluating first data privacy integration protocol responses received from context-using application participants and second data privacy integration protocol responses received from non-context-using application participants.

U. S. Patent Application Attorney Docket: 22135-1685001 / 220568US01

19\. The computer-readable medium of claim 18, wherein the data privacy integration protocol is an integrated end of purpose protocol and the request is to determine whether the object can be blocked.

20\. The computer-readable medium of claim 18, wherein the data privacy integration protocol is an aligned purpose disassociation protocol and the request is to determine whether a purpose can be disassociated from the object. 33 34 35 36 37 38 39

OFFICE ACTION:
Notice of Pre-AIA  or AIA  Status
The present application, filed on or after March 16, 2013, is being examined under the first inventor to file provisions of the AIA .
Response to Communication
1.	This office Action is in response to a communication received on December 01, 2022.
Claims 1-20 are pending in this application.
Information Disclosure Statement
2.	The information disclosure statement (IDS) submitted on 12/01/2022 and 02/23/2024 are in compliance with the provisions of 37 CFR 1.97.  Accordingly, the information disclosure statement is being considered by the examiner.
Reasons for allowance
3.	The following is an Examiner's statement of reasons for allowance:
A completed search of available patent literature and non-patent literature was conducted by the examiner. In interpreting the current claims, in light of the specification, the Examiner finds the claimed invention to be patentably distinct from the prior art found during the search conducted. The prior art found during the search conducted does not disclose, with respect to the independent and dependent claims. Therefore, the claims are allowed.
Any comments considered necessary by applicant must be submitted no later than the payment of the issue fee and, to avoid processing delays, should preferably accompany the issue fee. Such submission should be clearly labeled Comments on Statement of Reasons for Allowance.”
Allowable Subject Matter
4.       Claims 1-20 are allowed.
Conclusion



CITED REFERENCE SUMMARIES: Ref US20230237192A1: Claims:
- 40 . (canceled)
A non-transitory computer readable medium containing instructions that when executed by at least one processor cause the at least one processor to perform operations for managing privacy in an extended reality environment, the operations comprising: receiving image data from an image sensor associated with a wearable extended reality appliance, the image data is reflective of a physical environment; accessing data characterizing a plurality of virtual objects for association with locations in the physical environment, the data representing a first virtual object and a second virtual object; accessing privacy settings classifying at least one of the first virtual object and a location of the first virtual object as private, classifying a first extended reality appliance as approved for presentation of private information, and classifying a second extended reality appliance as non-approved for presentation of the private information; and simultaneously enabling a presentation of an augmented viewing of the physical environment, such that during the simultaneous presentation, the first extended reality appliance presents the first virtual object and the second virtual object in the physical environment, and the second extended reality appliance presents the second virtual object, omitting presentation of the first virtual object in compliance with the privacy settings.
receiving image data from an image sensor associated with a wearable extended reality appliance, the image data is reflective of a physical environment;
accessing data characterizing a plurality of virtual objects for association with locations in the physical environment, the data representing a first virtual object and a second virtual object;
accessing privacy settings classifying at least one of the first virtual object and a location of the first virtual object as private, classifying a first extended reality appliance as approved for presentation of private information, and classifying a second extended reality appliance as non-approved for presentation of the private information; and
simultaneously enabling a presentation of an augmented viewing of the physical environment, such that during the simultaneous presentation, the first extended reality appliance presents the first virtual object and the second virtual object in the physical environment, and the second extended reality appliance presents the second virtual object, omitting presentation of the first virtual object in compliance with the privacy settings.
The non-transitory computer readable medium of claim 41 , wherein the privacy settings classify as private a first location associated with the first virtual object, and the operations further include designating other virtual objects in the first location as private and blocking the other virtual objects from display via the second extended reality appliance.
The non-transitory computer readable medium of claim 41 , wherein the privacy settings classify as private a first location associated with the first virtual object, and the operations further including detecting a user-initiated movement of the first virtual object to a second location, and in response to the user-initiated movement, enabling the second extended reality appliance to present the first virtual object and the second virtual object.
The non-transitory computer readable medium of claim 41 , wherein the privacy settings classify as private a first location associated with the first virtual object, and the operations further including detecting a user-initiated movement of the second virtual object to the first location, and in response to the user-initiated movement, preventing the second extended reality appliance from presenting the second virtual object.
The non-transitory computer readable medium of claim 41 , wherein the privacy settings classify the first virtual object as private, and the operations further including detecting a user-initiated movement of the first virtual object to a second location, and in response to the user-initiated movement, preventing the second extended reality appliance from presenting the first virtual object at the second location.
The non-transitory computer readable medium of claim 41 , wherein the privacy settings classify the first virtual object as private, and the operations further include detecting a user-initiated movement of the second virtual object to a first location associated with the first virtual object, and enabling the second extended reality appliance to present the second virtual object at the first location.
The non-transitory computer readable medium of claim 41 , wherein the privacy settings further classify at least one of the second virtual object and a location of the second virtual object as public.
The non-transitory computer readable medium of claim 47 , wherein the privacy settings classify a second location associated with the second virtual object as public, and the operations further include detecting a user-initiated movement of the first virtual object to the second location, and in response to the user-initiated movement, enabling the second extended reality appliance to present the first virtual object.
The non-transitory computer readable medium of claim 41 , wherein enabling the simultaneous presentation includes causing the second extended reality appliance to present the second virtual object at a second location associated with the second virtual object and to present a distorted representation of the first virtual object at the location of the first virtual object in compliance with the privacy settings.
The non-transitory computer readable medium of claim 41 , wherein the operations further include presenting via the wearable extended reality appliance at least one of an indication that the first virtual object is classified as private, an indication that a location associated with the first virtual object is classified as private and an indication that at least one of the first virtual object and the location associated with the first virtual object is classified as private.
The non-transitory computer readable medium of claim 41 , wherein the operations further include receiving an input identifying a specific region of the physical environment as private.
The non-transitory computer readable medium of claim 51 , wherein the received input includes the image data and the operations further include analyzing the image data using an object detection algorithm to detect a physical object in the specific region of the physical environment, and identifying the specific region of the physical environment as private based on the detected physical object.
The non-transitory computer readable medium of claim 52 , wherein the physical object is movable, and the operations further include analyzing the image data to identify a movement of the physical object out of the specific region of the physical environment, and reclassifying the specific region of the physical environment as public in response to the movement of the physical object.
The non-transitory computer readable medium of claim 51 , wherein the operations further include classifying the first virtual object as private when a distance of the first virtual object from the specific region of the physical environment is less than a threshold distance.
The non-transitory computer readable medium of claim 51 , wherein the operations further include reclassifying the first virtual object as public when a location of the first virtual object changes from the specific region to a location outside the specific region of the physical environment.
The non-transitory computer readable medium of claim 51 , wherein the operations further include classifying the first virtual object as private when the first virtual object is docked to a physical object included in the specific region of the physical environment.
The non-transitory computer readable medium of claim 56 , wherein the physical object is movable and wherein during the simultaneous presentation, other virtual objects in proximity to a current location of the physical object are also blocked from display via the second extended reality appliance.
The non-transitory computer readable medium of claim 41 , wherein the operations further include analyzing the image data using an object detection algorithm to detect a physical object in a particular region of the physical environment, and classifying the particular region of the physical environment as public based on the detected physical object.
A method for managing privacy in an extended reality environment, the method comprising: receiving image data from an image sensor associated with a wearable extended reality appliance, the image data is reflective of a physical environment; accessing data characterizing a plurality of virtual objects for association with locations in the physical environment, the data representing a first virtual object and a second virtual object; accessing privacy settings classifying at least one of the first virtual object and a location of the first virtual object as private, classifying a first extended reality appliance as approved for presentation of private information, and classifying a second extended reality appliance as non-approved for presentation of the private information; and simultaneously enabling a presentation of an augmented viewing of the physical environment, such that during the simultaneous presentation, the first extended reality appliance presents the first virtual object and the second virtual object in the physical environment, and the second extended reality appliance presents the second virtual object, omitting presentation of the first virtual object in compliance with the privacy settings.
A system for managing privacy in an extended reality environment, the system comprising: at least one processing device configured to: receive image data from an image sensor associated with a wearable extended reality appliance, the image data is reflective of a physical environment; access data characterizing a plurality of virtual objects for association with locations in the physical environment, the data representing a first virtual object and a second virtual object; access privacy settings classifying at least one of the first virtual object and a location of the first virtual object as private, classifying a first extended reality appliance as approved for presentation of private information, and classifying a second extended reality appliance as non-approved for presentation of the private information; and simultaneously enable a presentation of an augmented viewing of the physical environment, such that during the simultaneous presentation, the first extended reality appliance presents the first virtual object and the second virtual object in the physical environment, and the second extended reality appliance presents the second virtual object, omitting presentation of the first virtual object in compliance with the privacy settings.
at least one processing device configured to: receive image data from an image sensor associated with a wearable extended reality appliance, the image data is reflective of a physical environment; access data characterizing a plurality of virtual objects for association with locations in the physical environment, the data representing a first virtual object and a second virtual object; access privacy settings classifying at least one of the first virtual object and a location of the first virtual object as private, classifying a first extended reality appliance as approved for presentation of private information, and classifying a second extended reality appliance as non-approved for presentation of the private information; and simultaneously enable a presentation of an augmented viewing of the physical environment, such that during the simultaneous presentation, the first extended reality appliance presents the first virtual object and the second virtual object in the physical environment, and the second extended reality appliance presents the second virtual object, omitting presentation of the first virtual object in compliance with the privacy settings.
receive image data from an image sensor associated with a wearable extended reality appliance, the image data is reflective of a physical environment;
access data characterizing a plurality of virtual objects for association with locations in the physical environment, the data representing a first virtual object and a second virtual object;
access privacy settings classifying at least one of the first virtual object and a location of the first virtual object as private, classifying a first extended reality appliance as approved for presentation of private information, and classifying a second extended reality appliance as non-approved for presentation of the private information; and
simultaneously enable a presentation of an augmented viewing of the physical environment, such that during the simultaneous presentation, the first extended reality appliance presents the first virtual object and the second virtual object in the physical environment, and the second extended reality appliance presents the second virtual object, omitting presentation of the first virtual object in compliance with the privacy settings.
- 120 . (canceled)
Ref US20230177182A1: Claims:
A computer-implemented method comprising: determining, by a data privacy integration service, a condition that indicates that all applications in a multiple-application landscape are to attempt a blocking-related operation on at least one object as part of a data privacy integration protocol; identifying blocking responder group configurations that group applications in the multiple-application landscape into multiple blocking responder groups for performing blocking-related operations in response to requests from the data privacy integration service, wherein the multiple blocking responder groups include at least a first blocking responder group and a second blocking responder group; sending a blocking-related command to perform a blocking-related operation on the at least one object to applications in the first blocking responder group; receiving blocking-related statuses from each of the applications in the first blocking responder group; determining whether all blocking-related statuses received from the applications in the first blocking responder group indicate successful completion of the blocking-related command; in response to determining that all blocking-related statuses received from the applications in the first blocking responder group indicate successful completion of the blocking-related command, sending the blocking-related command for the at least one object to applications in the second blocking responder group; and in response to determining that at least one blocking-related status received from the applications in the first blocking responder group does not indicate successful completion of the blocking-related command, sending a reversal command for the at least one object to applications in the first blocking responder group that instructs the applications in the first blocking responder group to perform a reversal operation to reverse the blocking-related operation on the at least one object.
determining, by a data privacy integration service, a condition that indicates that all applications in a multiple-application landscape are to attempt a blocking-related operation on at least one object as part of a data privacy integration protocol;
identifying blocking responder group configurations that group applications in the multiple-application landscape into multiple blocking responder groups for performing blocking-related operations in response to requests from the data privacy integration service, wherein the multiple blocking responder groups include at least a first blocking responder group and a second blocking responder group;
sending a blocking-related command to perform a blocking-related operation on the at least one object to applications in the first blocking responder group;
receiving blocking-related statuses from each of the applications in the first blocking responder group;
determining whether all blocking-related statuses received from the applications in the first blocking responder group indicate successful completion of the blocking-related command;
in response to determining that all blocking-related statuses received from the applications in the first blocking responder group indicate successful completion of the blocking-related command, sending the blocking-related command for the at least one object to applications in the second blocking responder group; and
in response to determining that at least one blocking-related status received from the applications in the first blocking responder group does not indicate successful completion of the blocking-related command, sending a reversal command for the at least one object to applications in the first blocking responder group that instructs the applications in the first blocking responder group to perform a reversal operation to reverse the blocking-related operation on the at least one object.
The computer-implemented method of claim 1 , wherein the data privacy integration protocol is an integrated end of purpose protocol, the condition indicates that all applications in the multiple-application landscape that were requested to provide blocking ability status information have provided blocking ability status information to the data privacy integration service indicating that each application is able to block the at least one object, the blocking-related command is to block the at least one object, and the reversal command is to unblock the at least one object.
The computer-implemented method of claim 1 , wherein the data privacy integration protocol is an aligned purpose disassociation protocol, the condition indicates that all applications in the multiple-application landscape that were requested to provide purpose disassociability status information have provided purpose disassociation ability status information to the data privacy integration service indicating that each application is able to disassociate a respective purpose from each of the at least one object, the blocking-related command is to, for each respective object of the at least one object, disassociate a respective purpose from the respective object and to block the respective object if no other purposes are associated with the respective object after disassociating the respective purpose from the respective object, and the reversal command is to, for each respective object of the at least one object, reassociate a respective purpose with the respective object.
The computer-implemented method of claim 1 , further comprising: receiving blocking-related statuses from each of the applications in the second blocking responder group; and determining whether all blocking-related statuses received from the applications in the second blocking responder group indicate successful completion of the blocking-related command.
receiving blocking-related statuses from each of the applications in the second blocking responder group; and
determining whether all blocking-related statuses received from the applications in the second blocking responder group indicate successful completion of the blocking-related command.
The computer-implemented method of claim 4 , further comprising, in response to determining that all blocking-related statuses received from the applications in the second blocking responder group indicate successful completion of the blocking-related command, determining whether the second blocking responder group is a last blocking responder group.
The computer-implemented method of claim 5 , further comprising, in response to determining that
[Truncated to input limit]