Virtual reality user security authentication method, system and medium based on spatial interaction
By adopting a three-dimensional interactive model with a sphere-approximate orthodoximal design in the VR system, combined with the handle controller and touchpad operation, the problem of VR identity authentication is solved, and password input with high security and good user experience is achieved.
Patent Information
- Application Number
- CN202111047560.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2021-09-08
- Publication Date
- 2025-08-08
- Estimated Expiration
- 2041-09-08
AI Technical Summary
Existing VR technology is vulnerable to bystanders in identity authentication, and traditional password verification is insufficient in security, making it difficult to improve security while maintaining a good user experience.
Using a virtual reality user security authentication method based on spatial interaction, a three-dimensional interactive model is designed using a sphere-approximately sphere-like orthogonal interaction model, password input is performed through a handle controller, and rotation and selection operations are achieved in combination with different positions of the touchpad, increasing the key space and improving security.
It enhances the observation resistance of password input, improves the difficulty of cracking for attackers, reduces hardware requirements, is suitable for most VR devices, and provides good security and user experience in short password situations.
Smart Images

Figure CN113918901B_ABST
Abstract
Description
Technical Field
[0001] The present invention belongs to the technical field of computer applications, and in particular relates to a virtual reality user security authentication method, system and medium based on spatial interaction. Background Art
[0002] VR (Virtual Reality) technology is a technology that comprehensively utilizes computer graphics systems and various control interfaces to generate an interactive three-dimensional environment on a computer to provide users with an immersive experience.
[0003] Currently, VR technology has been widely used in scenarios such as gaming, healthcare, and social interaction, becoming increasingly common in daily life. However, the number of attack methods targeting VR applications has also increased accordingly. Among them, the most classic attack in identity authentication is the "bystander" attack. A so-called "bystander" attack occurs when a user wears a VR peripheral for immersive interaction, such as entering a password in a VR system. During this time, the user is unaware of their surroundings in the real world. An attacker in the real world can infer the user's password by observing the user's input actions.
[0004] As VR applications develop, more people are beginning to pay attention to their security risks. Many VR scenarios require user identity verification. To protect user privacy and data security while maintaining a good user experience, it is necessary to design and implement authentication solutions that can be deployed directly within VR systems. Summary of the Invention
[0005] The main purpose of the present invention is to overcome the shortcomings and deficiencies of the existing technology and provide a domain-generalized pedestrian re-identification method, system and medium based on automatic data enhancement. It utilizes the outstanding immersive three-dimensional interactive characteristics of the VR system to operate an interactive three-dimensional model independent of the environment to perform password input. It has good anti-observation performance, thereby resisting shoulder surfing attacks from the real world, and can achieve satisfactory security when using shorter passwords.
[0006] In order to achieve the above object, the present invention adopts the following technical solutions:
[0007] One aspect of the present invention provides a virtual reality user security authentication method based on spatial interaction, characterized by comprising the following steps:
[0008] Accept the user's identity authentication request;
[0009] A function selection interface is output in the VR system, wherein the function selection interface provides password setting and identity authentication functions; if the user chooses to set a password, a password setting interface is output in the VR system to guide the user to set the password; the user enters a password string using the three-dimensional interactive model and selects to save after completing the input; if the user chooses to perform identity authentication, the identity authentication interface is loaded;
[0010] Enter the identity authentication interface to perform identity authentication; the identity authentication interface is similar to the password setting interface, and the user enters the password string through the same three-dimensional interactive model as the password setting interface; after entering the password string, the user needs to select Save to complete the password entry;
[0011] The user is authenticated based on the comparison of the password string input by the user with the previously set password.
[0012] As a preferred technical solution, the password setting interface and the identity authentication interface both include text instructions to prompt the user's operation method, function buttons for canceling and confirming operations, and a three-dimensional interactive model for entering the set password string.
[0013] As a preferred technical solution, the length of the password string is 4. After completing the password input and selecting Save, the VR system automatically checks whether the password submitted by the user meets the requirements. Only if it meets the password setting requirements can the registration or identity authentication be successful.
[0014] As a preferred technical solution, the three-dimensional interactive model uses a regular icosahedron that approximates a sphere as its frame, with a total of 12 vertices, each vertex representing an input character. The selectable character range for the user password setting is 0-9, the letter A, and the letter Z; the password is ultimately recorded as a string, and the security level of the password is proportional to the length of the password.
[0015] As a preferred technical solution, the user completes password input by using a handle controller to interact with the three-dimensional interactive model. The object interaction actions are specifically as follows: pressing the trigger of the handle controller to emit rays; pressing the center of the handle touchpad while aiming the ray at the object to select the target object, and touching different positions of the outer ring of the touchpad to control the rotation direction and speed of the model.
[0016] As a preferred technical solution, the initial deflection angle of the three-dimensional interactive model displayed in the password setting interface is different from the initial deflection angle of the three-dimensional interactive model displayed in the identity authentication interface.
[0017] As a preferred technical solution, before the user performs identity authentication, the VR system will first check whether the user has completed registration; if the user has not completed registration, an error message will be output, prompting the user to set a password first to complete registration; if the user has completed registration, the identity authentication interface will be loaded.
[0018] As a preferred technical solution, the user identity authentication includes the following steps:
[0019] If the character string entered by the user is exactly the same as the previously set password, the authentication is successful, and a text prompt message indicating successful login is output on the authentication function interface; otherwise, the user is prompted to re-authenticate.
[0020] Another aspect of the present invention provides a virtual reality user security authentication system based on spatial interaction, which is applied to the above-mentioned virtual reality user security authentication method based on spatial interaction, and includes an identity authentication request module, a password setting module, an identity authentication module, and a verification module;
[0021] The identity authentication request module is used to accept the user's identity authentication request and output a function selection interface in the VR system, wherein the function selection interface provides password setting and identity authentication functions; if the user chooses to set a password, a password setting interface guiding the user to set a password is output in the VR system; if the user chooses to perform identity authentication, the identity authentication interface is loaded;
[0022] The password setting module is used to complete the password input work, specifically: the user uses the three-dimensional interactive model to input the password string, and selects Save after completing the input;
[0023] The identity authentication module is used to perform identity authentication; the identity authentication interface is similar to the password setting interface, and the user enters the password string through the same three-dimensional interactive model as the password setting interface; after entering the password string, the user needs to select Save to complete the password entry;
[0024] The verification module is used to compare the password string input by the user with the previously set password to authenticate the user.
[0025] Another aspect of the present invention provides a storage medium storing a program, which, when executed by a processor, implements the above-mentioned virtual reality user security authentication method based on spatial interaction.
[0026] Compared with the prior art, the present invention has the following advantages and beneficial effects:
[0027] (1) The present invention innovatively uses a regular icosahedron that is similar to a sphere to design a new interactive three-dimensional input layout model. The model can be manipulated to perform directional rotation through interactive operations, and the main operation surface of the model can be seamlessly switched. It has strong operability. At the same time, compared with traditional password authentication, the key space is increased, the security of password authentication is improved, and the difficulty of cracking by attackers is increased.
[0028] (2) The present invention introduces a handle touch panel into the interactive mode, and the user can achieve different interactive effects by touching different positions of the touch panel;
[0029] (3) In the above-mentioned interactive design, the present invention divides the touchpad into regions, wherein only the outer ring of the touchpad can be used to control the overall rotation of the input model, including controlling the overall rotation direction and rotation speed of the model; while the inner ring of the touchpad, i.e., the center area, is only used for selection and confirmation operations. Placing the selection interaction and manipulation interaction on the same control device can minimize the time spent by the user on password input;
[0030] (4) The model of the present invention will randomly deflect an angle each time it is run, which can further improve the security of the authentication scheme;
[0031] (5) In the verification method of the present invention, users only need to set a short string as a password and select a few interactive objects to achieve good security;
[0032] (7) The present invention has low hardware requirements and is compatible with most VR devices on the market. It is independent of the environment and can be directly deployed in any VR application scenario. BRIEF DESCRIPTION OF THE DRAWINGS
[0033] Figure 1 This is a flow chart of a virtual reality user security authentication method based on spatial interaction according to an embodiment of the present invention;
[0034] Figure 2 It is a structural diagram of a three-dimensional interactive model according to an embodiment of the present invention;
[0035] Figure 3 is a schematic diagram of controlling the rotation of a model by touching a touch panel according to an embodiment of the present invention;
[0036] Figure 4 Schematic diagram of a three-dimensional interactive model with different initial deflection angles according to an embodiment of the present invention;
[0037] Figure 5 1 is a schematic structural diagram of a virtual reality user security authentication system based on spatial interaction according to an embodiment of the present invention;
[0038] Figure 6It is a schematic structural diagram of a storage medium according to an embodiment of the present invention. DETAILED DESCRIPTION
[0039] In order to enable those skilled in the art to better understand the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments in the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.
[0040] Example
[0041] like Figure 1 As shown, this embodiment provides a virtual reality user security authentication method based on spatial interaction, including the following steps:
[0042] Step S1: creating a VR scene model;
[0043] Developers can create VR scene models using specific modeling tools. For example, developers can use tools such as Unity, Maya, and Blender to create VR scene models. When developing VR scenes, the VR scene models and their textures can be purchased from asset stores, or processed real-world assets can be used to make the VR scene more closely resemble the real world.
[0044] To enable users to authenticate their identities in a VR scene, the modeling tool can be used to create multiple 3D interactive options, such as buttons and virtual objects, within the VR scene model. Users can initiate an authentication request by selecting a specific 3D interactive option, such as an authentication button.
[0045] In this example, the overall key layout of the input model is designed as a regular icosahedron, where each vertex represents a character. When a user selects a vertex, it means that the user has entered the character represented by the vertex. Each character object can be selected repeatedly. Two adjacent vertices are connected by a thin cylinder, which is set to be non-interactive.
[0046] The object for character input is designed to be composed of a unified three-dimensional cube model and a text mark indicating the characteristics. For example, the cube model marked with the text "A" indicates that the character "A" can be input if selected, and the cube model marked with the text "1" indicates that the character "1" can be input if selected. In addition, in order to distinguish the characters "6" and "9", the text mark of the model adds underscores to these two characters, that is, the text mark of the character "6" input object is " 6", the character "9" input object's text identifier is " 9 ”;
[0047] For aesthetic reasons, the cubes of the character input objects are set to different colors, while the text logos are uniformly white. The color variable is not currently used as a password feature.
[0048] Step S2: Initiate identity authentication request;
[0049] When users are immersed in a VR scene, they can trigger the output of the user authentication interface by interacting with the VR terminal.
[0050] In this example, a virtual component can be provided in the VR scene model to trigger the identity authentication function. When the user needs to initiate identity authentication during the immersive experience in the VR scene, the user can select the virtual component through a specific interaction method to trigger the identity authentication function. For example, in actual applications, users can interact through operating a handle controller, gestures, gaze, voice control, etc.
[0051] In this example, the user can initiate an authentication request by using the laser rays emitted by the handle controller and the touch buttons to select a preset virtual button.
[0052] Step S3: accept the user's identity authentication request;
[0053] Step S4: The VR terminal device worn by the user may output a function selection interface to the user through the VR application scenario, wherein the function selection interface provides functions of password setting and identity authentication login;
[0054] Users can select preset virtual buttons by using the laser beam emitted by the gamepad controller and the touch buttons;
[0055] If the user chooses to set a password, the process jumps to step S5. If the user chooses to perform identity authentication, the VR terminal device first checks whether the user has completed registration. If the user has not completed registration, an error message is output, prompting the user to set a password first to complete registration. If the user has completed registration, the process jumps to step S7.
[0056] Step S5: If the user chooses to set a password, a password setting interface is output on the VR terminal device to guide the user to set a password;
[0057] In this example, after the user interacts with a specific three-dimensional interactive option, the VR terminal will output a guided operation interface to help the user set a password. The interface includes text instructions that prompt the user to operate the method and password setting requirements, function buttons for canceling and confirming operations, and a three-dimensional interactive model that can be manipulated by a handle controller.
[0058] The three-dimensional interactive model uses a regular icosahedron that approximates a sphere as its frame, with a total of 12 vertices, each vertex representing an input character. The selectable character range for the user password setting is 0-9, the letter A, and the letter Z; the password is ultimately recorded as a string, and the security level of the password is proportional to its length. In this embodiment, the password length is 4.
[0059] The user needs to use the handle controller to interact with the 3D interactive model to complete password input. In this embodiment, the specified object selection interaction action is as follows: pressing the handle controller trigger to launch a ray; pressing the center of the handle touchpad while aiming the ray at the object to select the target object; touching different positions on the outer circle of the touchpad to control the model's rotation direction and speed. In this embodiment, assuming that the password the user needs to set is {2, 6, A, 5}, then:
[0060] like Figure 2 As shown, it is assumed that in this embodiment, the password setting interface model is a pentagon including the characters {A, 1, 2, 3, 7, 8} after being deflected by the initial random angle. After the user puts on the VR device, he first needs to hold the trigger of the handle controller to launch the laser ray, and the user can see the above ray in the interface output by the VR head display. Then, the user needs to keep the trigger pressed and move the handle controller so that the end of the ray hits the object marked with the character "2". After that, the user can use Figure 3 Touch the upper right corner of the touchpad to rotate the model, switch the main operation surface, move the vertex corresponding to the character "6" to a convenient selection range, and then use the same operation method to select the object marked with the character "6"; similarly, the user can touch the lower half of the touchpad to rotate the model along the horizontal axis, move the character "A" in front of them, and then use the same operation method to select the object marked with the character "A" and the adjacent object marked with the character "5";
[0061] At the same time, the content entered by the user will be output above the input model in real time. The user can check whether his input is intact by viewing the entered characters displayed in the interface. After the user enters the password string he wants to set and saves it, the VR terminal will record the content entered by the user as the user password.
[0062] Step S6: After the user completes the password setting according to the operating instructions and confirms that the password is entered correctly, the user needs to select the "Save" button in the interface to submit and save the password he set.
[0063] When a user saves a password, the VR system will first determine whether the password length entered by the user meets the requirements. Only when the password meets the requirements can the registration or identity authentication be successful:
[0064] If the password length entered by the user does not meet the requirements, a text message will be output to remind the user that the password set is illegal and needs to be reset. The interface will not automatically jump back to the function selection interface.
[0065] If the password entered by the user meets the length requirements, the password is considered valid. After saving, the user is considered to have successfully registered and will automatically jump back to the function selection interface. The user can now select the authentication function and initiate an identity authentication request.
[0066] In this example, the password record is {2, 6, A, 5};
[0067] Step S7: After the user completes the password setting, he can return to the function selection interface and select the "Authentication" virtual button to enter the identity authentication interface for identity authentication;
[0068] In this example, when the VR terminal receives an identity authentication request initiated by a user, it first initiates a query to the above-mentioned business server based on the user's user ID to inquire whether the user has completed registration and set a password.
[0069] If the user has not set a password, a registration prompt will be displayed in the VR interface, guiding the user to set a password. The VR client can then repeat the password setting process shown above, displaying the password setting interface in the VR environment to guide the user through password setting and registration. This example will not be repeated here.
[0070] If the user has already set a password:
[0071] The user can enter the identity authentication interface, which is similar to the password setting interface and includes text instructions prompting the user's operation method and password setting requirements, function buttons for canceling and confirming operations, and an identical three-dimensional interactive model that can be manipulated by a handle controller.
[0072] The initial deflection angle of this model is different from that of the 3D interactive model displayed in the password setting interface. Figure 4 As shown, it is assumed that in this embodiment, after the model of the authentication interface is deflected by the initial random angle, the main operation surface facing the user is a pentagon including the characters {A, 5, 1, 2, 9, 7};
[0073] Just like when setting a password, the characters that can be entered for the password are 0-9, as well as the letters A and Z.
[0074] The user's input content will be output in real time above the input model. The user needs to use the same interactive method as in step S5 to complete the password input. The password entered should be exactly the same as the password set. At the same time, the user can check whether their input is correct by viewing the entered characters displayed in the interface.
[0075] Step S8: After confirming that the password is entered correctly, the user needs to select the "Submit" button in the interface to confirm and submit the entered password; in this example, the correct password should be {2, 6, A, 5};
[0076] Step S9: After the user enters the password string and confirms submission, the VR terminal compares the password string previously set by the user to authenticate the user;
[0077] If the password entered by the user is different from the set password, a text message indicating authentication error will be entered in the interface, and the user will be prompted to re-authenticate. If the user still enters the wrong password after three attempts, it will be judged as a malicious login and the authentication will not be able to continue. If the user can submit input content that is exactly the same as the set password within three attempts, the user will be judged to have passed the identity authentication.
[0078] After the user's identity is authenticated, the user can be redirected back to the corresponding business interface so that the user can continue the business process.
[0079] like Figure 5 As shown, in another embodiment of the present application, a virtual reality user security authentication system based on spatial interaction is provided, the system including an identity authentication request module, a password setting module, an identity authentication module and a verification module;
[0080] The identity authentication request module is used to accept the user's identity authentication request and output a function selection interface in the VR system, wherein the function selection interface provides password setting and identity authentication functions; if the user chooses to set a password, a password setting interface guiding the user to set a password is output in the VR system; if the user chooses to perform identity authentication, the identity authentication interface is loaded;
[0081] The password setting module is used to complete the password input work, specifically: the user uses the three-dimensional interactive model to input the password string, and selects Save after completing the input;
[0082] The identity authentication module is used to perform identity authentication; the identity authentication interface is similar to the password setting interface, and the user enters the password string through the same three-dimensional interactive model as the password setting interface; after entering the password string, the user needs to select Save to complete the password entry;
[0083] The verification module is used to compare the password string input by the user with the previously set password to authenticate the user.
[0084] It should be noted that the system provided in the above embodiment is only illustrated by the division of the above functional modules. In actual applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure can be divided into different functional modules to complete all or part of the functions described above. This system is a virtual reality user security authentication method based on spatial interaction applied to the above embodiment.
[0085] like Figure 6 As shown, in another embodiment of the present application, a storage medium is further provided, storing a program. When the program is executed by a processor, a virtual reality user security authentication method based on spatial interaction is implemented, specifically:
[0086] Accept the user's identity authentication request;
[0087] A function selection interface is output in the VR system, wherein the function selection interface provides password setting and identity authentication functions; if the user chooses to set a password, a password setting interface is output in the VR system to guide the user to set the password; the user enters a password string using the three-dimensional interactive model and selects to save after completing the input; if the user chooses to perform identity authentication, the identity authentication interface is loaded;
[0088] Enter the identity authentication interface to perform identity authentication; the identity authentication interface is similar to the password setting interface, and the user enters the password string through the same three-dimensional interactive model as the password setting interface; after entering the password string, the user needs to select Save to complete the password entry;
[0089] The user is authenticated based on the comparison of the password string input by the user with the previously set password.
[0090] It should be understood that various parts of the present application can be implemented using hardware, software, firmware, or a combination thereof. In the above embodiments, multiple steps or methods can be implemented using software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented using hardware, as in another embodiment, any one of the following technologies known in the art or a combination thereof can be used to implement: a discrete logic circuit having a logic gate circuit for implementing a logic function on a data signal, an application-specific integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.
[0091] The above embodiments are preferred implementation modes of the present invention, but the implementation modes of the present invention are not limited to the above embodiments. Any other changes, modifications, substitutions, combinations, and simplifications that do not deviate from the spirit and principles of the present invention should be considered as equivalent replacement methods and are included in the scope of protection of the present invention.
Claims
1. A virtual reality user security authentication method based on spatial interaction, characterized in that: The steps include: Accept the user's identity authentication request; Outputting a function selection interface in the VR system, wherein the function selection interface provides password setting and identity authentication functions; If the user chooses to set a password, a password setting interface is displayed in the VR system to guide the user to set the password; the user uses the three-dimensional interactive model to input the password string, and selects Save after completing the input; If the user chooses to perform identity authentication, the identity authentication interface is loaded; The three-dimensional interactive model is based on a regular icosahedron that approximates a sphere and has 12 vertices. Each vertex represents an input character. The characters that can be selected for the user password setting are 0-9, the letter A, and the letter Z. The password is ultimately recorded as a string, and the security level of the password is proportional to the length of the password. Users use the controller to interact with the 3D interactive model to enter passwords. The object interaction actions are as follows: pressing the trigger of the controller fires a ray; while aiming the ray at the object, pressing the center of the touchpad selects the target object; and touching different locations on the outer ring of the touchpad controls the model's rotation direction and speed. Enter the identity authentication interface to perform identity authentication; the identity authentication interface is similar to the password setting interface, and the user enters the password string through the same three-dimensional interactive model as the password setting interface; After the user enters the password string, they need to select Save to complete the password input; The user is authenticated based on the comparison of the password string input by the user with the previously set password.
2. The virtual reality user security authentication method based on spatial interaction according to claim 1, characterized in that: The password setting interface and the identity authentication interface both include text instructions to prompt the user's operation method, function buttons for canceling and confirming operations, and a three-dimensional interactive model for entering the set password string.
3. The virtual reality user security authentication method based on spatial interaction according to claim 1, characterized in that: The length of the password string is 4. After completing the password input and selecting Save, the VR system automatically checks whether the password submitted by the user meets the requirements. Only if it meets the password setting requirements can the registration or identity authentication be successful.
4. The virtual reality user security authentication method based on spatial interaction according to claim 1, characterized in that: The initial deflection angle of the three-dimensional interactive model displayed in the password setting interface is different from the initial deflection angle of the three-dimensional interactive model displayed in the identity authentication interface.
5. The virtual reality user security authentication method based on spatial interaction according to claim 1, characterized in that: Before the user performs identity authentication, the VR system will first check whether the user has completed registration; if the user has not completed registration, it will output an error message and prompt the user to set a password to complete registration; if the user has completed registration, the identity authentication interface will be loaded.
6. The virtual reality user security authentication method based on spatial interaction according to claim 1, characterized in that: The user identity authentication comprises the following steps: If the character string entered by the user is exactly the same as the previously set password, the authentication is successful, and a text prompt message indicating successful login is output on the authentication function interface; otherwise, the user is prompted to re-authenticate.
7. A virtual reality user security authentication system based on spatial interaction, characterized in that: A virtual reality user security authentication method based on spatial interaction applied to any one of claims 1 to 6, comprising an identity authentication request module, a password setting module, an identity authentication module, and a verification module; The identity authentication request module is used to accept the user's identity authentication request and output a function selection interface in the VR system, wherein the function selection interface provides password setting and identity authentication functions; If the user chooses to set a password, a password setting interface guiding the user to set a password is output in the VR system; if the user chooses to perform identity authentication, an identity authentication interface is loaded; The password setting module is used to complete the password input work, specifically: the user uses the three-dimensional interactive model to input the password string, and selects Save after completing the input; The identity authentication module is used to perform identity authentication; the identity authentication interface is similar to the password setting interface, and the user enters the password string through the same three-dimensional interactive model as the password setting interface; After the user enters the password string, they need to select Save to complete the password input; The verification module is used to compare the password string input by the user with the previously set password to authenticate the user.
8. A storage medium storing a program, characterized in that: When the program is executed by a processor, the virtual reality user security authentication method based on spatial interaction according to any one of claims 1 to 6 is implemented.
Citation Information
Patent Citations
Password pattern recognition authentication method
US10540492B1
Authentication method, device, VR terminal, and VR server based on VR scene
US20200092092A1