A first impression-based anti-disguise identity authentication method in the metaverse

Abstract

The present invention discloses a first impression-based anti-disguise identity authentication method in the metaverse. First, the "metaverse first impression" is introduced as a new identity authentication factor in the existing identity model. Secondly, the first impression data is encrypted and stored in the IPFS and blockchain systems using a signcryption algorithm. Then, an avatar authentication protocol based on the first impression is designed. Finally, the metaverse anti-disguise identity authentication is realized. This solves the problems that the existing technology has either a high probability of single point failure and high computing consumption, or low recognition accuracy and low authentication reliability, or cannot effectively resist disguise attacks.

Description

Technical Field

[0001] The present invention relates to an anti-disguise identity authentication method based on first impression in a metaverse, belonging to the technical field of identity authentication. Background Art

[0002] With the rapid development of virtual reality and artificial intelligence technology, the Metaverse has become a new platform for people to explore, communicate and create. The Metaverse is a digital world that is both parallel to reality and beyond reality. In this complete virtual social ecosystem, users can communicate with others by playing their own digital avatars and enjoy various services that break through the time and space limitations of the physical world. However, with the popularity of the Metaverse, the security threat of disguise attacks has emerged, that is, malicious users create and imitate avatars of other users to defraud others and steal personal information, which has brought serious challenges to the identity authentication and information security of Metaverse users.

[0003] Disguise attacks can occur because, on the one hand, current Metaverse applications are affected by the performance of VR hardware and are difficult to carry multi-factor user identity models that include biometrics. Therefore, they only use simple digital appearances as user avatars, allowing malicious users to easily create the same avatars. On the other hand, the challenge-response mechanism for identity authentication using avatar public keys or manipulator biometrics carries the risk of false trust and privacy leakage, and cannot prevent malicious users from disguising themselves as normal avatars. In this case, in order to resist disguise attacks and protect the safety of users in the Metaverse, an effective authentication scheme must be introduced.

[0004] In the real world, the human brain is deeply impressed by the scene and details of the first encounter. This unique memory feature is called "first impression". When meeting an old friend again, the brain will naturally recall the first impression scene to assist in identifying the other party's identity. Even if the appearance changes, humans can recognize friends through this unconscious memory process and build trust. Inspired by this, we propose to introduce "metaverse first impression" as an auxiliary authentication factor in the metaverse. When two avatars meet for the first time, the system will record and encrypt and store this unique encounter scene details to build a "metaverse first impression" between them. Later, when an avatar needs to be authenticated, the system will extract the "metaverse first impression" data between the avatar and other avatars. Similar to the process of human identification of old friends, by verifying these first impression scene details, the system can confirm whether the avatar is a real and credible identity, effectively preventing disguise and deception by disguised attackers.

[0005] As a new auxiliary authentication factor, "Metaverse First Impression" combines the unique mechanism of unconscious memory in the human brain with the interactive characteristics of the virtual world of the Metaverse. It can not only enhance the accuracy and reliability of identity authentication, but also improve users' trust and sense of identity in digital avatars, creating a safe and orderly virtual social environment for the Metaverse. However, in actual applications, this authentication factor also faces the following security issues that need to be solved:

[0006] a) Uniqueness of the first impression scene. The first impression scene of the Metaverse must be globally unique, that is, the first impression scenes of any two avatars should be clearly different to ensure that the avatar identity can be effectively identified. Otherwise, an attacker may forge a similar first impression scene of the Metaverse and deceive the authentication system.

[0007] b) Confidentiality of first impression data. As an authentication factor of the identity model, first impression data needs to be stored in a secure manner to prevent attackers from peeking into the user's private information or stealing and tampering with the first impression data, thereby misleading the results of identity authentication.

[0008] The closest technical solutions at present are: anti-disguise authentication protocols based on multi-factor identity (MFA), behavioral biometric analysis or physical authentication devices. Among them, although the authentication scheme based on multi-factor identity combines multiple types of credentials for authentication, multiple factors increase the probability of single point failure and increase the computational consumption of the authentication process; the authentication scheme based on behavioral biometric analysis is easily affected by the user's status (such as illness, injury) and environment (equipment, scene), reducing the accuracy of recognition, and does not solve the problem of behavioral imitation technology, reducing the reliability of authentication; the scheme based on physical authentication devices has the problem of physical device theft, copying and cracking, resulting in the theft of user identities, and fails to effectively resist disguise attacks. Summary of the invention

[0009] The technical problem to be solved by the present invention is to provide an anti-disguise identity authentication method based on first impression in the metaverse to overcome the shortcomings of the prior art.

[0010] The technical solution of the present invention is: a first impression-based anti-disguise identity authentication method in the metaverse, comprising the following steps:

[0011] Step 1: Let A be the prover incarnation and B be the verifier incarnation;

[0012] Create the User identity model for A and B x ={ID x , MIT x , Avatar x};

[0013] in,

[0014] x represents the name of the avatar, and x includes A and B;

[0015] ID x Indicates the identity of avatar x, ID x Includes Aid x and Mid x ,;

[0016] MIT x An identity token representing avatar x, MIT x =(SN x , Mid x , pk x ,h x , T x , R Tx );

[0017] Avatar x Avatar represents the virtual incarnation of avatar x. x =(Aid x , Mid x , VID x , PID x );

[0018] Aid x Represents the unique identifier of avatar x in the physical world, Mid x Represents the unique identifier of avatar x in the metaverse;

[0019] SN x MIT x The serial number, pk x represents the public key of avatar x, h x represents the chameleon hash value generated by the chameleon hash generation algorithm Hash using the biometric template extracted from the iris of avatar x, (h x , R Tx )←Hash(pk x , T x ), T x is the biometric template extracted from the avatar x iris, R Tx It is T x The calibration parameters;

[0020] VID x Indicates the public virtual identity of avatar x, VID x =(M x , R x ), M x is the visible identity of avatar x, R x M is generated by the Chameleon signature algorithm xThe calibration parameter, R x ←Sign(sk x ,h x , T x , RT x , M x ), PID x Indicates the physical identity of the incarnation x that can be traced, PID x =(M′ x , R′ x ), sk x represents the private key of avatar x, M′ x is the iris sample extracted from the avatar x manipulator, R′ x It is M′ x Check parameters;

[0021] Step 2: Generate a snapshot Img of A according to the first scene that A encounters in the metaverse A , a snapshot of Img A It includes A's appearance and the metaverse scene when they met;

[0022] Step 3: Snapshot Img A Generate ciphertext CT using the signcryption generation algorithm BA , CT BA ←SC(sk A ,h A , Img A , pk B ), CT BA With Mid A and Mid B Binding creates B's first impression of A's metaverse FI BA ;

[0023] Step 4: A provides Mid to B A and VID A ;

[0024] Step 5: B verifies A's public virtual identity. If the verification is successful, B throws a random challenge C to A. A ; If the FI extracted during verification BA If it is empty, B sends a command to A, asking A to create B's first impression of A's metaverse FI BA ;

[0025] Step 6: A submits his physical identity CT′ A As a pair of C A Response;

[0026] Step 7: B uses the ciphertext decryption algorithm to decrypt CT′ A And construct A's physical identity PID A, PID A =(M′ A , R′ A )←DSC(pk A ,h A , CT′ A ,sk B );

[0027] Step 8: B passes verification PID A To determine whether avatar A is in disguise.

[0028] Furthermore, in step 3, A creates B's first impression of A's metaverse FI BA The method is:

[0029] CT BA With Mid A and Mid B Binding creates B's first impression of A's metaverse FI BA , and write it into the blockchain and IPFS system, and convert the ciphertext CT BA Store on the IPFS system to obtain the file number FID BA , create transaction TX BA =(I BA , FID BA ) and stored on the blockchain, obtain the extraction index I BA , I BA Mid B and Mid A The concatenated bit string, and I BA and FID BA A key-value pair.

[0030] Furthermore, in step 5, the method by which B verifies A's public virtual identity is:

[0031] 1) B from Mid A Extract A's identity token MIT A ;

[0032] 2) B calculates and extracts index I BA , through I BA Get B's first impression of A's metaverse from the blockchain BA ;

[0033] 3) B verifies the identity provider IDP in MIT A The signature on the chameleon verification algorithm Check(pk A ,h A , M A , R A ) Verify A's public virtual identity VID A =(MA , R A ), and use the ciphertext decryption algorithm DSC(pk A ,h A , CT BA ,sk B )Decrypt the ciphertext CT BA , review the first metaverse encounter scene Img A ←DSC(pk A ,h A , CT BA ,sk B );

[0034] 4) If the above three steps are passed, the verification is passed, otherwise the verification fails.

[0035] Furthermore, the step 6 specifically includes:

[0036] 1) A’s manipulator generates iris feature M′;

[0037] 2) A will C A Embedded into M' to form the marked iris feature M' A ;

[0038] 3) A uses the ciphertext generation algorithm to generate the ciphertext CT′ A ←SC(sk A ,h A , M′ A , pk B ) and sent to B as a response to C A Response.

[0039] Furthermore, the step 8 specifically includes:

[0040] 1) B from M′ A Extract the watermark C′ A , then by detecting C′ A With C A Whether they are equal determines M′ A Freshness;

[0041] 2)B uses the Chameleon check algorithm Check(pk A ,h A , M′ A , R′ A ) and Check(pk A ,h A , T A , R TA ) to check the collision PID A =(M′ A , R′ A ) and (T A , RTA ) matches;

[0042] 3) B verifies iris feature M′ A and T A to determine the validity of A's physical identity;

[0043] 4) If steps 1)-3) are all passed, it proves that A is not in disguise, otherwise A is in disguise.

[0044] Furthermore, it also includes:

[0045] Step 9: If A is proven not to be disguised, then B is a finite set of order q Randomly pick a w from g w Sent to A, g is the generator of the multiplication cyclic group in the signcryption algorithm, thereby establishing a session key x A Represents the private key sk A ,y A Represents the public key pk A .

[0046] The beneficial effects of the present invention are: compared with the prior art,

[0047] 1) The present invention adds a new metaverse first impression authentication factor to the identity model, combines the core identity of the virtual avatar to ensure the uniqueness of the first impression; and uses the signcryption algorithm to encrypt and store the first impression data to ensure the confidentiality of the first impression and avoid identity disguise;

[0048] 2) The present invention proposes an anti-disguise authentication protocol, applies the Metaverse first impression authentication factor to the authentication process under the challenge-response mechanism, and designs an identity authentication protocol in combination with the user identifier and identity token in the model to resist disguise attacks;

[0049] 3) The present invention integrates the first impression data of the avatar in the metaverse (avatar facial data and the first encounter scene in the metaverse) based on the existing metaverse two-factor identity model (biometric template and user public key) to form a comprehensive identity authentication basis, rather than simply combining multiple independent authentication factors. Even if a certain authentication factor is missing or abnormal, other authentication factors can still be used to defend against attacks such as identity disguise, and user identity information is distributedly stored in the form of ciphertext using blockchain and IPFS system, avoiding the risk of false trust and privacy leakage caused by single point failure in traditional solutions;

[0050] 4) The present invention directly integrates the first impression factor of the metaverse to form the authentication basis, without the need to calculate multiple independent factors separately, which fundamentally reduces the calculation complexity and further reduces the necessary calculation amount;

[0051] 5) The present invention defends against camouflage attacks in an unconscious way. The first impression of the metaverse is introduced into the two-factor identity model of the avatar to form a new identity model. Based on the first impression of the metaverse, no matter how the appearance of the avatar changes, the user can recall the scene of the first encounter with the avatar, so the present invention will not be affected by the user's state and environment;

[0052] 6) In the present invention, if a malicious user wants to use the first impression to launch a forgery attack, he must generate a similar first impression ciphertext and index to pass the verification of the verifier. However, since the first impression of the metaverse is created based on the unique identity of the avatar in the virtual world, that is, the core identity, it avoids the first impression masquerade attack, solves the problem of behavior imitation technology, and thus improves the reliability of authentication;

[0053] 7) In the present invention, the user's iris information is collected and extracted into a biometric template through an "avatar manipulator" and securely stored in a Metaverse identity token at the software level, thereby reducing the risk of hardware attacks;

[0054] 8) In the present invention, even if the avatar operator is stolen, since the token only stores the encrypted feature template instead of the plaintext sample, the attacker cannot directly obtain the user's original biometric information, thus preventing the theft of biometric information;

[0055] 9) During the execution of the identity authentication protocol proposed by the present invention, the system will collect the user's current iris information in real time and compare it with the biometric template stored in the identity token for verification. Only when the real-time collected iris information matches the biometric template in the token, the system will determine that the user's physical identity is legitimate. Therefore, the present invention effectively prevents disguise attacks where biometrics are statically copied. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] Figure 1 A user identity model diagram based on first impression of the present invention;

[0057] Figure 2 Flowchart of the first impression-based identity protocol. DETAILED DESCRIPTION

[0058] In order to make the objectives, technical solutions and advantages of the present invention more clear, the present invention will be further described in detail below with reference to the accompanying drawings of this specification.

[0059] In order to fully disclose the contents of the present invention, the signcryption generation algorithm SC, the decryption algorithm DSC, the chameleon hash generation algorithm Hash, the chameleon signature algorithm Sign, and the chameleon verification algorithm Check in the present invention are all prior arts. For detailed algorithm contents, please refer to the paper "Digital Signcryption or How to Achieve Cost" written by Yuliang Zheng and the paper "A Secure Authentication Framework to Guarantee the Traceability of Avatars in Metaverse" written by Kedi Yang.

[0060] In order to solve the problems existing in the background technology, the overall idea of ​​the present invention is: first, introduce "Metaverse First Impression" as a new identity authentication factor in the existing identity model. Secondly, use the signcryption algorithm to encrypt and store the first impression data in the IPFS and blockchain system. Then, design an avatar authentication protocol based on the first impression. Finally, the Metaverse anti-disguise identity authentication is realized.

[0061] Embodiment 1:

[0062] As attached Figure 1 and Figure 2 As shown, a first impression-based anti-disguise identity authentication method in a metaverse is provided, comprising the following steps:

[0063] Part 1: Design a user identity model that includes the "first impression of the metaverse". Based on the unconscious memory process of humans identifying old friends, this invention introduces the "first impression of the metaverse" as the identity authentication factor FI based on the existing identity model User = {ID, MIT, Avatar}, and finally forms a new user identity model that includes the "first impression of the metaverse", such as Figure 1 Steps 1-3 of the present invention are specific steps for creating an avatar identity model.

[0064] Step 1: Let A be the prover incarnation and B be the verifier incarnation;

[0065] Create the User identity model for A and B x ={ID x , MIT x , Avatar x};

[0066] in,

[0067] x represents the name of the avatar, and x includes A and B;

[0068] ID xIndicates the identity of avatar x, ID x Includes Aid x and Mid x ,;

[0069] MIT x An identity token representing avatar x, MIT x =(SN x , Mid x , pk x ,h x , T x , R Tx );

[0070] Avatar x Avatar represents the virtual incarnation of avatar x. x =(Aid x , Mid x , VID x , PID x );

[0071] Aid x Represents the unique identifier of avatar x in the physical world, Mid x Represents the unique identifier of avatar x in the metaverse;

[0072] SN x MIT x The serial number, pk x represents the public key of avatar x, h x represents the chameleon hash generated from the biometric template extracted from the iris of avatar x, (h x , R Tx )←Hash(pk x , T x ), T x is the biometric template extracted from the avatar x iris, R Tx It is T x Verification parameters; Hash is the Chameleon hash generation algorithm.

[0073] VID x Indicates the public virtual identity of avatar x, VID x =(M x , R x ), M x is the visible identity of avatar x, R x It is M x The calibration parameter, R x ←Sign(sk x ,h x , T x , R Tx , Mx ), PID x Indicates the physical identity of the incarnation x that can be traced, PID x =(M′ x , R′ x ), sk x represents the private key of avatar x, M′ x is the iris sample extracted from the avatar x manipulator, R′ x It is M′ x Check parameters; Sign is the Chameleon signature algorithm.

[0074] Step 2: To prevent malicious users from impersonating others to launch disguise attacks, generate A’s snapshot Img based on the first scene that A encounters in the Metaverse A , a snapshot of Img A It includes A's appearance and the metaverse scene when they met;

[0075] Step 3: Snapshot Img A Generate ciphertext CT using the signcryption algorithm BA , CT BA ←SC(sk A ,h A , Img A , pk B ), SC means encryption, CT BA With Mid A and Mid B Binding creates B's first impression of A's metaverse FI BA , using the symbol FI BA =(I BA , CT BA )=(Mid B ||Mid A , CT BA ), I BA Equivalent to Mid B ||Mid A ;

[0076] Part 2: Design an avatar authentication protocol based on "Metaverse First Impression". When two avatars meet somewhere in the Metaverse, they will verify each other's identity based on the first impression to resist disguise attacks. Based on the "Metaverse First Impression" factor included in the identity model, the present invention designs an avatar authentication protocol using a challenge-response mechanism, which enhances the verifiability of the Metaverse avatar identity. The following steps 4-8 are the avatar authentication protocol part of this application.

[0077] Step 4: A provides Mid to B A and VID A , thereby initiating an identity claim;

[0078] Step 5: B verifies A's public virtual identity. If the verification is successful, B throws a random challenge C to A. A ; If the FI extracted during verification BA If it is empty, B sends a command to A, asking A to create B's first impression of A's metaverse FI BA . Since the core identity of the avatar is globally unique, and the scene of encounter in the metaverse and the appearance of the avatar are unique, the "metaverse first impression" is unique and can effectively identify the identity of the avatar, avoiding identity disguise.

[0079] Step 6: A submits his physical identity CT′ A As a pair of C A Response;

[0080] Step 7: B decrypts CT′ A And construct A's physical identity PID A , PID A =(M′ A , R′ A )←DSC(pk A ,h A , CT′ A ,sk B );

[0081] Step 8: B passes verification PID A To determine whether avatar A is in disguise.

[0082] Furthermore, in step 3, A creates B's first impression of A's metaverse FI BA The method is:

[0083] CT BA With Mid A and Mid B Binding creates B's first impression of A's metaverse FI BA , and write it into the blockchain and IPFS system, and convert the ciphertext CT BA Store on the IPFS system to obtain the file number FID BA , create transaction TX BA =(I BA , FID BA ) and stored on the blockchain, obtain the extraction index I BA , I BA Mid B and Mid A The concatenated bit string, and I BA and FID BA A key-value pair.

[0084] Furthermore, in step 5, the method by which B verifies A's public virtual identity is:

[0085] 1) B from Mid A Extract A's identity token MIT A ;

[0086] 2) B calculates and extracts index I BA , through I BA Get B's first impression of A's metaverse from the blockchain BA ;

[0087] 3) B verifies the identity provider IDP in MIT A Signature on the MIT A The effectiveness of the chameleon test algorithm Check(pk A ,h A , M A , R A ) Verify A's public virtual identity VID A =(M A , R A ), ensuring that A can see identity M A The validity of the decryption algorithm DSC(pk A ,h A , CT BA ,sk B )Decrypt the ciphertext CT BA , review the first metaverse encounter scene Img A ←DSC(pk A ,h A , CT BA ,sk B ), achieving unconscious defense against camouflage attacks;

[0088] 4) If the above three steps are passed, the verification is passed, otherwise the verification fails.

[0089] Furthermore, the step 6 specifically includes:

[0090] 1) A’s manipulator generates iris feature M′;

[0091] 2) A will C A Embedded into M' to form the marked iris feature M' A ;

[0092] 3) A uses the ciphertext generation algorithm to generate the ciphertext CT′ A ←SC(sk A ,h A , M′ A , pk B ) and sent to B as a response to CA Response.

[0093] Furthermore, the step 8 specifically includes:

[0094] 1) B from M′ A Extract the watermark C′ A , then by detecting C′ A With C A Whether they are equal determines M′ A Freshness;

[0095] 2)B uses the Chameleon check algorithm Check(pk A ,h A , M′ A , R′ A ) and Check(pk A ,h A , T A , R TA ) to check the collision PID A =(M′ A , R′ A ) and (T A , R TA ) matches; R TA It is T A The calibration parameters.

[0096] 3) B verifies iris feature M′ A and T A to determine the validity of A's physical identity;

[0097] 4) If steps 1)-3) are all passed, it proves that A is not in disguise, otherwise A is in disguise.

[0098] Furthermore, it also includes:

[0099] Step 9: If A is proven not to be disguised, then B is a finite set of order q Randomly pick a w from g w Sent to A, g is the generator of the multiplication cyclic group in the signcryption algorithm, thereby establishing a session key x A Represents the private key sk A ,y A Represents the public key pk A .

[0100] The parts not described in detail in the present invention are all known technologies to those skilled in the art. Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and are not limiting. Although the present invention is described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention can be modified or replaced by equivalents without departing from the purpose and scope of the technical solutions of the present invention, which should be included in the scope of the claims of the present invention.

Claims

1. A first impression-based anti-disguise identity authentication method in the metaverse, characterized in that: The following steps are involved: Step 1: Let A be the prover incarnation and B be the verifier incarnation; Create the User identity model for A and B x ={ID x ,MIT x ,Avatar x }; in, x represents the name of the avatar, and x includes A and B; ID x Indicates the identity of avatar x, ID x Includes Aid x and Mid x ; MIT x An identity token representing avatar x, MIT x =(SN x ,Mid x ,pk x ,h x ,T x ,R Tx ); Avatar x Avatar represents the virtual incarnation of avatar x. x =(Aid x ,Mid x ,VID x ,PID x ); Aid x Represents the unique identifier of avatar x in the physical world, Mid x Represents the unique identifier of avatar x in the metaverse; SN x MIT x The serial number, pk x represents the public key of avatar x, h x represents the chameleon hash value generated from the biometric template extracted from the iris of avatar x, (h x ,R Tx )←Hash(pk x ,T x ), T x is the biometric template extracted from the avatar x iris, R Tx It is T x The calibration parameters; VID x Indicates the public virtual identity of avatar x, VID x =(M x ,R x ), M x is the visible identity of avatar x, R x M is generated by the Chameleon signature algorithm x The calibration parameter, R x ←Sign(sk x ,h x ,T x ,RT x ,M x ), PID x Indicates the physical identity of the incarnation x that can be traced, PID x =(M′ x ,R′ x ), sk x represents the private key of avatar x, M′ x is the iris sample extracted from the avatar x manipulator, R′ x It is M′ x Check parameters; Step 2: Generate a snapshot Img of A according to the first scene that A encounters in the metaverse A , a snapshot of Img A It includes A's appearance and the metaverse scene when they met; Step 3: Snapshot Img A Generate ciphertext CT using the signcryption generation algorithm BA , CT BA ←SC(sk A ,h A ,Img A ,pk B ), CT BA With Mid A and Mid B Binding creates B's first impression of A's metaverse FI BA ; Step 4: A provides Mid to B A and VID A ; Step 5: B verifies A's public virtual identity. If the verification is successful, B throws a random challenge C to A. A ; If the FI extracted during verification BA If it is empty, B sends a command to A, asking A to create B's first impression of A's metaverse FI BA ; Step 6: A submits his physical identity CT′ A As a pair of C A Response; Step 7: B decrypts CT′ A And construct A's physical identity PID A , PID A =(M′ A ,R′ A )←DSC(pk A ,h A ,CT′ A ,sk B ); Step 8: B passes verification PID A To determine whether avatar A is a disguise; The step 8 specifically includes: 1) B from M′ A Extract the watermark C′ A , then by detecting C′ A With C A Whether they are equal determines M′ A Freshness; 2)B uses the Chameleon check algorithm Check(pk A ,h A ,M′ A ,R′ A ) and Check(pk A ,h A ,T A ,R TA ) to check the collision PID A =(M′ A ,R′ A ) and (T A ,R TA ) matches; 3) B verifies iris feature M′ A and T A to determine the validity of A's physical identity; 4) If steps 1)-3) are all passed, it proves that A is not in disguise, otherwise A is in disguise.

2. The first impression-based anti-disguise identity authentication method in the metaverse according to claim 1, characterized in that: In step 3, A creates B’s first impression of A’s metaverse FI BA The method is: CT BA With Mid A and Mid B Binding creates B's first impression of A's metaverse FI BA , and write it into the blockchain and IPFS system, and convert the ciphertext CT BA Store on the IPFS system to obtain the file number FID BA , create transaction TX BA =(I BA ,FID BA ) and store it on the blockchain, and obtain the extraction index I BA , I BA Mid B and Mid A The concatenated bit string, and I BA and FID BA A key-value pair.

3. The first impression-based anti-disguise identity authentication method in the metaverse according to claim 2, characterized in that: In step 5, the method by which B verifies A's public virtual identity is: 1) B from Mid A Extract A's identity token MIT A ; 2) B calculates and extracts index I BA , through I BA Get B's first impression of A's metaverse from the blockchain BA ; 3) B verifies the identity provider IDP in MIT A The signature on the chameleon verification algorithm Check(pk A ,h A ,M A ,R A ) Verify A's public virtual identity VID A =(M A ,R A ), and use the decryption algorithm DSC(pk A ,h A ,CT BA ,sk B )Decrypt the ciphertext CT BA , review the first metaverse encounter scene Img A ←DSC(pk A ,h A ,CT BA ,sk B ); 4) If the above three steps are passed, the verification is passed, otherwise the verification fails.

4. The first impression-based anti-disguise identity authentication method in the metaverse according to claim 1, characterized in that: The step 6 specifically includes: 1) A’s manipulator generates iris feature M′; 2) A will C A Embedded into M' to form the marked iris feature M' A ; 3) A uses the signcryption generation algorithm to generate the ciphertext CT′ A ←SC(sk A ,h A ,M′ A ,pk B ) and sent to B as a response to C A Response.

5. The first impression-based anti-disguise identity authentication method in the metaverse according to claim 1, characterized in that: Also includes: Step 9: If A is proven not to be disguised, then B is a finite set of order q Randomly pick a w from g w Sent to A, g is the generator of the multiplication cyclic group in the signcryption algorithm, thereby establishing a session key in x A Represents the private key sk A ,y A Represents the public key pk A .

Images