User login method and device of meta universe and computer readable storage medium

Abstract

The invention provides a meta universe user login method and device and a computer readable storage medium. Comprising the following steps: acquiring a bilinear mapping function of a configuration server, determining a public parameter set according to the bilinear mapping function, acquiring a user name and a password registered by a user, encoding the password to obtain a password encoding value, and determining a first commitment corresponding to the password according to the password encoding value and the public parameter set; registering for the user in the meta-universe system according to the first commitment and the user name, controlling the meta-universe client to generate a randomized commitment, a random number and a second commitment of the random number under the condition of receiving a login request initiated by the user, and according to the user name, the first commitment, the second commitment, the randomized commitment, the random number and a public parameter set, sending the random number to the meta-universe client. And controlling the element universe system to verify the login request based on a bilinear mapping algorithm. The problem that the security of the user logging in the meta universe is low due to the hidden danger of password leakage existing in the meta universe login scheme in the prior art is solved.

Description

Technical Field

[0001] The present application relates to the field of metaverse technology, and more specifically, to a metaverse user login method, device, computer-readable storage medium, and electronic device. Background Art

[0002] As a new internet business model, the metaverse emphasizes immersive experiences, real-time sustainability, and interoperability. It involves the integrated application of multiple cutting-edge technologies to ensure the security of user authentication and data interaction in a space where virtual and real worlds merge. Strong security measures are required to maintain user identity authentication, authorization, and privacy protection, prevent data leaks and cyberattacks, and ensure information security during the integration of the virtual and real worlds. With the growing popularity of the metaverse concept and the rapid development of related technologies, its secure login mechanisms have become a key research and development focus, aiming to establish a reliable and secure user access and interaction environment.

[0003] Existing user authentication and authorization methods on the Metaverse platform are typically completed through identity verification, digital signatures, and digital certificates. While this approach can improve security, it still presents certain security risks. For example, during the authentication process, passwords may be leaked or stolen, digital certificates may be forged or misused, and digital signatures may be tampered with, threatening the security of users' digital assets and rendering their digital identities untrustworthy. Furthermore, this approach struggles to efficiently complete authentication and verification in scenarios where a large amount of identity information requires verification and authorization. Summary of the Invention

[0004] The main purpose of this application is to provide a user login method, device, computer-readable storage medium and electronic device for the Metaverse, so as to at least solve the problem that the Metaverse login solution in the prior art has the hidden danger of password leakage, resulting in low security of user login to the Metaverse.

[0005] In order to achieve the above-mentioned purpose, according to one aspect of the present application, a user login method for a metaverse is provided, the method being applied to a configuration server of a metaverse login system, the metaverse login system further comprising a metaverse client and a metaverse system, the metaverse client communicating with the configuration server and the metaverse system respectively, the method comprising: obtaining a bilinear mapping function of the configuration server, determining a public parameter set according to the bilinear mapping function, wherein the bilinear mapping function is obtained by mapping a first cyclic group and a second cyclic group, the public parameter set comprising a first public parameter and a second public parameter, the first public parameter being a generator of the first cyclic group, and the second public parameter being a generator of the second cyclic group; obtaining a user name and a user name registered by the user in the metaverse client; Password, and encode the password to obtain a password encoding value, and determine a first commitment corresponding to the password based on the password encoding value and the public parameter set, where the first commitment is a data form that encapsulates the password; register the user in the Metaverse system based on the first commitment and the user name, and upon receiving a login request initiated by the user through the Metaverse client, control the Metaverse client to generate a randomized commitment, a random number, and a second commitment to the random number, and control the Metaverse system to verify the login request based on a bilinear mapping algorithm based on the user name, the first commitment, the second commitment, the randomized commitment, the random number, and the public parameter set, where the second commitment is a data form that encapsulates the random number.

[0006] Optionally, controlling the Metaverse client to generate a randomized commitment, a random number, and a second commitment of the random number includes: controlling the Metaverse client to obtain the random number, and based on the random number, performing a randomization operation according to a first formula C′=C r =g1 rs , determine the randomized commitment, where C' is the randomized commitment, C is the first commitment, r is the random number, g1 is the first public parameter, and s is the cryptographic encoding value; according to the second formula R=g2 r Determine the second commitment, where R is the second commitment and g2 is the second public parameter.

[0007] Optionally, the metaverse system is controlled to verify the login request based on a bilinear mapping algorithm, including: when the numerical value in the login request initiated by the user is equal to the password encoding value, the representation equation e(C′,g2)=e(C,R) holds, and it is determined that the login request verification is successful, where e is the bilinear mapping function.

[0008] Optionally, the password is encoded to obtain a password encoding value, including: mapping each character in the password into a unique integer using an ASCII code value, and performing weighted summation on each character of the integer according to the weight of each character in the integer to obtain a summed value, wherein the size of the weight is set according to the position of each character; performing a modulo operation on the summed value to obtain a modulo operation value, and applying a hash function to the modulo operation value to obtain a hash value of a preset length; and converting the hash value into a decimal value to obtain the password encoding value.

[0009] Optionally, after controlling the metaverse system to verify the login request based on a bilinear mapping algorithm, the method further includes: when the login request indicates that the verification is passed, determining that the user has successfully logged into the metaverse system, and controlling the metaverse system to generate a session ID; embedding the session ID into the digital identity of the user in the metaverse system to obtain a digital signature, wherein the digital identity represents the metadata of the user in the metaverse system, and the digital signature is used to verify the digital identity of the user when the user interacts with the metaverse system.

[0010] Optionally, after determining the public parameter set according to the bilinear mapping function, the method further includes: controlling the configuration server to verify its identity with a certificate authority, and if the identity verification is successful, controlling the certificate authority to issue a digital certificate to the configuration server; based on the digital certificate, using digital signature technology to encrypt the public parameter set to obtain the encrypted public parameter set.

[0011] Optionally, registering the user in the metaverse system based on the first commitment and the user name includes: registering the user in the metaverse system based on the first commitment and the user name, obtaining the digital identity of the user in the metaverse system, and associating the digital identity with the first commitment, wherein the digital identity represents the metadata of the user in the metaverse system.

[0012] According to another aspect of the present application, a user login device for a metaverse is provided, the device being applied to a configuration server of a metaverse login system, the metaverse login system further comprising a metaverse client and a metaverse system, the metaverse client communicating with the configuration server and the metaverse system respectively, the device comprising: an acquisition unit for acquiring a bilinear mapping function of the configuration server, and determining a public parameter set according to the bilinear mapping function, wherein the bilinear mapping function is obtained by mapping a first cyclic group and a second cyclic group, the public parameter set comprising a first public parameter and a second public parameter, the first public parameter being a generator of the first cyclic group, and the second public parameter being a generator of the second cyclic group; an encoding processing unit for acquiring a user name registered by the user in the metaverse client and a password, and encodes the password to obtain a password encoding value, and determines a first commitment corresponding to the password based on the password encoding value and the public parameter set, where the first commitment is a data form that encapsulates the password; a verification unit is used to register the user in the metaverse system based on the first commitment and the user name, and upon receiving a login request initiated by the user through the metaverse client, control the metaverse client to generate a randomized commitment, a random number, and a second commitment to the random number, and control the metaverse system to verify the login request based on a bilinear mapping algorithm based on the user name, the first commitment, the second commitment, the randomized commitment, the random number, and the public parameter set, where the second commitment is a data form that encapsulates the random number.

[0013] According to another aspect of the present application, a computer-readable storage medium is provided, which includes a stored program, wherein when the program is running, the device where the computer-readable storage medium is located is controlled to execute any one of the user login methods for the metaverse.

[0014] According to another aspect of the present application, an electronic device is provided, comprising: one or more processors, a memory, and one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, and the one or more programs include a method for executing a user login of any one of the metaverses.

[0015] Applying the technical solution of the present application, by obtaining the bilinear mapping function of the configuration server, determining the public parameter set according to the bilinear mapping function, wherein the bilinear mapping function is obtained by mapping the first cyclic group and the second cyclic group, and the public parameter set includes the first public parameter and the second public parameter, the first public parameter is the generator of the first cyclic group, and the second public parameter is the generator of the second cyclic group; obtaining the user name and password registered by the user in the Metaverse client, and encoding the password to obtain the password encoding value, and determining the first commitment corresponding to the password according to the password encoding value and the public parameter set, the first commitment is a data form of encapsulating the password; registering the user in the Metaverse system according to the first commitment and the user name, when receiving the login request initiated by the user through the Metaverse client, controlling the Metaverse client to generate a randomized commitment, a random number and a second commitment of the random number, and controlling the Metaverse system to verify the login request based on the bilinear mapping algorithm according to the user name, the first commitment, the second commitment, the randomized commitment, the random number and the public parameter set, the second commitment is a data form of encapsulating the random number. By leveraging the properties of group operations and combining them with the unique properties of the bilinear mapping algorithm, including its bilinearity and homomorphism, users can prove they know the password associated with the user without directly revealing the password. In this way, users are guaranteed not to reveal their passwords or other sensitive information when logging in to the Metaverse, which greatly reduces the risk of information leakage. Since the system can verify the user's identity without directly knowing the user's password, it also ensures that the user cannot deny their previous login behavior, increasing the system's non-repudiation. In addition, because it prevents potential password leakage and increases the difficulty for attackers to forge identities, it greatly improves the security of the system. This solves the problem of password leakage in the existing Metaverse login solution, which leads to low security for users logging into the Metaverse. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] The drawings that constitute part of this application are used to provide a further understanding of this application. The illustrative embodiments of this application and their descriptions are used to explain this application and do not constitute an improper limitation on this application. In the drawings:

[0017] Figure 1 A hardware structure block diagram of a mobile terminal for executing a user login method for a metaverse provided in an embodiment of the present application is shown;

[0018] Figure 2 A schematic diagram of a process for logging into a Metaverse user according to an embodiment of the present application is shown;

[0019] Figure 3 A schematic diagram showing a flow chart of a specific metaverse user login method provided in accordance with an embodiment of the present application is shown;

[0020] Figure 4 A structural block diagram of a user login device for a metaverse provided according to an embodiment of the present application is shown. DETAILED DESCRIPTION

[0021] It should be noted that, in the absence of conflict, the embodiments and features of the embodiments in this application can be combined with each other. The present application will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0022] In order to enable those skilled in the art to better understand the present invention, the following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments in the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts should fall within the scope of protection of this application.

[0023] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequential order. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present application described here. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0024] For ease of description, some nouns or terms involved in the embodiments of the present application are explained below:

[0025] Metaverse: The Metaverse is a cyberspace composed of digital identities, three-dimensional virtual environments and advanced interactive technologies. It provides users with immersive experiences and a wide range of social and economic activities by integrating technologies such as augmented reality, virtual reality, and blockchain. It aims to create a persistent, decentralized virtual world where users can interact, create and trade outside the real world.

[0026] Digital identity: A digital identity represents a user's identity in the virtual world, typically in the form of a digital avatar. It combines a user's personalized characteristics, behavioral preferences, and social attributes, allowing them to interact, participate in activities, and own assets within the multidimensional virtual space of the metaverse. This identity not only reflects the user's virtual image but may also be linked to their digital assets and social networks, providing users with an immersive and highly interactive metaverse experience.

[0027] Multiplication cyclic group operation: refers to a specific group in group theory whose elements are combined by multiplication operation, and this group is cyclic, which means that there is an element whose power can generate all other elements in the group. Specifically, if a group G can be generated by all integer powers g of an element g n (where n is an integer), then we call G a cyclic group generated by g. In a multiplicative cyclic group, the group operation is multiplication, every element in the group can be expressed as a power of some generator, and the group operations satisfy the four basic properties of groups: closure, associativity, the existence of an identity, and the fact that every element has an inverse.

[0028] Bilinear mapping algorithm: is a computational method that defines a function that can be used to map a specific group G1, G2 and G T The properties of bilinearity, homomorphism, non-degeneracy, and computability must be satisfied, allowing the calculation of the product of any two group elements, and the result must be in another group. This function must also be easy to compute.

[0029] A CA (Certificate Authority) is a trusted third-party organization that provides network authentication services and is responsible for issuing and managing digital certificates. These certificates are used to verify the identity of individuals and organizations in internet communications, ensuring the security and encryption of data transmission. By verifying the identity of applicants and issuing digital certificates containing public keys, identity information, and a CA signature, the CA establishes a foundation of trust in electronic transactions and communications. Users can use the CA's root certificate to verify the trustworthiness of the parties they are communicating with, thereby protecting information from unauthorized access and tampering.

[0030] As introduced in the background technology, the Metaverse login solution in the prior art has the hidden danger of password leakage, resulting in low security for users to log in to the Metaverse. In order to solve the problem that the Metaverse login solution in the prior art has the hidden danger of password leakage, resulting in low security for users to log in to the Metaverse, the embodiments of the present application provide a Metaverse user login method, device, computer-readable storage medium and electronic device.

[0031] The technical solutions in the embodiments of the present invention will be described clearly and completely below with reference to the accompanying drawings in the embodiments of the present invention.

[0032] The method embodiments provided in the embodiments of the present application can be executed in a mobile terminal, a computer terminal or a similar computing device. Taking running on a mobile terminal as an example, Figure 1 This is a hardware structure block diagram of a mobile terminal for a user login method of a metaverse according to an embodiment of the present invention. Figure 1 As shown, the mobile terminal may include one or more ( Figure 1Only one is shown) a processor 102 (the processor 102 may include but is not limited to a microprocessor MCU or a programmable logic device FPGA and other processing devices) and a memory 104 for storing data, wherein the mobile terminal may also include a transmission device 106 and an input and output device 108 for communication functions. It will be understood by those skilled in the art that Figure 1 The structure shown is only for illustration and does not limit the structure of the mobile terminal. Figure 1 More or fewer components than shown, or with Figure 1 Different configurations shown.

[0033] The memory 104 can be used to store computer programs, such as software programs and modules of application software, such as the computer program corresponding to the user login method of the Metaverse in the embodiment of the present invention. The processor 102 executes various functional applications and data processing by running the computer programs stored in the memory 104, that is, implementing the above-mentioned method. The memory 104 may include high-speed random access memory and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 104 may further include a memory remotely located relative to the processor 102, and these remote memories can be connected to the mobile terminal via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof. The transmission device 106 is used to receive or send data via a network. Specific examples of such networks may include wireless networks provided by the mobile terminal's communications provider. In one example, the transmission device 106 includes a network interface controller (NIC), which can be connected to other network devices via a base station to enable communication with the Internet. In one example, the transmission device 106 may be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0034] In this embodiment, a user login method for a metaverse running on a mobile terminal, a computer terminal or a similar computing device is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0035] Figure 2Flowchart of the user login method of the Metaverse according to the embodiment of the present application. The above method is applied to the configuration server of the Metaverse login system, and the above Metaverse login system also includes a Metaverse client and a Metaverse system. The above Metaverse client communicates with the above configuration server and the above Metaverse system respectively. Figure 2 As shown, the method includes the following steps:

[0036] Step S201: Obtain a bilinear mapping function of the configuration server, and determine a public parameter set based on the bilinear mapping function, wherein the bilinear mapping function is obtained by mapping a first cyclic group and a second cyclic group, and the public parameter set includes a first public parameter and a second public parameter, wherein the first public parameter is a generator of the first cyclic group, and the second public parameter is a generator of the second cyclic group;

[0037] Specifically, before obtaining the bilinear mapping function of the configuration server, the configuration server needs to verify its identity with the certificate authority (CA) and request a digital certificate. After the verification is passed, the CA issues a digital certificate to the configuration server and uses digital signature technology to digitally sign the public parameters using the digital certificate to ensure their integrity and authenticity of the source. The public parameters are then provided to the Metaverse client and Metaverse system for use. The configuration server selects a secure linear bimapping function and generates the corresponding public parameters. By integrating the CA, the identity of the configuration server and the credibility of the public parameters are ensured. At the same time, digital signature technology is used to ensure the integrity and authenticity of the public parameters to prevent tampering with the public parameters during transmission.

[0038] Step S202: Obtain the username and password registered by the user in the Metaverse client, encode the password to obtain a password encoding value, and determine a first commitment corresponding to the password based on the password encoding value and the public parameter set. The first commitment is a data form that encapsulates the password.

[0039] Commitment is defined as a cryptographic tool used by users to prove to a system or another party that they possess sensitive information (such as a password) without directly revealing it. Specifically, during the Metaverse login process, a commitment is a process in which users "encapsulate" their passwords through a series of mathematical operations to generate a data form.

[0040] This step only requires interaction with the configuration server to obtain public parameters during the user registration phase. During the subsequent login process, users do not need to interact with the centralized system. This design is particularly suitable for systems that need to efficiently handle large numbers of concurrent login requests, as it reduces communication overhead during the authentication process, thereby improving overall access response speed and system capacity.

[0041] Specifically, the password encoding process described above can convert the user-entered password into an integer form that is compatible with the bilinear mapping algorithm. This method not only improves the flexibility of password processing but also enhances the algorithm's compatibility with different password types, providing users with a more secure and convenient login experience.

[0042] Step S203: register the user in the Metaverse system according to the first commitment and the user name. Upon receiving a login request from the user through the Metaverse client, control the Metaverse client to generate a randomized commitment, a random number, and a second commitment of the random number. Based on the user name, the first commitment, the second commitment, the randomized commitment, the random number, and the public parameter set, control the Metaverse system to verify the login request based on a bilinear mapping algorithm. The second commitment is a data form that encapsulates the random number.

[0043] Specifically, the Metaverse system leverages the characteristics of group operations combined with the bilinearity and homomorphism of the bilinear mapping algorithm to verify the validity of the randomized commitment provided by the Metaverse client. If the verification is successful, the system confirms that the user knows the password and allows the user to log in. The user only needs to know the encoded value of the password to prove that the user knows the password associated with the username, without revealing the password itself. The Metaverse system allows the user to log in, ensuring that the user does not need to disclose their password or other sensitive information when logging in in the Metaverse scenario, which greatly reduces the risk of information leakage. Furthermore, during the process of the user logging into the Metaverse system, even if an attacker is able to intercept the user's login request, they will not be able to obtain any useful information from it because the zero-knowledge proof of this scheme does not transmit the actual credentials.

[0044] Through this embodiment, the above-mentioned steps S201, S202, and S203 are applied. By utilizing the properties of group operations and combining the unique properties of the bilinear mapping algorithm, including its bilinearity and homomorphism, the user is allowed to prove that they know the password associated with the user without directly revealing the password. In this way, the user is guaranteed not to reveal their password or other sensitive information when logging in in the metaverse scenario, which greatly reduces the risk of information leakage. Because the system can verify the user's identity without directly knowing the user's password, it also ensures that the user cannot deny their previous login behavior, thereby increasing the system's non-repudiation. In addition, this embodiment prevents potential password leakage and increases the difficulty for attackers to forge identities, greatly improving the security of the system. It also solves the problem that the metaverse login solution in the prior art has the hidden danger of password leakage, resulting in low security for users to log in to the metaverse.

[0045] In the specific implementation process, the above step S203 controls the above Metaverse client to generate a randomized commitment, a random number, and a second commitment of the above random number, including: controlling the above Metaverse client to obtain the above random number, based on the above random number, according to the first formula C′=C r =g1 rs , determine the randomized commitment, where C' is the randomized commitment, C is the first commitment, r is the random number, g1 is the first public parameter, and s is the cryptographic value; according to the second formula R = g2 r Determine the second commitment, where R is the second commitment and g2 is the second public parameter.

[0046] This method introduces a random number and a randomized commitment, increasing the uncertainty of the login process. This ensures that each login attempt has a different commitment value. Even if an attacker intercepts login information at a specific moment, it cannot be used for subsequent login attempts, further strengthening the security of the system. The generation of the randomized commitment relies on the random number and the password encoding value. This ensures that even the same password will generate a different commitment under different random numbers, increasing the difficulty of cracking. Simultaneously, the generation of the second commitment ensures that the random number itself is securely encapsulated and cannot be directly accessed during transmission, protecting critical information during the login process.

[0047] Specifically, the metaverse system is controlled based on a bilinear mapping algorithm to verify the login request, including: when the numerical value in the login request initiated by the user is equal to the password encoding value, the representation equation e(C′,g2)=e(C,R) holds, and it is determined that the login request verification is successful, where e is the bilinear mapping function.

[0048] This method leverages the properties of bilinear mapping functions, which enable verification of the correctness of the relationship between two commitments when certain conditions are met, without directly comparing the original data. This means that even if an attacker knows the specific values ​​of the first and second commitments, they cannot reverse engineer the original cryptographically encoded value, as the properties of the bilinear mapping function make such reversal extremely difficult, or even theoretically impossible. This approach not only verifies the user's identity but also protects their password from being leaked, enhancing the security of the entire metaverse system and user privacy.

[0049] Furthermore, the password encoding process is performed to obtain a password encoding value, including: mapping each character in the password into a unique integer using an ASCII code value, and performing weighted summation processing on each character in the integer according to the weight of each character in the integer to obtain a sum value, wherein the size of the weight is set according to the position of each character; performing a modulo operation on the sum value to obtain a modulo operation value, and applying a hash function to the modulo operation value to obtain a hash value of a preset length; and converting the hash value into a decimal value to obtain the password encoding value.

[0050] Among them, the hash function can use the hash function SHA-256;

[0051] The modulo operation limits the numerical range of the summed value, compressing the summed value into a fixed range to avoid overflow in subsequent calculations. In addition, the modulo base of the modulo operation can be any large prime number (the order of the bilinear mapping group used in the system (such as G1, G2) is itself a large prime number, so the modulo base needs to be the same as this order to ensure that the generated integer S is within the valid range of the group). Using a large prime number for the modulo operation can make the results evenly distributed and reduce the probability of collisions when different passwords are mapped to the same integer. In addition, the order of the system's bilinear mapping group (such as G1, G2) is a prime number, and the modulo base must be consistent with the group order to ensure that the result is within the valid range of the group.

[0052] This method converts the password into a series of integers and performs weighted summation, modulo operations, and hashing to ultimately generate a password encoding value. This process is not only complex but also difficult to reverse engineer, effectively protecting the user's password security. The use of ASCII code values ​​converts each character of the password into a fixed numerical value, the weighted summation takes into account the importance of the character position in the password, and the modulo operations and hashing further obfuscate the original data, making it difficult for an attacker to reverse engineer the original password from the password encoding value even if they know the encoding process. Through these steps, this solution not only improves the security of the password, but also ensures the uniqueness and unpredictability of the password encoding value, providing a solid security guarantee for user logins to the Metaverse system.

[0053] Furthermore, after controlling the metaverse system to verify the login request based on a bilinear mapping algorithm, the method further includes: when the login request indicates that the verification is successful, determining that the user has successfully logged into the metaverse system, and controlling the metaverse system to generate a session ID; embedding the session ID into the digital identity of the user in the metaverse system to obtain a digital signature, wherein the digital identity represents the metadata of the user in the metaverse system, and the digital signature is used to verify the digital identity of the user when the user interacts with the metaverse system.

[0054] This method further strengthens user authentication within the Metaverse system by generating a session ID after a user successfully logs in and embedding it in the digital signature. The session ID, acting as a temporary identifier, ensures that user actions within a single login cycle can be traced and verified without compromising the long-term security of their digital identity. The use of digital signatures ensures non-repudiation of user actions; once a user performs an action, they cannot deny that it was performed. This approach not only enhances the security and traceability of user actions but also provides a higher level of trust and security within the Metaverse system.

[0055] Specifically, after determining the public parameter set according to the above-mentioned bilinear mapping function, the above-mentioned method also includes: controlling the above-mentioned configuration server to verify its identity with the certificate authority, and if the above-mentioned identity verification is passed, controlling the above-mentioned certificate authority to issue a digital certificate to the above-mentioned configuration server; based on the above-mentioned digital certificate, using digital signature technology to encrypt the above-mentioned public parameter set to obtain the encrypted public parameter set.

[0056] This method ensures the authenticity of the configuration server's identity and the integrity of the public parameter set through the introduction of digital certificates, preventing man-in-the-middle attacks and data tampering. Digital certificates are issued by an authoritative third-party organization. They prove the identity of the configuration server and contain public key information, allowing other entities to confirm the legitimacy of the configuration server by verifying the digital certificate. The application of digital signature technology ensures that the public parameter set is not tampered with during transmission. Even if an attacker intercepts the data, they cannot forge a valid digital signature, thereby ensuring the integrity and security of the system parameters. This method not only improves the overall security and credibility of the Metaverse system, but also provides users with a more secure login environment and enhances user trust in the system.

[0057] More specifically, registering the user in the metaverse system according to the first commitment and the user name includes: registering the user in the metaverse system according to the first commitment and the user name, obtaining the digital identity of the user in the metaverse system, and associating the digital identity with the first commitment, wherein the digital identity represents the metadata of the user in the metaverse system.

[0058] By associating a digital identity with a primary commitment, this method ensures that user authentication within the Metaverse system is based not only on the username but also on an encrypted password commitment, significantly improving the accuracy and security of authentication. A digital identity, which contains detailed user information and permission settings, serves as the foundation for user activity within the Metaverse system. Associating a digital identity with a primary commitment ensures that even if a username is compromised, authentication cannot be completed without the correct password commitment, thus protecting the user's account security. This approach not only simplifies the user management process but also provides the Metaverse system with powerful identity authentication capabilities, enhancing user experience and system security.

[0059] In order to enable those skilled in the art to more clearly understand the technical solution of the present application, the implementation process of the user login method of the metaverse of the present application will be described in detail below with reference to specific embodiments.

[0060] Existing user authentication and authorization methods on the Metaverse platform are typically completed through identity verification, digital signatures, and digital certificates. While this approach can improve security, it still presents certain security risks. For example, during the authentication process, passwords may be leaked or stolen, digital certificates may be forged or misused, and digital signatures may be tampered with, threatening the security of users' digital assets and rendering their digital identities untrustworthy. Furthermore, this approach struggles to efficiently complete authentication and verification in scenarios where a large amount of identity information requires verification and authorization.

[0061] This embodiment relates to a specific metaverse user login method. Through a series of algorithms and protocols, without the user revealing the real password, the third-party metaverse platform can verify the legitimacy and rights of the user's identity and provide related services, effectively protecting the user's privacy and preventing the leakage and abuse of identity information. At the same time, it reduces the storage and transmission costs of user identity information, improves the efficiency of user identity authentication, and enhances the user experience.

[0062] like Figure 3 As shown, the specific steps include:

[0063] Step S1: The configuration server initializes public configuration parameters: First, the configuration server verifies its identity to the certificate authority (CA) and requests a digital certificate. After the verification is passed, the CA issues a digital certificate to the configuration server; secondly, the configuration server selects a secure bilinear mapping e: G1×G2→GT, where G1 and G2 are two different cyclic groups, GT is the target group, and the system selects the generators g1 and g2 of G1 and G2 as public parameters, and uses digital signature technology on the public parameters to ensure their integrity and authenticity of the source, and provides them to the metaverse client and metaverse system for use.

[0064] Step S2: The Metaverse client generates a password commitment to register with the system: The user enters the username and password pwd (including numbers, letters, and special characters) in the Metaverse client to initiate a registration request to the Metaverse system. The Metaverse client first uses a password preprocessing method to convert the password pwd into an integer S, then accesses the configuration server to obtain public parameters (g1 and g2), and verifies the reliability of the source of the public parameters by verifying the signature, and uses the public parameters and integer S to calculate the commitment corresponding to the password: C, (C = g1 s ) Commitment is a bilinear mapping function of the password. The Metaverse client uses the username and commitment C to register in the Metaverse system. The Metaverse system generates a unique digital identity for the user. The digital identity contains the user's virtual image, assets, achievements and other metadata, and associates commitment C with the user's digital identity.

[0065] The password preprocessing method is as follows:

[0066] 1) Map each character of the user password pwd into a unique integer using the ASCII code value;

[0067] 2) Perform a weighted summation of the mapping values ​​of each character to obtain the value x, where the weight is a function of the position of each character;

[0068] 3) Perform a modulo operation on x, where the modulo base can be any larger prime number;

[0069] 4) Apply the hash function SHA-256 to x to produce a fixed-length hash value, usually a binary string;

[0070] 5) Convert the binary string into decimal to get the integer S corresponding to the password pwd.

[0071] Step S3: Metaverse client generates randomized commitment to log in to the system: The user initiates a login request through the Metaverse client, which generates randomized commitment C' and commitment R of random number r, and provides the user name, commitment R and randomized commitment C' to the Metaverse system. The specific implementation is: when the user initiates a login request, the Metaverse client selects a random number r and calculates randomized commitment C' = C r =g1 rs , the commitment of random number r is R=g2 r , and then sends the username, R and C' to the Metaverse system to prove that the user knows the password.

[0072] Step S4: The Metaverse system performs login verification: The Metaverse system uses the characteristics of group operations combined with the bilinearity and homomorphism of the bilinear mapping algorithm to verify the validity of the randomized commitment provided by the Metaverse client. If the verification is successful, the system confirms that the user knows the password and allows the user to log in. The verification process is as follows: Based on the randomized commitment provided by the user, the system verifies that e(C′,g2)=e(C,R). If the equation holds, the verification is successful, which means that the user must know a value S such that C=g1 s , and C'=C r =g1 rs This proves that the user knows the password associated with the username without revealing the password itself. The Metaverse system allows the user to log in. After a successful login, the system generates a session ID (Token). The session ID will be embedded in the user's digital identity to form a digital signature. This signature is used to verify the user's identity when interacting with the Metaverse.

[0073] This embodiment designs a public parameter reliability mechanism: the configuration server selects a secure linear bimapping function and generates corresponding public parameters. By integrating the CA, the identity of the configuration server and the credibility of the public parameters are ensured. At the same time, digital signature technology is used to ensure the integrity and authenticity of the public parameters, preventing the public parameters from being tampered with during transmission. In addition, through the password preprocessing method, the password entered by the user can be converted into an integer form that is compatible with the bilinear mapping algorithm. This method not only improves the flexibility of password processing, but also enhances the algorithm's compatibility with different types of passwords, providing users with a more secure and convenient login experience. A user identity verification method is also designed. This method utilizes the properties of group operations and combines the unique properties of the bilinear mapping algorithm, including its bilinearity and homomorphism, to allow users to prove that they know the password associated with the user without directly revealing the password. In this way, the security of the system is greatly improved because it prevents potential password leakage and increases the difficulty for attackers to forge identities.

[0074] The embodiments of the present application also provide a user login device for the Metaverse. It should be noted that the user login device for the Metaverse in the embodiments of the present application can be used to execute the user login method for the Metaverse provided in the embodiments of the present application. The device is used to implement the above-mentioned embodiments and preferred implementations, and the details that have been explained will not be repeated here. As used below, the term "module" can be a combination of software and / or hardware that implements a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, implementation in hardware, or a combination of software and hardware, is also possible and conceivable.

[0075] The following introduces the user login device of the metaverse provided in the embodiment of the present application.

[0076] Figure 4 Schematic diagram of a user login device for the Metaverse according to an embodiment of the present application. The above device is applied to the configuration server of the Metaverse login system. The above Metaverse login system also includes a Metaverse client and a Metaverse system. The above Metaverse client communicates with the above configuration server and the above Metaverse system respectively. Figure 4 As shown, the device includes:

[0077] an acquisition unit 41 configured to acquire a bilinear mapping function of the configuration server, and determine a public parameter set based on the bilinear mapping function, wherein the bilinear mapping function is obtained by mapping a first cyclic group and a second cyclic group, and the public parameter set includes a first public parameter and a second public parameter, wherein the first public parameter is a generator of the first cyclic group, and the second public parameter is a generator of the second cyclic group;

[0078] An encoding processing unit 42 is configured to obtain the username and password registered by the user in the Metaverse client, encode the password to obtain a password encoding value, and determine a first commitment corresponding to the password based on the password encoding value and the public parameter set, where the first commitment is a data form encapsulating the password.

[0079] The verification unit 43 is used to register the above-mentioned user in the above-mentioned metaverse system based on the above-mentioned first commitment and the above-mentioned user name, and when receiving the login request initiated by the above-mentioned user through the above-mentioned metaverse client, control the above-mentioned metaverse client to generate a randomized commitment, a random number and a second commitment of the above-mentioned random number, and control the above-mentioned metaverse system to verify the above-mentioned login request based on the bilinear mapping algorithm according to the above-mentioned user name, the above-mentioned first commitment, the above-mentioned second commitment, the above-mentioned randomized commitment, the above-mentioned random number and the above-mentioned public parameter set. The above-mentioned second commitment is a data form that encapsulates the above-mentioned random number.

[0080] In this embodiment, an acquisition unit is used to obtain a bilinear mapping function of the configuration server and determine a public parameter set based on the bilinear mapping function, wherein the bilinear mapping function is obtained by mapping the first cyclic group and the second cyclic group, and the public parameter set includes a first public parameter and a second public parameter, the first public parameter is a generator of the first cyclic group, and the second public parameter is a generator of the second cyclic group; an encoding processing unit is used to obtain a user name and password registered by a user in a metaverse client, encode the password to obtain a password encoding value, and determine a first commitment corresponding to the password based on the password encoding value and the public parameter set, where the first commitment is a data form that encapsulates the password; a verification unit is used to register the user in the metaverse system based on the first commitment and the user name, and upon receiving a login request initiated by the user through the metaverse client, control the metaverse client to generate a randomized commitment, a random number, and a second commitment of the random number, and control the metaverse system to verify the login request based on the bilinear mapping algorithm based on the user name, the first commitment, the second commitment, the randomized commitment, the random number, and the public parameter set, where the second commitment is a data form that encapsulates the random number.

[0081] As an optional solution, the verification unit includes a control module and a determination module; the control module controls the metaverse client to obtain the random number, and based on the random number, according to the first formula C′=C r =g1 rs , determine the randomized commitment, where C' is the randomized commitment, C is the first commitment, r is the random number, g1 is the first public parameter, and s is the cryptographic code value; the determination module is used to determine the randomized commitment according to the second formula R=g2 r Determine the second commitment, where R is the second commitment and g2 is the second public parameter.

[0082] An optional solution is that the verification unit also includes a first determination module, which is used to represent that the equation e(C′,g2)=e(C,R) holds true when the numerical value in the login request initiated by the above user is equal to the password encoding value, and determine that the above login request verification is successful, wherein e is the above bilinear mapping function.

[0083] An optional solution, the encoding processing unit includes a weighted summation processing module, a modulo operation module and a conversion module, the weighted summation processing module is used to map each character in the above password into a unique integer using an ASCII code value, and perform weighted summation processing on each character in the above integer according to the weight of each character in the above integer to obtain a sum value, wherein the size of the above weight is set according to the position of each of the above characters; the modulo operation module is used to perform modulo operation on the above sum value to obtain a modulo operation value, and apply a hash function to the above modulo operation value to obtain a hash value of a preset length; the conversion module is used to convert the above hash value into a decimal value to obtain the above password encoding value.

[0084] An optional solution is that the device also includes a first control unit and an embedding unit; the first control unit is used to control the metaverse system to verify the login request based on a bilinear mapping algorithm, and when the login request indicates that the verification is passed, determine that the user has successfully logged into the metaverse system, and control the metaverse system to generate a session ID; the embedding unit is used to embed the session ID into the digital identity of the user in the metaverse system to obtain a digital signature, wherein the digital identity represents the metadata of the user in the metaverse system, and the digital signature is used to verify the digital identity of the user when the user interacts with the metaverse system.

[0085] An optional solution is that the device also includes a second control unit and an encryption processing unit. The second control unit is used to control the above-mentioned configuration server to verify its identity with the certificate authority after determining the public parameter set according to the above-mentioned bilinear mapping function. When the above-mentioned identity verification is passed, the certificate authority is controlled to issue a digital certificate to the above-mentioned configuration server; the encryption processing unit is used to encrypt the above-mentioned public parameter set based on the above-mentioned digital certificate using digital signature technology to obtain the above-mentioned public parameter set after encryption.

[0086] In an optional solution, the verification unit also includes a registration module, which is used to register the above-mentioned user in the above-mentioned metaverse system based on the above-mentioned first commitment and the above-mentioned user name, obtain the digital identity of the above-mentioned user in the above-mentioned metaverse system, and associate the above-mentioned digital identity with the above-mentioned first commitment, wherein the above-mentioned digital identity represents the metadata of the above-mentioned user in the above-mentioned metaverse system.

[0087] The aforementioned Metaverse user login device includes a processor and memory. The acquisition unit, encoding processing unit, and verification unit are all stored as program units in the memory. The processor executes the program units stored in the memory to implement the corresponding functions. All of the aforementioned modules are located in the same processor; alternatively, the aforementioned modules can be located in different processors in any combination.

[0088] The processor includes a kernel, which retrieves the corresponding program unit from memory. One or more kernels can be configured, and kernel parameters can be adjusted to address the potential for password leakage in existing Metaverse login solutions, resulting in lower security for users logging into the Metaverse.

[0089] The memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM, and the memory includes at least one memory chip.

[0090] An embodiment of the present invention provides a computer-readable storage medium, which includes a stored program, wherein when the program is running, the device where the computer-readable storage medium is located is controlled to execute the user login method of the metaverse.

[0091] Specifically, the user login method of the Metaverse includes:

[0092] Step S201: Obtain a bilinear mapping function of the configuration server, and determine a public parameter set based on the bilinear mapping function, wherein the bilinear mapping function is obtained by mapping a first cyclic group and a second cyclic group, and the public parameter set includes a first public parameter and a second public parameter, wherein the first public parameter is a generator of the first cyclic group, and the second public parameter is a generator of the second cyclic group;

[0093] Step S202: Obtain the username and password registered by the user in the Metaverse client, encode the password to obtain a password encoding value, and determine a first commitment corresponding to the password based on the password encoding value and the public parameter set. The first commitment is a data form that encapsulates the password.

[0094] Step S203: register the user in the Metaverse system according to the first commitment and the user name. Upon receiving a login request from the user through the Metaverse client, control the Metaverse client to generate a randomized commitment, a random number, and a second commitment of the random number. Based on the user name, the first commitment, the second commitment, the randomized commitment, the random number, and the public parameter set, control the Metaverse system to verify the login request based on a bilinear mapping algorithm. The second commitment is a data form that encapsulates the random number.

[0095] An embodiment of the present invention provides a processor, which is used to run a program, wherein the user login method of the metaverse is executed when the program is running.

[0096] Specifically, the user login method of the Metaverse includes:

[0097] Step S201: Obtain a bilinear mapping function of the configuration server, and determine a public parameter set based on the bilinear mapping function, wherein the bilinear mapping function is obtained by mapping a first cyclic group and a second cyclic group, and the public parameter set includes a first public parameter and a second public parameter, wherein the first public parameter is a generator of the first cyclic group, and the second public parameter is a generator of the second cyclic group;

[0098] Step S202: Obtain the username and password registered by the user in the Metaverse client, encode the password to obtain a password encoding value, and determine a first commitment corresponding to the password based on the password encoding value and the public parameter set. The first commitment is a data form that encapsulates the password.

[0099] Step S203: register the user in the Metaverse system according to the first commitment and the user name. Upon receiving a login request from the user through the Metaverse client, control the Metaverse client to generate a randomized commitment, a random number, and a second commitment of the random number. Based on the user name, the first commitment, the second commitment, the randomized commitment, the random number, and the public parameter set, control the Metaverse system to verify the login request based on a bilinear mapping algorithm. The second commitment is a data form that encapsulates the random number.

[0100] An embodiment of the present invention provides an electronic device, comprising a processor, a memory, and a program stored in the memory and executable on the processor. When the processor executes the program, at least the following steps are performed:

[0101] Step S201: Obtain a bilinear mapping function of the configuration server, and determine a public parameter set based on the bilinear mapping function, wherein the bilinear mapping function is obtained by mapping a first cyclic group and a second cyclic group, and the public parameter set includes a first public parameter and a second public parameter, wherein the first public parameter is a generator of the first cyclic group, and the second public parameter is a generator of the second cyclic group;

[0102] Step S202: Obtain the username and password registered by the user in the Metaverse client, encode the password to obtain a password encoding value, and determine a first commitment corresponding to the password based on the password encoding value and the public parameter set. The first commitment is a data form that encapsulates the password.

[0103] Step S203: register the user in the Metaverse system according to the first commitment and the user name. Upon receiving a login request from the user through the Metaverse client, control the Metaverse client to generate a randomized commitment, a random number, and a second commitment of the random number. Based on the user name, the first commitment, the second commitment, the randomized commitment, the random number, and the public parameter set, control the Metaverse system to verify the login request based on a bilinear mapping algorithm. The second commitment is a data form that encapsulates the random number.

[0104] The devices in this article can be servers, PCs, PADs, mobile phones, etc.

[0105] The present application also provides a computer program product, which, when executed on a data processing device, is adapted to execute a program for initializing at least the following method steps:

[0106] Step S201: Obtain a bilinear mapping function of the configuration server, and determine a public parameter set based on the bilinear mapping function, wherein the bilinear mapping function is obtained by mapping a first cyclic group and a second cyclic group, and the public parameter set includes a first public parameter and a second public parameter, wherein the first public parameter is a generator of the first cyclic group, and the second public parameter is a generator of the second cyclic group;

[0107] Step S202: Obtain the username and password registered by the user in the Metaverse client, encode the password to obtain a password encoding value, and determine a first commitment corresponding to the password based on the password encoding value and the public parameter set. The first commitment is a data form that encapsulates the password.

[0108] Step S203: register the user in the Metaverse system according to the first commitment and the user name. Upon receiving a login request from the user through the Metaverse client, control the Metaverse client to generate a randomized commitment, a random number, and a second commitment of the random number. Based on the user name, the first commitment, the second commitment, the randomized commitment, the random number, and the public parameter set, control the Metaverse system to verify the login request based on a bilinear mapping algorithm. The second commitment is a data form that encapsulates the random number.

[0109] Obviously, those skilled in the art will appreciate that the various modules or steps of the present invention described above can be implemented using a general-purpose computing device, can be centralized on a single computing device, or can be distributed across a network of multiple computing devices. They can be implemented using program code executable by the computing device, and thus, can be stored in a storage device and executed by the computing device. In some cases, the steps shown or described herein can be performed in a different order than that shown, or can be fabricated as separate integrated circuit modules, or multiple modules or steps can be fabricated as a single integrated circuit module. Thus, the present invention is not limited to any particular combination of hardware and software.

[0110] Those skilled in the art will appreciate that the embodiments of the present application can be provided as methods, systems, or computer program products. Therefore, the present application can adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application can adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0111] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the steps in the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0112] These computer program instructions may also be stored in a computer readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 a process or multiple processes and / or boxes Figure 1 The function specified in one or more boxes.

[0113] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing the instructions executed on the computer or other programmable device for implementing the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0114] In a typical configuration, a computing device includes one or more processors (CPUs), input / output interfaces, network interfaces, and memory.

[0115] The memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0116] Computer-readable media includes permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. The information can be computer-readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassettes, magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer-readable media does not include transitory computer-readable media (transitory media), such as modulated data signals and carrier waves.

[0117] It should also be noted that the terms "comprises," "includes," or any other variations thereof are intended to encompass non-exclusive inclusion, such that a process, method, commodity, or apparatus that includes a series of elements includes not only those elements but also other elements not explicitly listed, or includes elements inherent to such process, method, commodity, or apparatus. In the absence of further limitations, an element defined by the phrase "comprises a ..." does not exclude the presence of other identical elements in the process, method, commodity, or apparatus that includes the element.

[0118] From the above description, it can be seen that the above embodiments of the present application achieve the following technical effects:

[0119] 1) A user login method for a metaverse of the present application is applied to a configuration server of a metaverse login system. The metaverse login system also includes a metaverse client and a metaverse system. The metaverse client communicates with the configuration server and the metaverse system respectively. The method includes: obtaining a bilinear mapping function of the configuration server, and determining a public parameter set according to the bilinear mapping function, wherein the bilinear mapping function is obtained by mapping a first cyclic group and a second cyclic group. The public parameter set includes a first public parameter and a second public parameter. The first public parameter is a generator of the first cyclic group, and the second public parameter is a generator of the second cyclic group; obtaining the user name registered by the user in the metaverse client The system takes a user and a password, encodes the password to obtain a password-encoded value, and determines a first commitment corresponding to the password based on the password-encoded value and the public parameter set. The first commitment is a data form that encapsulates the password. The system then registers the user in the Metaverse system based on the first commitment and the username. Upon receiving a login request from the user through the Metaverse client, the system controls the Metaverse client to generate a randomized commitment, a random number, and a second commitment to the random number. The system then controls the Metaverse system to verify the login request based on the username, the first commitment, the second commitment, the randomized commitment, the random number, and the public parameter set, using a bilinear mapping algorithm. The second commitment is a data form that encapsulates the random number. By leveraging the properties of group operations and combining them with the unique properties of the bilinear mapping algorithm, including its bilinearity and homomorphism, the system allows users to prove they know the password associated with the user without directly revealing the password. In this way, users do not need to reveal their passwords or other sensitive information when logging in in the Metaverse scenario, which greatly reduces the risk of information leakage. Since the system can verify the user's identity without directly knowing the user's password, it also ensures that the user cannot deny their previous login behavior, which increases the system's non-repudiation. In addition, because it prevents potential password leakage problems and increases the difficulty for attackers to forge identities, it greatly improves the security of the system. It solves the problem that the Metaverse login solution in the existing technology has the hidden danger of password leakage, resulting in low security for users to log in to the Metaverse.

[0120] 2) A user login device for a metaverse of the present application is applied to a configuration server of a metaverse login system. The metaverse login system also includes a metaverse client and a metaverse system. The metaverse client communicates with the configuration server and the metaverse system respectively. The device includes: an acquisition unit for acquiring a bilinear mapping function of the configuration server, and determining a public parameter set according to the bilinear mapping function, wherein the bilinear mapping function is obtained by mapping a first cyclic group and a second cyclic group, and the public parameter set includes a first public parameter and a second public parameter, the first public parameter is a generator of the first cyclic group, and the second public parameter is a generator of the second cyclic group; an encoding processing unit for acquiring the user's registration information in the metaverse client. The system uses a registered username and password, encodes the password to obtain a password-encoded value, and determines a first commitment corresponding to the password based on the password-encoded value and a public parameter set. The first commitment is a data form that encapsulates the password. A verification unit is used to register the user in the Metaverse system based on the first commitment and username. Upon receiving a login request from the user via the Metaverse client, the system controls the Metaverse client to generate a randomized commitment, a random number, and a second commitment to the random number. The system then controls the Metaverse system to verify the login request based on the username, first commitment, second commitment, randomized commitment, random number, and public parameter set using a bilinear mapping algorithm. The second commitment is a data form that encapsulates the random number. By leveraging the properties of group operations and combining the unique properties of the bilinear mapping algorithm, including its bilinearity and homomorphism, the system allows a user to prove knowledge of the password associated with the user without directly revealing the password. In this way, users do not need to reveal their passwords or other sensitive information when logging in in the Metaverse scenario, which greatly reduces the risk of information leakage. Since the system can verify the user's identity without directly knowing the user's password, it also ensures that the user cannot deny their previous login behavior, which increases the system's non-repudiation. In addition, because it prevents potential password leakage problems and increases the difficulty for attackers to forge identities, it greatly improves the security of the system. It solves the problem that the Metaverse login solution in the existing technology has the hidden danger of password leakage, resulting in low security for users to log in to the Metaverse.

[0121] The above description is merely a preferred embodiment of the present application and is not intended to limit the present application. Various modifications and variations are possible for those skilled in the art. Any modifications, equivalent substitutions, or improvements made within the spirit and principles of the present application shall be included within the scope of protection of the present application.

Claims

1. A user login method for the Metaverse, characterized in that: The method is applied to a configuration server of a Metaverse login system, wherein the Metaverse login system further comprises a Metaverse client and a Metaverse system, wherein the Metaverse client communicates with the configuration server and the Metaverse system respectively, and the method comprises: Obtaining a bilinear mapping function of the configuration server, and determining a public parameter set based on the bilinear mapping function, wherein the bilinear mapping function is obtained by mapping a first cyclic group and a second cyclic group, the public parameter set includes a first public parameter and a second public parameter, the first public parameter is a generator of the first cyclic group, and the second public parameter is a generator of the second cyclic group; Obtaining the username and password of the user registered in the Metaverse client, encoding the password to obtain a password encoding value, and determining a first commitment corresponding to the password based on the password encoding value and the public parameter set, where the first commitment is a data form that encapsulates the password; The user is registered in the Metaverse system according to the first commitment and the user name. Upon receiving a login request initiated by the user through the Metaverse client, the Metaverse client is controlled to generate a randomized commitment, a random number, and a second commitment to the random number. The Metaverse system is controlled to verify the login request based on a bilinear mapping algorithm according to the user name, the first commitment, the second commitment, the randomized commitment, the random number, and the public parameter set. The second commitment is a data form that encapsulates the random number.

2. The method according to claim 1, characterized in that Controlling the metaverse client to generate a randomized commitment, a random number, and a second commitment to the random number includes: Control the Metaverse client to obtain a random number, based on the random number, according to the first formula C′=C r =g1 rs , determining the randomized commitment, where C′ is the randomized commitment, C is the first commitment, r is the random number, g1 is the first public parameter, and s is the cryptographically encoded value; According to the second formula R=g2 r Determine the second commitment, where R is the second commitment and g2 is the second public parameter.

3. The method according to claim 2, characterized in that Controlling the metaverse system to verify the login request based on a bilinear mapping algorithm includes: When the numerical value in the login request initiated by the user is equal to the password encoding value, the representation equation e(C′, g2)=e(C, R) holds, and it is determined that the login request verification is successful, where e is the bilinear mapping function.

4. The method according to claim 1, wherein The password is encoded to obtain a password encoding value, including: Mapping each character in the password into a unique integer using an ASCII code value, and performing a weighted summation process on each character in the integer according to a weight of each character in the integer to obtain a summed value, wherein the size of the weight is set according to the position of each character; Performing a modulo operation on the sum value to obtain a modulo operation value, and applying a hash function to the modulo operation value to obtain a hash value of a preset length; The hash value is converted into a decimal value to obtain the cryptographic encoding value.

5. The method according to claim 1, wherein After controlling the metaverse system to verify the login request based on the bilinear mapping algorithm, the method further includes: If the login request representation verification is passed, determining that the user has successfully logged into the Metaverse system, and controlling the Metaverse system to generate a session ID; The session ID is embedded in the digital identity of the user in the metaverse system to obtain a digital signature, wherein the digital identity represents the metadata of the user in the metaverse system, and the digital signature is used to verify the digital identity of the user when the user interacts with the metaverse system.

6. The method according to claim 1, characterized in that After determining the public parameter set according to the bilinear mapping function, the method further includes: Controlling the configuration server to verify its identity with a certificate authority, and if the identity verification is successful, controlling the certificate authority to issue a digital certificate to the configuration server; Based on the digital certificate, the public parameter set is encrypted using a digital signature technology to obtain the encrypted public parameter set.

7. The method according to claim 1, characterized in that Registering the user in the Metaverse system according to the first commitment and the username includes: The user is registered in the metaverse system according to the first commitment and the user name, a digital identity of the user in the metaverse system is obtained, and the digital identity is associated with the first commitment, wherein the digital identity represents the metadata of the user in the metaverse system.

8. A user login device for the Metaverse, characterized in that: The device is applied to the configuration server of the Metaverse login system, and the Metaverse login system also includes a Metaverse client and a Metaverse system. The Metaverse client communicates with the configuration server and the Metaverse system respectively. The device includes: an acquiring unit, configured to acquire a bilinear mapping function of the configuration server, and determine a public parameter set based on the bilinear mapping function, wherein the bilinear mapping function is obtained by mapping a first cyclic group and a second cyclic group, the public parameter set includes a first public parameter and a second public parameter, the first public parameter is a generator of the first cyclic group, and the second public parameter is a generator of the second cyclic group; an encoding processing unit, configured to obtain a username and password registered by a user in the Metaverse client, encode the password to obtain a password encoding value, and determine a first commitment corresponding to the password based on the password encoding value and the public parameter set, wherein the first commitment is a data form encapsulating the password; A verification unit is used to register the user in the metaverse system based on the first commitment and the user name, and upon receiving a login request initiated by the user through the metaverse client, control the metaverse client to generate a randomized commitment, a random number, and a second commitment to the random number, and control the metaverse system to verify the login request based on a bilinear mapping algorithm according to the user name, the first commitment, the second commitment, the randomized commitment, the random number, and the public parameter set, where the second commitment is a data form that encapsulates the random number.

9. A computer-readable storage medium, characterized in that The computer-readable storage medium includes a stored program, wherein when the program is executed, the device where the computer-readable storage medium is located is controlled to execute the user login method of the metaverse according to any one of claims 1 to 7.

10. An electronic device, characterized in that: include: One or more processors, a memory, and one or more programs, wherein the one or more programs are stored in the memory and are configured to be executed by the one or more processors, and the one or more programs include a method for executing a user login method of the metaverse described in any one of claims 1 to 7.

Images