Spatial Anchor Access Authorization for Secure Metaverse Discovery

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing communication networks lack secure mechanisms for accessing and managing spatial anchor information, particularly in the context of metaverse services, leading to potential security vulnerabilities in spatial anchor discovery and management operations.

Innovation Solution

A method and apparatus are introduced to enhance the security of spatial anchor access and management by utilizing authorization codes and access tokens, validated through OpenID Connect authentication, to ensure only authorized entities can perform CRUD operations on spatial anchors, leveraging the 3GPP CAPIF and SEAL frameworks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If spatial anchor information is made accessible for metaverse services, then service functionality and user experience are improved, but security vulnerabilities and unauthorized access risks increase

Engineering Contradiction:
Improvespatial anchor access capabilityVSAvoidsecurity of spatial anchor access
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces an authorization code as an intermediary element between the user apparatus and spatial anchor information. The authorization code acts as a mediator that verifies user credentials and grants access permissions, preventing direct unauthorized access while enabling legitimate service operations. This resolves the contradiction by adding a security layer without blocking authorized spatial anchor access functionality.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If authorization mechanisms are implemented for spatial anchor access, then security is improved, but system complexity and operational overhead increase

Engineering Contradiction:
Improvesecurity of spatial anchor accessVSAvoidauthorization system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the authorization process into distinct components: user credential verification, authorization code generation, and spatial anchor access control. This segmentation allows each component to be implemented independently with standardized protocols, reducing overall system complexity while maintaining comprehensive security. The modular approach enables easier maintenance and deployment compared to a monolithic authorization system.

Inventive Principle:
Principle #1Segmentation

3Ease of operation

If existing communication network protocols are used without modification, then ease of operation is maintained, but security vulnerabilities in spatial anchor management persist

Engineering Contradiction:
Improvespatial anchor access operationVSAvoidsecurity vulnerabilities
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent implements preliminary authorization actions before spatial anchor access operations. The user apparatus must first obtain an authorization code through credential verification, and this authorization code is validated before allowing any spatial anchor discovery, creation, update, or deletion operations. This preliminary security check prevents vulnerable operations while maintaining ease of use for authorized users through standardized authentication flows.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP4694262A1Method and apparatus for accessing information about spatial anchor
Publication Date: 2026.02.11 NOKIA TECHNOLOGIES OY
  • EP4694262A1 patent drawingFigure 1~2
  • EP4694262A1 patent drawingFigure 3~4
  • EP4694262A1 patent drawingFigure 5~6

AI summary

Embodiments of the present disclosure provide a method and apparatus for accessing information about spatial anchor. A method (400) performed by a first apparatus for accessing information about at least one spatial anchor may comprise: transmitting (S402), to a second apparatus, a first request for an authorization to access information about the at least one spatial anchor; receiving (S404), from the second apparatus, a first response indicating the authorization; transmitting (S406), to a third apparatus, a second request based at least on the authorization, for accessing information about at least one spatial anchor; and receiving (S408), from the third apparatus, a second response.