Spatial Anchor Access Using Token Authorization and OIDC
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication networks lack secure mechanisms for accessing information about spatial anchors, which are crucial for identifying and accessing services in the metaverse, particularly in ensuring authorized access and managing spatial anchor operations.
Innovation Solution
A method and apparatus are provided for accessing spatial anchor information through a series of requests and responses involving authorization codes and access tokens, utilizing OpenID Connect authentication and CAPIF core functions to validate and manage spatial anchor operations, ensuring only authorized users can perform CRUD operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If spatial anchor information is made accessible to users, then service accessibility and user experience are improved, but security risks and unauthorized access increase
Solution Approach 1:
The patent introduces an authorization server as an intermediary between users and spatial anchor information. The authorization server issues access tokens that mediate the access control process, allowing legitimate access while blocking unauthorized users. This intermediary mechanism resolves the contradiction by enabling service accessibility for authorized users while maintaining security through token-based authentication.
Solution Approach 2:
The system performs preliminary authorization actions by requiring users to obtain access tokens before accessing spatial anchor information. The authorization server pre-validates user credentials and issues tokens that contain authorization information. This preliminary action ensures that only authenticated users can access spatial anchor data, preventing unauthorized access while maintaining ease of operation for legitimate users.
2Reliability
If authorization mechanisms are implemented for spatial anchor access, then security is improved, but system complexity and processing overhead increase
Solution Approach 1:
The access token serves multiple functions: it authenticates the user, authorizes access to spatial anchor information, and can be validated by any service provider system. This universal token mechanism provides reliable security without requiring complex system-specific authentication protocols at each access point, thereby maintaining相对较低的系统复杂度 while ensuring access security.
Solution Approach 2:
The patent extracts the complex authorization logic into a separate authorization server, isolating it from the spatial anchor access systems. The authorization server handles credential verification and token issuance, while other systems only need to validate tokens. This extraction reduces system complexity for individual components while maintaining overall security through the centralized authorization mechanism.
3Reliability
If multiple authorization layers are added for spatial anchor management, then access control reliability is improved, but processing time and operational efficiency decrease
Solution Approach 1:
The system performs authorization verification in advance by issuing access tokens that contain pre-validated authorization information. When users access spatial anchor information, services only need to validate the token rather than perform full authentication. This preliminary action reduces processing time during actual access operations while maintaining reliable access control through the pre-validated tokens.
Solution Approach 2:
The access token contains a copy of the user's authorization information, allowing services to validate access rights without contacting the authorization server for each request. This copying mechanism enables fast local validation while maintaining access control reliability, as the token contains all necessary authorization data issued by the trusted authorization server.
Data Source
AI summary
Embodiments of the present disclosure provide a method and apparatus for accessing information about spatial anchor. A method (400) performed by a first apparatus for accessing information about at least one spatial anchor may comprise: transmitting (S402), to a second apparatus, a first request for an authorization to access information about the at least one spatial anchor; receiving (S404), from the second apparatus, a first response indicating the authorization; transmitting (S406), to a third apparatus, a second request based at least on the authorization, for accessing information about at least one spatial anchor; and receiving (S408), from the third apparatus, a second response.