Secure XR Platform Private Group Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current extended reality (XR) systems lack secure and accessible methods for connecting users, particularly vulnerable populations such as adults with diminished mental capacity, older adults, and patients, due to security and technological competency issues, leading to risks of data breaches and difficulties in accessing virtual health treatments.

Innovation Solution

A secure XR platform is developed that creates private groups with multi-step authentication, uses security certificates to verify user and device access, and allows administrators to manage and monitor connections, ensuring safe and compliant interactions within a virtual environment.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If random connections between users are facilitated in current XR systems, then ease of connection is improved, but security of connection deteriorates

Engineering Contradiction:
Improveease of connectionVSAvoidsecurity of connection
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system performs preliminary actions by pre-registering users and devices, creating security certificates in advance, and establishing authorized connection pairs before actual XR sessions occur. This eliminates random connections while maintaining ease of use during the actual session.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system introduces an intermediary authentication mechanism that verifies security certificates and device identifiers before allowing connections. This mediator layer ensures secure connections without requiring users to manually manage security settings, maintaining ease of operation.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If multi-step authentication and security certificates are implemented, then security of connection is improved, but device complexity and ease of operation deteriorate

Engineering Contradiction:
Improvesecurity of connectionVSAvoidcomplexity of authentication process
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system implements self-service by automatically generating and managing security certificates on devices without requiring user intervention. The authentication process occurs automatically in the background, maintaining high security while minimizing perceived complexity for users.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

Security certificates and device registrations are performed as preliminary actions during initial setup, so that during actual XR sessions, the authentication occurs automatically without adding complexity to the user experience.

Inventive Principle:
Principle #10Preliminary action

3Ease of operation

If current XR systems allow direct access to virtual world for facilitation, then ease of operation is improved, but security of connection deteriorates

Engineering Contradiction:
Improveability to facilitate user experienceVSAvoidsecurity of connection
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system introduces an intermediary authentication layer that verifies security certificates and device identifiers before allowing facilitators to access and modify virtual environments. This mediator ensures secure facilitated access without compromising connection security.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS20230057203A1Systems and methods for connecting users in an extended reality setting
Publication Date: 2023.02.23 RALPHVR INC
  • US20230057203A1 patent drawing
  • US20230057203A1 patent drawing
  • US20230057203A1 patent drawing

AI summary

Systems and methods for connecting users in an extended reality setting are provided. One embodiment includes creating a private group for an extended reality session, registering a facility user for the private group and a first user identifier for the facility user, and registering a first device to link to the facility user. Some embodiments include registering a first user for the private group and a second user identifier for the first user, registering a second device to link to the first user, and receiving a request from a device of a possible user to join the session. Still some embodiments include retrieving a security certificate from the device, determining whether the security certificate corresponds, and in response to determining that the security certificate corresponds granting access to the possible user to the extended reality session. In response to determining that the security certificate does not correspond, denying access.