A three-stage authentication system for the metaverse

In recent years, many computer scientists have explored the concept of metaverse, an online space in which users can access different virtual environments and immersive experiences, using VR headsets and AR. While navigating metadata, users can also share personal data, whether to make purchases, connect with other users, or for other purposes.

Previous studies have consistently highlighted the limitations of password authentication systems, as there are now many cyberattacks and strategies to crack them. To increase Protect of the user navigating the metadata, so password-based authentication would no longer be ideal.

This inspired a team of researchers at VIT-AP University in India to create MetaSecure, a passwordless authentication system for the metaverse. This system, introduced in a pre-published paper on arXivcombines three different authentication techniques, namely device authentication, face recognition and physical security keys.

Sibi Chakkaravarthy and Aditya Mitra, two of the researchers who carried out the study, told Tech Xplore: “The concept of the metaverse promotes the sustainable development of human civilizations, enhancing communication across the platform. virtual”. “In such a scenario, one’s security digital identity is a major concern. Therefore, we launched MetaSecure, a new authentication system.”

MetaSecure is designed to greatly enhance the security of the metaverse, protecting users as they engage in a wide range of virtual activities. Authentication systems can secure a wide range of personal data and assets, including digital assets, online identities, avatars, and economic information.

“MetaSecure ensures that digital identities, digital assets and sensitive information in the virtual world of the protected and verified metaverse,” explained Chakkaravarthy and Mitra.

“Users register their device and physical security key. To sign in, users need to pass three security checks, facial recognition, physical security key, and device verification. MetaSecure’s uniqueness lies in its use of FIDO2 standards to ensure that all users in the metaverse are genuine and will serve as a check against fake users on virtual reality platforms.”

MetaSecure may have an advantage over other previously introduced passwordless authentication systems, as it implements three different layers of authentication, including device verification, which is known to be very difficult to bypass. Additionally, this authentication system comes in a simple software development kit (SDK) that can be deployed practically on any device, including VR and AR devices.

Chakkaravarthy and Mitra said: “Through various notable studies, we found that an increase in cybercrime on virtual reality platforms is related to users not having unique identities. verified”. “Extensive research has found that password-based authentication is not as effective as other methods due to attacks including social engineering, keylogging, phishing, vishing, etc. “With MetaSecure, we remove vulnerabilities to these known attacks.”

In the future, authentication systems like MetaSecure can help with security inverse, preventing multiple crashes and data breaches. For instance, it can protect users from having their digital identities, personal data, and avatars stolen, while also protecting them from teasing, cyber stalking, and many other cybercriminals that can can take place on a VR platform.

“MetaSecure has a huge scope for future research, as it can also be implemented in transactions and exchanges of sensitive information over augmented realitywhere a FIDO2-enabled security key is used in accuracy will ensure confidentiality and privacy for users,” added Chakkaravarthy and Mitra.

© 2023 Science X Network