一种保证虚拟现实可追踪性的安全认证框架
A Secure Authentication Framework to Guarantee the Traceability of Avatars in Metaverse
摘要：
Metaverse是一个与物理世界平行的巨大虚拟环境，用户在其中享受各种服务，充当化身。为了建立一个安全的生活栖息地，确保虚拟-物理可追溯性至关重要，即通过虚拟空间中的化身跟踪物理世界中的恶意玩家。本文提出了一种基于变色龙签名和生物特征认证的双因素认证框架。首先，针对虚拟空间中的伪装问题，提出了一种变色龙碰撞签名算法来实现虚拟身份的可验证性。第二，针对现实世界中的角色扮演问题，基于玩家的生物特征模板和变色龙密钥构造了一个虚拟角色的身份模型，实现了虚拟角色物理身份的可验证性。最后，我们设计了两个基于虚拟化身身份模型的分散认证协议，以保证虚拟化身的虚拟身份和物理身份的一致性。安全性分析表明，该认证框架保证了化身身份的一致性和可追溯性。仿真实验表明，该框架不仅完成了化身之间的分散认证，而且实现了虚拟-物理跟踪。
英文摘要：
Metaverse is a vast virtual environment parallel to the physical world in which users enjoy a variety of services acting as an avatar. To build a secure living habitat, it's vital to ensure the virtual-physical traceability that tracking a malicious player in the physical world via his avatars in virtual space. In this paper, we propose a two-factor authentication framework based on chameleon signature and biometric-based authentication. First, aiming at disguise in virtual space, we propose a chameleon collision signature algorithm to achieve the verifiability of the avatar's virtual identity. Second, facing at impersonation in physical world, we construct an avatar's identity model based on the player's biometric template and the chameleon key to realize the verifiability of the avatar's physical identity. Finally, we design two decentralized authentication protocols based on the avatar's identity model to ensure the consistency of the avatar's virtual and physical identities. Security analysis indicates that the proposed authentication framework guarantees the consistency and traceability of avatar's identity. Simulation experiments show that the framework not only completes the decentralized authentication between avatars but also achieves the virtual-physical tracking.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
