philip lelyveld The world of entertainment technology

Security Considerations for Virtual Reality Systems

There is a growing need for authentication methodology in virtual reality applications. Current systems assume that the immersive experience technology is a collection of peripheral devices connected to a personal computer or mobile device. Hence there is a complete reliance on the computing device with traditional authentication mechanisms to handle the authentication and authorization decisions. Using the virtual reality controllers and headset poses a different set of challenges as it is subject to unauthorized observation, unannounced to the user given the fact that the headset completely covers the field of vision in order to provide an immersive experience. As the need for virtual reality experiences in the commercial world increases, there is a need to provide other alternative mechanisms for secure authentication. In this paper, we analyze a few proposed authentication systems and reached a conclusion that a multidimensional approach to authentication is needed to address the granular nature of authentication and authorization needs of a commercial virtual reality applications in the commercial world.

...

A. Knowledge Driven Biometric authentication

This methodology involves the application of known hu- man behaviors when conducting the process of biometric authentication. ...

B. RubikAuth

Another experimental authentication software is the Ru- bikAuth. Taking its name from the inventor of the iconic Rubik’s Cube, the RubikAuth essentially acts as a 9-digit pin input overlayed over each face of a multicolored cube but the rear. ...

C. OcuLock

Human Visual System (HVS) includes not just the eyeball, but eyelids, nerves around the eye, extraocular muscles, cells etc.  ...

D. BioMove

An international group produced a biometric identification process known as BioMove, which prompts the user to per- form certain simple tasks while reading their motion. Based on the user’s unique manner of motion, the software then verifies their identity.  ...

See the full paper here: https://ui.adsabs.harvard.edu/abs/2022arXiv220102563V/abstract