Fast and Secure Authentication in Virtual Reality Using Coordinated 3D Manipulation and Pointing

There is a growing need for usable and secure authentication in virtual reality (VR). Established concepts (e.g., 2D graphical PINs) are vulnerable to observation attacks, and proposed alternatives are relatively slow. We present RubikAuth, a novel authentication scheme for VR where users authenticate quickly by selecting digits from a virtual 3D cube that is manipulated with a handheld controller. We report two studies comparing how pointing using gaze, head pose, and controller tapping impacts RubikAuth's usability and observation resistance under three realistic threat models. Entering a four-symbol RubikAuth password is fast: 1.69 s to 3.5 s using controller tapping, 2.35 s to 4.68 s using head pose, and 2.39 s to 4.92 s using gaze and highly resilient to observations; 97.78% to 100% of observation attacks were unsuccessful. Our results suggest that providing attackers with support material contributes to more realistic security evaluations.

Finding enjoyable and effective long-term approaches to rehabilitation for improving the upper limb (UL) function of people with multiple sclerosis (MS) is challenging. Virtual reality (VR) with its engagement, interaction, and real time feedback could be a solution, with immersive VR systems having preliminary evidence in stroke to be more effective in improving UL outcomes in comparison to non-immersive VR. However, immersive VR research is limited within the realm of MS rehabilitation. Therefore, the main aim of the PhD was to explore immersive VR as an approach for UL rehabilitation for people with MS (pwMS). This was achieved in four stages: 1) a systematic review of the current evidence for VR in UL rehabilitation in MS; 2) predevelopment focus groups to determine requirements for the development of bespoke immersive VR games; 3) software development of bespoke VR games to potentially improve UL function for pwMS; and 4) a feasibility study of the games and immersive VR for pwMS’ UL rehabilitation. The systematic review initially yielded ten articles with varying study design, VR intervention and UL outcome measures used. There were some statistically significant improvements after VR interventions in outcomes such as in nine-hole peg test (NHPT), hand grip strength and active range of motion. There were however conflicting results regarding if VR was more effective than conventional approaches. Whilst the review demonstrated there were positive results for VR improving UL function, most of the studies had small sample sizes and were inadequately powered, and the level of immersion on effectiveness in MS remains unknown. The predevelopment focus groups recruited ten pwMS and eight specialist clinicians to explore their views on immersive VR as an approach to UL rehabilitation and determine requirements to develop VR games for this purpose. PwMS commonly reported that their UL problems interfered with activities of daily living and resulted in the loss of meaningful hobbies such as writing. Many pwMS neglected UL exercise and found strategies for adapting to their UL impairments. Similarly, clinicians stated UL rehabilitation was neglected within their service and that it was challenging to find interesting treatment strategies. VR was suggested by both participant groups as a potential solution, as it was convenient for pwMS to access and could provide a more engaging and disguised approach to exercise. Although, there were shared concerns about cybersickness and disengagement while using VR approaches. Finally, both groups agreed games should be meaningful and adaptable for users but suggested different VR activities, with clinicians suggesting games directly reflecting activities of daily living and pwMS suggesting more abstract activities. Recommendations were made for the development of VR rehabilitation games which could be personalised and customisable for the varying abilities of pwMS. Using theme-based content analysis and requirement analysis, requirements for the software development of immersive VR games were created and developed using Unity game engine. Three games, “Piano”; “Catch-a-falling-star” and “VR Whack-a-mole” which targeted dexterity and strength for pwMS were developed, with different difficulty levels implemented to adapt to varying ability of pwMS. The final stage of this PhD was a randomised, controlled feasibility study to investigate an intervention of immersive VR involving the three co-produced games for pwMS’ UL rehabilitation. Participants were randomised to either an intervention group consisting of 30 minutes of VR co-produced games, twice/week, for eight weeks, or to a control group of usual care. Participants were recruited from the NHS and third sector organisations. Nineteen pwMS were recruited (intervention n=11, control n=8), with a recruitment rate of 3.2 participants/month. Only minor adverse events were reported (n=9), such as fatigue and UL pain. Adherence was good with 87% (±12%) session completed, and two dropouts were reported in the control group. There were positive trends for improving NHPT and hand grip strength, but there was an observed ceiling effect in the Action Research Arm Test. Participants reported high levels of satisfaction and good usability of the co-produced VR games, as measured by the USE questionnaire. Thematic analysis revealed participants enjoyed the distraction and atmospheres that immersive VR provided, and believed the games were fit for purpose with the majority of participants reporting improvements in their UL function. Participants suggested more variety and progression of exercises for future development. Overall, these studies show that immersive VR has the potential to be beneficial for UL rehabilitation and is feasible and safe for pwMS. Therefore, future work should refine VR games for long-term application and explore the clinical and cost effectiveness of this approach.

With rapid growth of wireless local area networks (WLAN) and computing techniques, handheld devices have become a popular tool in terms of working, entertaining and communicating in daily life. Considering the huge amounts of messages travelling in WLAN, a secure authentication scheme is definitely necessary, which is also required to be flexible across multiple organizations. Aiming for establishing a secure and flexible WLAN authentication scheme for various organizations, this paper reviews existing secure authentication mechanisms, describes the details of the proposed authentication scheme, and evaluates achievements of such a scheme.

(1) Background: The development of new technologies means that the use of virtual reality is increasingly being implemented in rehabilitative approaches for adult stroke patients. Objective: To analyze the existing scientific evidence regarding the application of immersive and non-immersive virtual reality in patients following cerebrovascular incidents and their efficacy in achieving dynamic and static balance. (2) Data sources: An electronic search of the databases Medline, Cochrane Library, PEDro, Scopus, and Scielo from January 2010 to December 2020 was carried out using the terms physiotherapy, physical therapy, virtual reality, immersive virtual reality, non-immersive virtual reality, stroke, balance, static balance, and dynamic balance. Selection of studies: Randomized controlled trials in patients older than 18 developed with an adult population (>18 years old) with balance disorders as a consequence of suffering a stroke in the previous six months before therapeutic intervention, including exercises harnessing virtual reality in their interventions and evaluations of balance and published in English or Spanish, were included. A total of two hundred twenty-seven articles were found, ten of which were included for review and of these, nine were included in the subsequent meta-analysis. (3) Data extraction: Two authors selected the studies and extracted their characteristics (participants, interventions, and validation instruments) and results. The methodological quality of the studies was evaluated using the PEDro scale, and the risk of bias was determined using the Cochrane risk-of-bias tool. Data synthesis: Of the selected studies, three did not show significant improvements and seven showed significant improvements in the intervention groups in relation to the variables. (4) Conclusions: Non-immersive virtual reality combined with conventional rehabilitation could be considered as a therapeutic option.

The integration of immersive Virtual Reality (VR) and Building Information Modeling (BIM) has many applications within the Architecture, Engineering, and Construction (AEC) industries. In this context VR is often highlighted for its ability to convey scale and details, especially when compared to non-immersive visualizations. However, despite being an active area of research, there is currently a lack of real-world studies exploring immersive VR in a construction-oriented context. In addition, there are still technical challenges and barriers for an efficient integration, such as rendering performance and interoperability issues. This paper addresses these issues by investigating the use of immersive, single- and multi-user VR within the openBIM ecosystem. The contribution is two-fold: (a) an in-depth presentation of algorithms and technical details of a multi-user VR application for immersive visualization of large and complex BIMs and (b) an evaluation of this VR system on several real-world construction projects. In all cases the VR visualization has been directly realized from the design teams IFC-models and the multi-user sessions has been performed both co-located as well as fully remote. The results show that multi-user VR improves communication, understanding, and collaboration, and by letting staff with knowledge and experience from construction production review the project in VR, design errors and constructability issues can be identified and resolved before reaching the actual production stage. Moreover, the use of VR is helpful regarding sequencing and planning, and to identify alternative design solutions.

Immersive Virtual Reality (IVR) is a growing 3D environment, where social and commercial applications will require user authentication. Similarly, smart homes in the real world (RW), offer an opportunity to authenticate in the third dimension. For both environments, there is a gap in understanding which elements of the third dimension can be leveraged to improve usability and security of authentication. In particular, investigating transferability of findings between these environments would help towards understanding how rapid prototyping of authentication concepts can be achieved in this context. We identify key elements from prior research that are promising for authentication in the third dimension. Based on these, we propose a concept in which users' authenticate by selecting a series of 3D objects in a room using a pointer. We created a virtual 3D replica of a real world room, which we leverage to evaluate and compare the factors that impact the usability and security of authentication in IVR and RW. In particular, we investigate the influence of randomized user and object positions, in a series of user studies (N=48). We also evaluate shoulder surfing by real world bystanders for IVR (N=75). Our results show that 3D passwords within our concept are resistant against shoulder surfing attacks. Interactions are faster in RW compared to IVR, yet workload is comparable.

With the rapid development of micro-electronics and Information and Communication Technology (ICT), users can utilize various service such as Internet of Things(IoT), smart-healthcare and smart-home using wearable devices. However, the sensitive information of user are revealed by attackers because the medical services are provided through open channel. Therefore, secure mutual authentication and key establishment are essential to provide secure services for legitimate users in Wireless Body Area Networks(WBAN). In 2019, Gupta et al. proposed a lightweight anonymous user authentication and key establishment scheme for wearable devices. We demonstrate that their scheme cannot withstand user impersonation, session key disclosure and wearable device stolen attacks. We also propose a secure and lightweight mutual authentication and key establishment scheme using wearable devices to resolve the security shortcomings of Gupta et al.'s scheme. The proposed scheme can be suitable to resource-limited environments.

Internet of Drones (IoD), designed to coordinate the access of unmanned aerial vehicles (UAVs), is a specific application of the Internet of Things (IoT). Drones are used to control airspace and offer services such as rescue, traffic surveillance, environmental monitoring, delivery and so on. However, IoD continues to suffer from privacy and security issues. Firstly, messages are transmitted over public channels in IoD environments, which compromises data security. Further, sensitive data can also be extracted from stolen mobile devices of remote users. Moreover, drones are susceptible to physical capture and manipulation by adversaries, which are called drone capture attacks. Thus, the development of a secure and lightweight authentication scheme is essential to overcoming these security vulnerabilities, even on resource-constrained drones. In 2021, Akram et al. proposed a secure and lightweight user–drone authentication scheme for drone networks. However, we discovered that Akram et al.’s scheme is susceptible to user and drone impersonation, verification table leakage, and denial of service (DoS) attacks. Furthermore, their scheme cannot provide perfect forward secrecy. To overcome the aforementioned security vulnerabilities, we propose a secure mutual authentication and key agreement scheme between user and drone pairs. The proposed scheme utilizes physical unclonable function (PUF) to give drones uniqueness and resistance against drone stolen attacks. Moreover, the proposed scheme uses a fuzzy extractor to utilize the biometrics of users as secret parameters. We analyze the security of the proposed scheme using informal security analysis, Burrows–Abadi–Needham (BAN) logic, a Real-or-Random (RoR) model, and Automated Verification of Internet Security Protocols and Applications (AVISPA) simulation. We also compared the security features and performance of the proposed scheme and the existing related schemes. Therefore, we demonstrate that the proposed scheme is suitable for IoD environments that can provide users with secure and convenient wireless communications.

Immersive virtual reality can expose humans to novel training and sensory environments, but motor training with virtual reality has not been able to improve motor performance as much as motor training in real-world conditions. An advantage of immersive virtual reality that has not been fully leveraged is that it can introduce transient visual perturbations on top of the visual environment being displayed. The goal of this study was to determine whether transient visual perturbations introduced in immersive virtual reality modify electrocortical activity and behavioral outcomes in human subjects practicing a novel balancing task during walking. We studied three groups of healthy young adults (5 male and 5 female for each) while they learned a balance beam walking task for 30 min under different conditions. Two groups trained while wearing a virtual reality headset, and one of those groups also had half-second visual rotation perturbations lasting ~10% of the training time. The third group trained without virtual reality. We recorded high-density electroencephalography (EEG) and movement kinematics. We hypothesized that virtual reality training with perturbations would increase electrocortical activity and improve balance performance compared with virtual reality training without perturbations. Our results confirmed the hypothesis. Brief visual perturbations induced increased theta spectral power and decreased alpha spectral power in parietal and occipital regions and improved balance performance in posttesting. Our findings indicate that transient visual perturbations during immersive virtual reality training can boost short-term motor learning by inducing a cognitive change, minimizing the negative effects of virtual reality on motor training. NEW & NOTEWORTHY We found that transient visual perturbations in virtual reality during balance training can boost short-term motor learning by inducing a cognitive change, overcoming the negative effects of immersive virtual reality. As a result, subjects training in immersive virtual reality with visual perturbations have equivalent performance improvement as training in real-world conditions. Visual perturbations elicited cortical responses in occipital and parietal regions and may have improved the brain's ability to adapt to variations in sensory input.

Functional near-infrared spectroscopy (fNIRS) allows for a reliable assessment of oxygenated blood flow in relevant brain regions. Recent advancements in immersive virtual reality (VR)-based technology have generated many new possibilities for its application, such as in stroke rehabilitation. In this study, we asked whether there is a difference in oxygenated hemoglobin (HbO2) within brain motor areas during hand/arm movements between immersive and non-immersive VR settings. Ten healthy young participants (24.3 ± 3.7, three females) were tested using a specially developed VR paradigm, called "bus riding", whereby participants used their hand to steer a moving bus. Both immersive and non-immersive conditions stimulated brain regions controlling hand movements, namely motor cortex, but no significant differences in HbO2 could be found between the two conditions in any of the relevant brain regions. These results are to be interpreted with caution, as only ten participants were included in the study.

Purpose Immersive Virtual Reality (VR) systems allow for highly repetitive tasks to be performed within a virtual environment that increases practice in home environments. VR can increase access to rehabilitation by reducing access barriers. However, rehabilitation outcomes between immersive VR systems and conventional physical rehabilitation are not well understood. The purpose of this case study was to assess the use of a custom clinically based VR simulation for testing gross hand dexterity with an individual with chronic stroke. Materials and methods The participant performed the box and blocks test (BBT) in an immersive VR environment and a physical environment. Three trials of the BBT were performed with their less-affected and affected hands each in both environments while measuring cortical activity using fNIRS. Rests were given between trials and environment conditions. Results Our results show that there was no statistical difference in the number of blocks moved between the physical and VR BBT for both the affected and less-affected hands. Furthermore, our results also indicate no statistically significant difference between the physical BBT and VR BBT conditions on contralateral motor cortex activation, suggesting that cortical involvement is comparable between physical and VR conditions. Conclusions These results suggest that an immersive VR system may be able to elicit functional and motor cortex activations that are comparable to the conventional physical BBT. Importantly, these findings highlights the potential benefits of VR therapy as a remote therapy intervention and/or to increase the effectiveness and practicality of current in-person rehabilitation programs. Implications for rehabilitation These findings highlight the potential benefits of immersive virtual reality as a remote therapy intervention. Immersive virtual reality use has potential benefits to increase the effectiveness and practicality of current in-person rehabilitation programs.

In recent years, the Internet of vehicles (IoV) has become an indispensable part of wireless communication. To protect users' privacy and communication security, an increasing number of scholars have focused on studying the safety of the IoV. However, due to the characteristics of the IoV, the problem of privacy protection and communication security has not been sufficiently studied and remains open in the IoV; thus, it is worthwhile for us to further explore and study the precise and dynamic safety certification in high-speed driving environments. In our study, we divide the IoV into several fogs to reduce the burden on the traffic control center and propose a new security authentication scheme with the vehicle's identity based on the security elliptic curve. The fog-based identity authentication (FBIA) scheme consists of two layers: the security authentication layer for vehicles outside the fog and the security monitoring layer for the rest of the vehicles. We propose two-way authentication based on the vehicle's identity in the security authentication layer and a deep learning scheme in the security monitoring layer to conduct real-time security in the IoV. Finally, we compare and analyze our FBIA scheme with related approaches, and the results show that the FBIA scheme has higher authentication accuracy and better adaptability to a high-speed mobile network environment in the IoV.

With ubiquitous computing and penetration of high-speed data networks, the Internet of Medical Things (IoMT) has found widespread application. Digital healthcare helps medical professionals monitor patients and provide services remotely. With the increased adoption of IoMT comes an increased risk profile. Private and confidential medical data is gathered across various IoMT devices and transmitted to medical servers. Privacy breach or unauthorized access to personal medical data has far-reaching consequences. However, heterogeneity, limited computational resources, and lack of standardization in authentication schemes prevent a robust IoMT security framework. This paper introduces a secure lightweight authentication and authorization scheme. The use of the Physical Unclonable Function (PUF) reduces pressure on computational resources and establishes the authenticity of the IoMT. The use of OAuth 2.0 open standard for authorization allows interoperability between different vendors. The resilience of the model to impersonation and replay attacks is analyzed.

Some evidence of adaptation to immersion in virtual reality

Objective: Surgical left atrial appendage (LAA) closure using epicardial clips has become popular in stroke prevention in patients with atrial fibrillation. Optimal placement of the clip is essential to achieve complete LAA occlusion and to prevent complications due to compression of the circumflex artery. We determine the added value of immersive virtual reality (VR) in accurately assessing LAA base size and selection of an appropriately sized clip. Methods: We studied the feasibility of measuring the LAA base using VR and conventional computed tomography (CT). A retrospective analysis was performed of LAA base measurements in 15 patients who had undergone thoracoscopic LAA clipping. Subsequently, we compared the placed clip size with imaging-acquired LAA base size to retrospectively evaluate intraprocedural sizing. Results: We successfully applied a VR platform to measure LAA base size. The median LAA base size measured in CT (23.8 mm, interquartile range [IQR] 22.3 to 26.4 mm) and intracardial virtual reality (23.4 mm, IQR 21.6 to 25.5 mm) did not differ significantly (P = 0.416). VR measurements of the LAA base in surgeon's view (25.7 mm, IQR 24.2 to 29.2) were significantly higher than those of 2-dimensional CT (P = 0.037) and intracardial 3-dimensional (3D) VR (P < 0.05) measurements. All measurements differed significantly with placed clip sizes (P < 0.05). There were no clip malpositioning-related events. Conclusions: Immersive VR is a feasible method for obtaining anatomical information on LAA base size. In this retrospective analysis, CT and VR-based measurements of LAA base size differed significantly from intraoperatively placed LAA clips, indicating potential oversizing when measured intraoperatively. Using intuitive 3D VR-based imaging might be a useful method to assist in accurate preprocedural sizing of LAA base and can potentially prevent oversizing.