User privacy in extended reality
Anonymous access may be provided using an authorization gateway. Anonymous access reuses objects in different extended reality environments rather than having each object be restricted to a single environment. Anonymous access increases privacy when using different environments. The user and the extended reality server communicate via an authorization gateway, preventing the extended reality server from directly gathering user information. A token issuing authority may issue tokens in response to payment and forward the payment to an extended reality provider. The user pays the token issuing authority and receives a token that does not identify the user. The token issuing authority forwards the payment to the extended reality provider. The user provides the token to the authorization gateway, which communicates with the extended reality server to provide the extended reality environment to the user. Thus, the user's payment is verified by the authorization gateway without specifically identifying the user.
1 . A system comprising:
a memory that stores instructions; and
one or more processors configured by the instructions to perform operations comprising:
receiving, from a first extended reality server for a first extended reality environment, a request to authorize a user to interact with an asset, wherein the request to authorize the user comprises a first identifier of the user in the first extended reality environment;
determining a second identifier of the user based on the first identifier of the user;
determining, by accessing a database, that the user has been granted access to the asset from an asset store of a second extended reality environment by forming a query that comprises the second identifier of the user; and
based on the determination, responding to the request with a response that indicates that the user is authorized to interact with the asset.
2 . The system of claim 1 , wherein the operations further comprise:
receiving, from the first extended reality server, a request for the second identifier of the user; and
based on a stored preference of the user, denying the request for the second identifier of the user.
3 . The system of claim 1 , wherein:
the second identifier of the user is an identifier of the user in the second extended reality environment.
4 . The system of claim 3 , wherein the operations further comprise:
receiving, from a server of the asset store of the second extended reality environment, a request for payment for the grant of access to the asset, the request comprising the second identifier of the user in the second extended reality environment;
determining, by accessing a second database and based on the second identifier, a third identifier of the user for a financial server; and
sending a request to the financial server for a transfer of funds from the user to the asset store of the second extended reality environment, the request comprising the third identifier of the user.
5 . The system of claim 4 , wherein the operations further comprise:
receiving, from the server of the asset store of the second extended reality environment, a request for the third identifier of the user; and
based on a stored preference of the user, denying the request for the third identifier of the user.
6 . The system of claim 1 , wherein the operations further comprise:
receiving a first request from the user to access the first extended reality environment, the request comprising the second identifier;
identifying, based on the second identifier, the first identifier; and
sending, on behalf of the user, a second request to the first extended reality server of the first extended reality environment, the second request comprising the first identifier.
7 . A method comprising:
receiving, by an authorization gateway and from a first extended reality server for a first extended reality environment, a request to authorize a user to interact with an asset, wherein the request to authorize the user comprises a first identifier of the user in the first extended reality environment;
determining a second identifier of the user based on the first identifier of the user;
determining, by accessing a database, that the user has been granted access to the asset by an asset store of a second extended reality environment by forming a query that comprises the second identifier of the user; and
based on the determination, responding, by the authorization gateway, to the request with a response that indicates that the user is authorized to interact with the asset.
8 . The method of claim 7 , further comprising:
receiving, by the authorization gateway and from the first extended reality server, a request for the second identifier of the user; and
based on a stored preference of the user, denying, by the authorization gateway, the request for the second identifier of the user.
9 . The method of claim 7 , wherein:
the second identifier of the user is an identifier of the user in the second extended reality environment.
10 . The method of claim 9 , further comprising:
receiving, from a server of the asset store of the second extended reality environment, a request for payment for the grant of access to interact with the asset, the request comprising the second identifier of the user in the second extended reality environment;
determining, by accessing a second database and based on the second identifier, a third identifier of the user for a financial server; and
sending a request to the financial server for a transfer of funds from the user to the asset store of the second extended reality environment, the request comprising the third identifier of the user.
11 . The method of claim 10 , further comprising:
receiving, from the server of the asset store of the second extended reality environment, a request for the third identifier of the user; and
based on a stored preference of the user, denying the request for the third identifier of the user.
12 . The method of claim 7 , further comprising:
receiving a first request from the user to access the first extended reality environment, the request comprising the second identifier;
identifying, based on the second identifier, the first identifier; and
sending, on behalf of the user, a second request to the first extended reality server of the first extended reality environment, the second request comprising the first identifier.
13 . A non-transitory machine-readable medium that stores instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:
receiving, from a first extended reality server for a first extended reality environment, a request to authorize a user to interact with an asset, wherein the request to authorize the user comprises a first identifier of the user in the first extended reality environment;
determining a second identifier of the user based on the first identifier of the user;
determining, by accessing a database, that the user has been granted access to the asset from an asset store of a second extended reality environment by forming a query that comprises the second identifier of the user; and
based on the determination, responding to the request with a response that indicates that the user is authorized to interact with the asset.
14 . The non-transitory machine-readable medium of claim 13 , wherein the operations further comprise:
receiving, from the first extended reality server, a request for the second identifier of the user; and
based on a stored preference of the user, denying the request for the second identifier of the user.
15 . The non-transitory machine-readable medium of claim 13 , wherein:
the second identifier of the user is an identifier of the user in the second extended reality environment.
16 . The non-transitory machine-readable medium of claim 15 , wherein the operations further comprise:
receiving, from a server of the asset store of the second extended reality environment, a request for payment for the grant of access to interact with the asset, the request comprising the second identifier of the user in the second extended reality environment;
determining, by accessing a second database and based on the second identifier, a third identifier of the user for a financial server; and
sending a request to the financial server for a transfer of funds from the user to the asset store of the second extended reality environment, the request comprising the third identifier of the user.
17 . The non-transitory machine-readable medium of claim 16 , wherein the operations further comprise:
receiving, from the server of the asset store of the second extended reality environment, a request for the third identifier of the user; and
based on a stored preference of the user, denying the request for the third identifier of the user.
18 . The non-transitory machine-readable medium of claim 13 , wherein the operations further comprise:
receiving a first request from the user to access the first extended reality environment, the first request comprising the second identifier;
identifying, based on the second identifier, the first identifier; and
sending, on behalf of the user, a second request to the first extended reality server of the first extended reality environment, the second request comprising the first identifier.