Administered authentication in artificial reality systems
An administered authentication system can authenticate an artificial reality device using an authorization record between a user account and an artificial reality device. In some implementations, the authorization record is created in response to activation of a user account-specific key sent to a user-supplied contact, where an artificial reality device identifier was provided with the user-supplied contact. In other implementations, the authorization record is created in response to activation of a user account-specific key provided to the artificial reality device as a code, where activation of the key includes adding an artificial reality device identifier to a key activation message. In yet other implementations, the authorization record is created in response to an application associated with a user account activating an artificial reality device-specific key, with an artificial reality device identifier, that is provided via the artificial reality device.
1. A method, by an authentication system, for administering authentication procedures for an artificial reality device, the method comprising:
triggering receipt, at a personal device of a user, a user-account specific key associated with a code, wherein:
the personal device causes a version of the code to be printed or displayed for an artificial reality device, and
the artificial reality device receives the code and activates the user-account specific key using the code and a device identifier of the artificial reality device;
receiving, at the authentication system, an indication of the user-account specific key activation;
in response to the activation, creating an authorization record between the user account and the artificial reality device; and
authenticating a user with the artificial reality device via the authorization record.
2. The method of claim 1 further comprising sending, to the artificial reality device, a confirmation that the user has been authenticated, wherein the artificial reality device, in response to the confirmation, allows the user access to features protected by the authentication.
3. The method of claim 1 , wherein the triggering receipt of the user-account specific key includes sending, to the personal user device, the user-account specific key via text message, email, instant message, or push notification.
4. The method of claim 1 , wherein the artificial reality device receives the code by capturing an image of the printed or displayed version of the code.
5. The method of claim 1 , wherein the artificial reality device receives the code by a user providing an input, to the artificial reality device, based on the printed or displayed version of the code.
6. The method of claim 1 , wherein the artificial reality device activates the user-account specific key in part by sending a network message to a default network location previously specified with the artificial reality device.
7. The method of claim 1 , wherein the user-account specific key includes a reference to a network location and the artificial reality device activates the user-account specific key in part by sending a network message to the network location referenced in the user-account specific key.
8. The method of claim 1 , wherein the personal device includes an application with which the user account has been authenticated and the triggering receipt of the user-account specific key at the personal device includes sending the user account-specific key to the application on the personal device.
9. The method of claim 1 , wherein the creating the authorization record includes performing one or more validations of the user-account specific key activation including one or more of checking user-account specific key signatures, performing user-account specific key decryption, or performing authorization level verification of the user.
10. The method of claim 1 ,
wherein the authorization record is created with a corresponding level of authentication; and
wherein the artificial reality device receives confirmation of the authenticating and, in response, allows the user access to features corresponding to the level of authentication; and
wherein the user is de-authenticated and restricted from the access to the features upon detecting that the user has removed the artificial reality device from the user's head.
11. A non-transitory computer-readable storage medium storing instructions that, when executed by a computing system, cause the computing system to perform a process, performed by an authentication system, for administering authentication procedures for an artificial reality device, the process comprising:
triggering receipt, at a personal device of a user, a user-account specific key associated with a code, wherein:
the personal device causes a version of the code to be provided to an artificial reality device, and
the artificial reality device receives the code and activates the user-account specific key using the code and a device identifier of the artificial reality device;
receiving, at the authentication system, an indication of the user-account specific key activation;
in response to the activation, creating an authorization record between the user account and the artificial reality device; and
authenticating a user with the artificial reality device via the authorization record.
12. The non-transitory computer-readable storage medium of claim 11 , wherein the process further comprises sending, to the artificial reality device, a confirmation that the user has been authenticated, wherein the artificial reality device, in response to the confirmation, allows the user access to features protected by the authentication.
13. The non-transitory computer-readable storage medium of claim 11 , wherein the triggering receipt of the user-account specific key includes sending, to the personal user device, the user-account specific key via text message, email, instant message, or push notification.
14. The non-transitory computer-readable storage medium of claim 11 , wherein the version of the code to be provided to the artificial reality device is printed or displayed by the personal device, and wherein the artificial reality device receives the code by capturing an image of the printed or displayed version of the code.
15. The non-transitory computer-readable storage medium of claim 11 , wherein the artificial reality device receives the code by a user providing an input, to the artificial reality device, based on the version of the code.
16. The non-transitory computer-readable storage medium of claim 11 , wherein the artificial reality device activates the user-account specific key in part by sending a network message to a default network location previously specified with the artificial reality device.
17. An authentication computing system, for administering authentication procedures for an artificial reality device, the authentication computing system comprising:
one or more processors; and
one or more memories storing instructions that, when executed by the one or more processors, cause the computing system to perform a process comprising:
triggering receipt, at a personal device of a user, a user-account specific key associated with a code, wherein:
the personal device causes a version of the code to be provided to an artificial reality device, and
the artificial reality device receives the code and activates the user-account specific key using the code and a device identifier;
receiving, at the authentication system, an indication of the user-account specific key activation;
in response to the activation, creating an authorization record between the user account and the artificial reality device; and
authenticating a user with the artificial reality device via the authorization record.
18. The authentication computing system of claim 17 , wherein the personal device includes an application with which the user account has been authenticated and the triggering receipt of the user-account specific key at the personal device includes sending the user account-specific key to the application on the personal device.
19. The authentication computing system of claim 17 , wherein the creating the authorization record includes performing one or more validations of the user-account specific key activation including one or more of checking user-account specific key signatures, performing user-account specific key decryption, or performing authorization level verification of the user.
20. The authentication computing system of claim 17 ,
wherein the authorization record is created with a corresponding level of authentication; and
wherein the artificial reality device receives confirmation of the authenticating and, in response, allows the user access to features corresponding to the level of authentication; and
wherein the user is de-authenticated and restricted from the access to the features upon detecting that the user has removed the artificial reality device from the user's head.