Region access authorization in a virtual environment

[0001] Commonly owned U.S. patent applications Ser. No. 12/208,515, entitled “USER CREDENTIAL VERIFICATION INDICATION IN A VIRTUAL UNIVERSE”, filed on Sep. 11, 2008; Ser. No. 12/198,145, entitled “SOFTWARE SCAN TRIGGERS FOR PROTECTION OF VIRTUAL ENVIRONMENTS”, filed on Aug. 26, 2008; 12/548,462, entitled “SOFTWARE SCAN TRIGGERS FOR PROTECTION OF VIRTUAL ENVIRONMENTS”; and Ser. No. 12/114,228, entitled “VIRTUAL WORLD TELEPORTATION”, filed on May 2, 2008, contain subject matter related, in certain aspects, to the subject matter of the present application. The above-identified patent applications are incorporated herein by reference.

[0002] The present invention is generally directed to virtual universes (VU). More particularly, the present invention is directed to the identification of avatars in a Virtual Universe (VU) and their authorization to perform certain acts, particularly the entry into or exit from regions in the virtual universe. The present invention is therefore seen to describe a method by which avatars are identified and authorized to move between regions.

[0003] A virtual world or virtual universe, sometimes designated by the acronym VU, is a computer based, simulated environment intended for its users to inhabit and to interact with one another therein via avatars. This habitation usually is represented in the form of two or three-dimensional graphical representations of humanoids (or other graphical or text-based avatars). Some, but not all, virtual worlds allow for multiple users. Many VUs are represented using 3-D graphics and landscapes, and are populated by many thousands of users, known as “residents.” Other terms for a VU include metaverse and “3D Internet.”

[0004] The world being simulated typically appears similar to the real world, with real world rules such as gravity, topography, locomotion, real-time actions, and communication. This type of virtual world is now most commonly found in massively multiplayer, on-line games (Second Life®, Entropia Universe®, The Sims Online™,), particularly massively multiplayer on-line role-playing games such as EverQuest®, Ultima On-line, Lineage™, World of Warcraft®, or Guild Wars™.

[0005] Avatars in virtual worlds have a wide range of business and social experiences, and such experiences are becoming more important since business and social transactions are becoming common in virtual worlds such as Second Life. In fact, the characteristics of an Avatar play important social, business, and other related roles in virtual worlds, such as Second Life®. Second Life® is a privately owned 3-D virtual world, made publicly available in 2003 by Linden Lab. The Second Life virtual world is computed and managed by a large array of servers that are owned and maintained by Linden Lab. The Second Life® client program provides its users (referred to as residents) with tools to view, navigate, and modify the Second Life® world and participate in its virtual economy. Social and business interactions are important in Second Life®, and these interactions include resident interactions in both personal and business meetings.

[0006] It should not be assumed that the utility of virtual worlds is limited to game playing, although that is certainly seen to be useful and valuable insofar as it has become a real economic reality with real dollars being exchanged. However, the usefulness of virtual worlds also includes the opportunity to run corporate conferences and seminars. It is also used to conduct virtual world classroom sessions. Governmental and instructional opportunities abound in the virtual world. Accordingly, it should be fully appreciated that the term “virtual” as applied to this technology does not in any way make it less real or less valuable than the “real” world. It is really an extension of current reality. Moreover, it is an extension that greatly facilitates human communication and interaction in a non-face-to-face fashion.

[0007] The present invention captures the behavior of the user as well as the credentials (password, certificates, biometrics, and so forth) used during the authentication process and the computing session. This is useful in a virtual universe environment because an avatar can readily change regions via a link or teleportation, and no behavior records are captured in any subsequent region visited. The captured behavior patterns (collections of historical attributes) enable each region to make determinations regarding an entering avatar for such things as past criminal, financial, and unethical activities.

[0008] In accordance with one embodiment of the present invention, there is provided a method for regulating crossing of region borders by avatars in a virtual universe. The method comprises the steps of: providing the avatar with a public key pair of indicia for secure communication with a regional authority that is associated with the region; storing, with a trusted third party, a persona, protected with said public key pair, the persona being associated with the avatar; and authorizing access to the region, or to another region, by the avatar.

[0009] Further, in accordance with one embodiment of the present invention, there is provided a method for deploying a system for controlling crossing of region borders by avatars in a virtual universe environment. The method includes, for instance: providing a computer infrastructure operable to provide the avatar with a public key pair of indicia for secure communication with an authority associated with the region and for secure communication with a trusted third party; store, with the trusted third party, a persona, protected with the public key pair, the persona being associated with the avatar; and determine permission, to cross a boundary of said region, or of another region, for said avatar, by the authority subsequent to the authority confirming validity of the persona with the trusted third party, using the public key pair.

[0010] Yet further, in accordance with one embodiment of the present invention, there is provided a computer readable medium which includes program instructions for controlling crossing of region borders by avatars in a virtual universe environment. The instructions implement a method, including, for instance: providing the avatar with a public key pair of indicia for secure communication with an authority associated with the region and for secure communication with a trusted third party; storing, with the trusted third party, a persona, protected with the public key pair, the persona being associated with said avatar; and determining permission, to cross a boundary of the region, or of another region, for the avatar, by the authority subsequent to the authority confirming validity of said persona with the trusted third party, using the public key pair.

[0011] Yet further, in accordance with one embodiment of the present invention, there is provided a data processing system whose memory includes program instructions for controlling crossing of region borders by avatars in a virtual universe environment. The instructions implement a method, including, for instance: providing the avatar with a public key pair of indicia for secure communication with an authority associated with the region and for secure communication with a trusted third party; storing, with the trusted third party, a persona, protected with the public key pair, the persona being associated with said avatar; and determining permission, to cross a boundary of the region, or of another region, for the avatar, by the authority subsequent to the authority confirming validity of said persona with the trusted third party, using the public key pair.

[0012] Avatars provide a Region Authority with a URL that contains the avatars' credentials and personal data. This data is validated by the Regional Authority using Public Cryptography (Public and Private Keys) which are held by a trusted third party.

[0013] Additional features and advantages are realized through the techniques of the present invention. Other embodiments and aspects of the invention are described in detail herein and are considered a part of the claimed invention.

[0014] The recitation herein of desirable objects which are met by various embodiments of the present invention is not meant to imply or suggest that any or all of these objects are present as essential features, either individually or collectively, in the most general embodiment of the present invention or in any of its more specific embodiments.

[0020] One mechanism for authenticating a user to machine is by a handshake between both parties. This handshake is a form of 1 to N form factors for identifying the user to the machine. A form factor is considered a type of knowledge that a user presents to the authenticating party. Some examples of form factors include the following: (1) a password, which is a single form factor; (2) a token that generates a onetime password; and (3) a token, biometric, and private key to process a protocol (SSL v3, for example), this being a three form factor. This process is repeated over and over, with no retention of knowledge from any previous sessions. These mechanisms are, however, region specific and do not account for an avatar's ability to cross the borders of a region.

[0021] In order to better understand the present invention and the advantages that it produces, it is useful to provide descriptions of some of the VU concepts and terms that are encountered. The list below is exemplary and is not intended to be all inclusive.

• • [0022] Avatar: An Internet user's representation of himself or herself, whether in the form of a three-dimensional model used in computer games or in the form of a program agent.
  • [0023] Persona Profile: A collection of attributes that describe an Avatars' characteristics, buying habits, behaviors, et cetera.
  • [0024] Region Authority: A regional gatekeeper that regulates access of Avatars to one or more regions.
  • [0025] Trusted Third Party: An entity which facilitates interactions between two parties both of whom trust the third party; they use this trust to secure their own interactions.
  • [0026] Services Provider: Provides the Internet connectivity to Avatars in a virtual world.
  • [0027] Certificate Authority: A signing authority, once a Registration Authority (or other entity which essentially performs functions of identity verification, much like those which might be performed by a Notary Public) ensures the identity of an individual or machine. The CA creates a certificate of authenticity using a Public key.
  • [0028] Light Weight Directory Access Protocol (LDAP): A protocol to query and modify entries in a directory like X500, which supports millions of entries. The Directory is used to store the Public keys and/or a Certificate of Authority.

[0029] Note too that, throughout this disclosure, for clarity of presentation only, reference is made to an individual or avatar, which is a digital representative of the individual. However, it should be noted that this term not only applies to an individual, but to any computerized processes that may execute on behalf of the individual, using the same credentials and capabilities of the individual that owns/regulates the process. In general, this embodies many forms, such as prescheduled, automatically running maintenance processes, system level processes (owned by the system administrator), etc. In all cases, this process is treated like an avatar, with the same inputs and outputs, regardless of whether the credentials come directly from an individual or from a computerized process acting in his or her stead.

[0030] An important aspect of the present invention is the use of a Public Key Infrastructure (PKI) as the underpinning for how Avatars, Avatars' Persona Profiles, (APP), Region Authorities (RA), and Trusted Third Parties (TTP) are associated and to provide trusted exchanges. The present invention exploits the art of PKI by adding the ability to authorize a transfer between regions based not only on credentials, but also on the profile of the avatar that contains detailed history of past actions, violations, inventory held et cetera. For example, an avatar may have, at one time in the past

• • [0031] Held an item, or had in inventory, something illegal such as fake money, pornography et cetera.
  • [0032] Visited a virtual place that is not authorized by the region to be teleported to (such as a “virtual” Cuba or North Korea).
  • [0033] Spoken to another avatar which is not authorized by the region to which the avatar is to be teleported (such as a known hacker avatar or some other unscrupulous character).
  • [0034] Violated a behavior rule such as disorderly conduct, violent behavior, aggressive behavior.

[0035] This information is stored in the avatar's persona and is used as a final check to authorize a movement into or out of a region in the virtual world. It should be noted that this invention can be used to authorize exit from a region as well as entry. For example, when leaving a virtual museum, the avatar cannot be holding any object that is the property of the museum.

[0036] In the present invention, the PKI does not need to be under a single Certificate Authority, (CA) since CA's can be cross certified so that distributed regions can define and manage their own policies. Each entity (Avatar, Region Authority, Service Provider and Trusted Third Party) is required to obtain a Public key pair under a CA. The Public key Certificate is then published in the CA's user certificate directory (for example, an LDAP directory). The CA may be different for each of the entities stated above, or it could be the same, in which case communication and sharing of information is quicker within the same trust chain. The PKI is the basis of how each of the entities trust each other when credentials are shared between the parties or when a document is signed. A digital signature is a non-repudiated binding on data. This creates the trust model between entities.

[0037] Given this background, the Trusted Third Parties are usually located and serviced closest to the Avatar's home location (that is, the starting point for each session in a virtual world environment). In a distributed architecture, this means that the TTPs might be accessible near an ISP node where load balancing is optimized for workloads. The TTPs store an Avatar's Persona Profile, and sections of the profile are signed and/or encrypted by the Avatar's private key. Other sections of the profile are updated by the RA with a time-stamp/signature on the inserted or modified entry. The TTP also runs virus scans on the profile to ensure that no malicious code is attached to the profile during an update or modify operation. The above describes how the Avatar's data is stored in a Trusted entity and how only authorized entities can obtain the data to view or to append to it. This means that no one can alter the Avatar's profiles without a trail of when it was changed and by whom.

[0038] The RA needs credentials, to authenticate to the TTP, that the Avatar provides to the RA when first authenticating into the region. The RA has the choice to pull a copy of the APP from the TTP once the Avatar has provide the RA with a signed and time stamped document stating what can be viewed and obtained, or the RA can view and modify the APP at the TTP site. In a preferred embodiment, only one RA has access to the APP at a time for updating the profile. If the avatar is to clone or spawn off itself, each RA performs the above steps. The above describes different mechanisms for how the RA can obtain the avatar's profile, so that allowable information can be provided to the RA. This regulates the privacy of the avatar when transporting into regions.

[0039] FIG. 1 illustrates the transactions that occur between avatar 100, Region Authority 110, and Trusted Third Party 120 which has access to the avatar's persona profile database 130. In transaction 200, the avatar logs into a region and provides a URL address for the Trusted Third Party. The avatar also signs a document for Region Authority 110 and for Trusted Third Party 120. In transaction 220, avatar 100 creates a persona profile which is digitally signed and stored (transaction 230) in database 130 by Trusted Third Party 120. Attention is now focused on transaction stream 210 which occurs between Region Authority 110 and Trusted Third Party 120. In particular, Region Authority 110 logs into Trusted Third Party 120 and provides this party with the signed document. Trusted Third Party 120 obtains the profile from database 130 and sends it back to the Region Authority 110. Region Authority 110 checks the behavior patterns of the avatar and/or other persona characteristics. If Region Authority 110 approves, the avatar is allowed into the region. Once the avatar leaves the Region Authority's region, Region Authority 110 signs an updated section of the document. Region Authority 110 then logs into Trusted Third Party 120 and provides that party with an update.

[0040] When an avatar transfers from one region to another, the present method is employed to determine whether there is any information pertaining to the person that should be used to deny access to the region. An expired profile, a region that should not have been visited in the past, or other information may cause entry into the target region to be denied. The persona profile provides this check in the virtual world. Because the profile contains past behavior information, inventory information, last places visited, et cetera, an inspection of the persona profile is used to grant or deny access. The following determiners may be used to deny access to an Avatar:

• • [0041] Inventory information may show that the avatar is carrying something that is not allowed. For example, malicious software. (This is achieved by either scanning the avatar's inventory in real time, or looking up the inventory stored in the avatar's persona profile to see if the inventory comprises something unauthorized)
  • [0042] The Avatar's behavioral history, particularly if it is improper in some sense as defined for the region or the virtual universe, may alert the regional authority to revoke permission to enter, or to increase sensors around the avatar as a proactive approach to protect against potential problems. The avatar may also be required to provide a security toll or to place one or more inventory items with another to be held as security.
  • [0043] Past conversational information may show that the avatar poses a threat, for example, due to having had a conversation with a known hacker or other category of forbidden avatar.
  • [0044] The avatar may not conform to a required visual format (only human forms permitted).
  • [0045] Based on any or all of this information, the avatar is granted or denied access by the Regional Authority.

[0046] In yet another embodiment, the present invention provides a business method that performs the process steps of the invention on a subscription, advertising, and/or fee basis. That is, a service provider, such as a Solution Integrator, offers to provide both manual and automatic regulating over the crossing of region borders by avatars in a virtual universe. In this case, the service provider creates, maintains, supports, et cetera, a computer infrastructure that performs the process steps of the invention for one or more customers. In return, the service provider receives payment from the customer(s) under a subscription and/or fee agreement and/or the service provider receives payment from the sale of advertising content to one or more third parties.

[0047] In summary, as virtual worlds become increasing popular for both business and pleasure, and users access multiple virtual worlds, it is highly desirable that regulates such as those described in the present invention are implemented.

[0048] In any event an end user environment in which the present invention operates is shown in FIG. 2. The present invention operates through a data processing environment which effectively includes one or more of the computer elements shown in FIG. 2. While FIG. 2 is more suited for illustrating an end user environment, it is noted that a similar, albeit typically much larger, data processing system is connected via the Internet to the local environment depicted. In particular, a similar non-volatile memory 340 is typically present at the server end to contain program instructions for carrying out the virtual reality program which are loaded into a corresponding main memory 310 for execution. Turning to a local focus, computer 300 includes central processing unit (CPU) 320 which accesses programs and data stored within random access memory 310. Memory 310 is typically volatile in nature and accordingly such systems are provided with nonvolatile memory typically in the form of rotatable magnetic memory 340. While memory 340 is preferably a nonvolatile magnetic device, other media may be employed. CPU 330 communicates with users at consoles such as terminal 350 through Input/Output unit 330. Terminal 350 also typically includes drive or port 360 for the reading and writing of removable media. Terminal 350 is typically one of many, if not thousands, of consoles in communication with computer 300 through one or more I/O unit 330. In particular, console unit 350 is shown as having included therein a device for reading medium of one or more types such as CD-ROM 500 shown in FIG. 3. Media 500, an example of which is shown in FIG. 3, comprises any convenient device including, but not limited to, magnetic media, optical storage devices and chips such as flash memory devices or so-called thumb drives. Disk 500 also represents a more generic distribution medium in the form of electrical signals used to transmit data bits which represent codes for the instructions discussed herein. While such transmitted signals may be ephemeral in nature they still, nonetheless constitute a physical medium carrying the coded instruction bits and are intended for permanent capture at the signal's destination or destinations.

[0049] FIG. 4 illustrates the principle steps associated with the practice of the present invention. In particular, in step 410, an avatar is provided with a public key pair of indicia for secure communication with an authority associated with the avatar's region and for secure communication with a trusted third party. In step 420, a persona associated with the avatar, and protected with the public key pair, is store with the trusted third party. In step 430, permission, to cross a boundary of the region, or of another region for the avatar, is determined by the authority subsequent to the authority confirming validity of the persona with the trusted third party, using the public key pair.

[0050] While the invention has been described in detail herein in accordance with certain preferred embodiments thereof, many modifications and changes therein may be effected by those skilled in the art. Accordingly, it is intended by the appended claims to cover all such modifications and changes as fall within the spirit and scope of the invention.