Abstract: The identity authentication schemes in the traditional network environment are designed according to the characteristics of their own environments, which are difficult to meet the design requirements in the metaverse environment. In order to solve the problem of identity authentication in the metaverse environment, the characteristics, attributes, application scenarios and main attack threats faced by the metaverse are studied. The identity privacy and security risks related to users, avatars, platforms, wearable devices and communications in the metaverse are discussed. The work related to identity authentication in the metaverse environment is sorted out and categorized into user-avatar, user-platform and user-wearable device authentication. Finally, the research directions of identity authentication mechanism in the metaverse environment are discussed.

Key words: identity authentication, metaverse, identity information, identity privacy, security risk

摘要： 传统网络环境中的身份认证方案是按照自身环境的特点进行设计，难以满足元宇宙环境中的设计需求。为解决元宇宙环境中的身份认证问题，对元宇宙的特征、属性、应用场景特点和面临的主要攻击威胁进行了研究；对元宇宙中的用户、化身、平台、可穿戴设备以及通信相关的身份隐私和安全风险进行了讨论；梳理元宇宙环境下与身份认证相关的工作，并将其归纳为用户与化身、用户与平台服务器、用户与可穿戴设备的认证。最后，讨论了元宇宙环境下身份认证机制的研究方向。

关键词: 身份认证, 元宇宙, 身份信息, 身份隐私, 安全风险