I-D Action: draft-maler-ace-oauth-uma-00.txt

internet-drafts@ietf.org Mon, 09 March 2015 19:36 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Subject: I-D Action: draft-maler-ace-oauth-uma-00.txt
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <20150309193653.25572.76398.idtracker@ietfa.amsl.com>
Date: Mon, 09 Mar 2015 12:36:53 -0700
Archived-At: <http://mailarchive.ietf.org/arch/msg/i-d-announce/Sg2FF41bSiv0KdMwdDO4I9_g4bU>
Reply-To: internet-drafts@ietf.org

A New Internet-Draft is available from the on-line Internet-Drafts directories.


        Title           : Authentication and Authorization for Constrained Environments Using OAuth and UMA
        Authors         : Hannes Tschofenig
                          Eve Maler
                          Erik Wahlstroem
                          Samuel Erdtman
	Filename        : draft-maler-ace-oauth-uma-00.txt
	Pages           : 22
	Date            : 2015-03-09

Abstract:
   Authentication and authorization are fundamental security features
   used in Internet and Web applications.  Providing the same level of
   security functionality to the Internet of Things (IoT) environment as
   well is a logical enhancement and reduces the risk of unauthorized
   access to personal data.

   IoT devices, however, have limitations in terms of processing power,
   memory, user interface, Internet connectivity, etc.  Since many use
   cases span Web and IoT environments and the question of "Web" vs.
   "IoT" can in some cases be considered a continuum, it is required to
   find security solutions that can accommodate the capabilities and
   constraints of both environments without significant compromises.

   Thus, an approach of adapting already standardized and deployed
   authentication and authorization technologies is worth examining.
   This document describes how the Web Authorization Protocol (OAuth) in
   combination with User-Managed Access (UMA) can be used for an IoT
   environment to bring Web-scale authorization services to the IoT
   world.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-maler-ace-oauth-uma/

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-maler-ace-oauth-uma-00


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

I-D Action: draft-maler-ace-oauth-uma-00.txt internet-drafts