tag: OAuth

Events identity IT OAuth Security

We will be appearing at API Days Paris with a talk entitled "Financial Grade OAuth and OpenID Connect"

Nat 2016-11-29 No Comments

API Days 1200, a conference with 2016 participants, will be held on December 12th and 13th at Tapis Rouge in Paris. The catchphrase is "API automation for IT, business, and society as a whole." I was at the "WORKSHOP CA" in the afternoon of the first day to give a talk on "Operation..."

Further display We will be appearing at API Days Paris with a talk entitled "Financial Grade OAuth and OpenID Connect"
Events identity JICS

Beyond silos, connecting. Japan's first Identity Summit brings together industry, government and academia - JICS2013

Nat 2013-02-19 Comment

Connecting beyond silos. The first identity summit in Japan, bringing together industry, government and academia, "Japan Identity & Cloud Summit 2013" will be held on March 3th and 4th at the Hitotsubashi University Academic Center in Tokyo. As one of the program committee members, I have been involved in creating the program for the past few months.

Further display Beyond silos, connecting. Japan's first Identity Summit brings together industry, government and academia - JICS2013
identity OpenID Security Your Privacy

Using plain OAuth 2.0 for authentication would create a security hole big enough to drive a car through.

Nat 2012-02-02 17 Comments

A good article by John Bradley [2.0] about how using OAuth 1's implicit grant flow for authentication opens a huge security hole big enough for a car to drive through. The comments are also worth reading. I checked it out and it was a complete disaster. I need to fix the RP side, so...

Further display Using plain OAuth 2.0 for authentication would create a security hole big enough to drive a car through.
Use code conversion to link different "numbers" as needed
identity Politics

Is the information sharing infrastructure of the "number" system complex?

Nat 2011-08-24 No Comments

In the context of the national ID system, the "number" system (sometimes mistakenly called the common number system), there is a system infrastructure called the "information sharing infrastructure." The orange box in the diagram below (from the interim report of the Cabinet Secretariat's Information Sharing Infrastructure Technology Working Group) is this. It seems that this part is the "information sharing infrastructure" that has been...

Further display Is the information sharing infrastructure of the "number" system complex?
identity

Twitter to automatically delete DM access for apps

Nat 2011-05-19 No Comments

According to an article in TechCrunch, Twitter is finally getting serious about elaborating on OAuth access permissions. According to this, the consent screen will be changed from the previous extremely simple one to the detailed one shown below, and DM access will be automatically granted from apps that do not require it.

Further display Twitter to automatically delete DM access for apps