{"id":106602,"updated":"2025-01-21T09:23:27.002273+00:00","links":{},"created":"2025-01-18T23:49:58.685771+00:00","metadata":{"_oai":{"id":"oai:ipsj.ixsq.nii.ac.jp:00106602","sets":["6164:6165:6462:7729"]},"path":["7729"],"owner":"11","recid":"106602","title":["OAuth2.0にSPKI権限証明書を適用した権限委譲方式の提案と実装"],"pubdate":{"attribute_name":"公開日","attribute_value":"2014-10-15"},"_buckets":{"deposit":"f5f90ef3-da85-4922-b71d-2a38ac62948f"},"_deposit":{"id":"106602","pid":{"type":"depid","value":"106602","revision_id":0},"owners":[11],"status":"published","created_by":11},"item_title":"OAuth2.0にSPKI権限証明書を適用した権限委譲方式の提案と実装","author_link":["12953","12954","12949","12955","12948","12952","12946","12950","12951","12947"],"item_titles":{"attribute_name":"タイトル","attribute_value_mlt":[{"subitem_title":"OAuth2.0にSPKI権限証明書を適用した権限委譲方式の提案と実装"},{"subitem_title":"Delegation Mechanism of Access Authority Extended OAuth2.0 with SPKI Certificate","subitem_title_language":"en"}]},"item_keyword":{"attribute_name":"キーワード","attribute_value_mlt":[{"subitem_subject":"権限委譲,SPKI権限証明書,OAuth","subitem_subject_scheme":"Other"}]},"item_type_id":"18","publish_date":"2014-10-15","item_language":{"attribute_name":"言語","attribute_value_mlt":[{"subitem_language":"jpn"}]},"item_18_text_3":{"attribute_name":"著者所属","attribute_value_mlt":[{"subitem_text_value":"明治大学"},{"subitem_text_value":"明治大学大学院"},{"subitem_text_value":"明治大学大学院"},{"subitem_text_value":"明治大学大学院"},{"subitem_text_value":"明治大学大学院"}]},"item_18_text_4":{"attribute_name":"著者所属(英)","attribute_value_mlt":[{"subitem_text_value":"Meiji University","subitem_text_language":"en"},{"subitem_text_value":"Graduate School of Meiji University","subitem_text_language":"en"},{"subitem_text_value":"Graduate School of Meiji University","subitem_text_language":"en"},{"subitem_text_value":"Graduate School of Meiji University","subitem_text_language":"en"},{"subitem_text_value":"Graduate School of Meiji University","subitem_text_language":"en"}]},"item_publisher":{"attribute_name":"出版者","attribute_value_mlt":[{"subitem_publisher":"情報処理学会","subitem_publisher_language":"ja"}]},"publish_status":"0","weko_shared_id":-1,"item_file_price":{"attribute_name":"Billing file","attribute_type":"file","attribute_value_mlt":[{"url":{"url":"https://ipsj.ixsq.nii.ac.jp/record/106602/files/IPSJCSS2014079.pdf"},"date":[{"dateType":"Available","dateValue":"2016-10-15"}],"format":"application/pdf","billing":["billing_file"],"filename":"IPSJCSS2014079.pdf","filesize":[{"value":"394.2 kB"}],"mimetype":"application/pdf","priceinfo":[{"tax":["include_tax"],"price":"660","billingrole":"5"},{"tax":["include_tax"],"price":"330","billingrole":"6"},{"tax":["include_tax"],"price":"0","billingrole":"30"},{"tax":["include_tax"],"price":"0","billingrole":"46"},{"tax":["include_tax"],"price":"0","billingrole":"44"}],"accessrole":"open_date","version_id":"68883b11-e06e-4fff-887a-bc71c26c4570","displaytype":"detail","licensetype":"license_note","license_note":"Copyright (c) 2014 by the Information Processing Society of Japan"}]},"item_18_creator_5":{"attribute_name":"著者名","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"齋藤, 孝道"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"大丸, 雅人"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"西倉, 裕太"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"磯, 侑斗"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"渡邉, 貴文"}],"nameIdentifiers":[{}]}]},"item_18_creator_6":{"attribute_name":"著者名(英)","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"Takamichi, Saito","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Masato, Omaru","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Yuta, Nishikura","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Yuto, Iso","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Takafumi, Watanabe","creatorNameLang":"en"}],"nameIdentifiers":[{}]}]},"item_resource_type":{"attribute_name":"資源タイプ","attribute_value_mlt":[{"resourceuri":"http://purl.org/coar/resource_type/c_5794","resourcetype":"conference paper"}]},"item_18_description_7":{"attribute_name":"論文抄録","attribute_value_mlt":[{"subitem_description":"近年,Web APIの利用において,サーバ上で保護されたエンドユーザのリソースの権限委譲を,別のWebアプリケーションサーバに対して行うケースが増えている.このような権限委譲を実現する手段として,OAuthが利用されている.OAuthにより,エンドユーザのID・パスワードを,Webアプリケーションサーバに渡さずに権限委譲を行うことができる.しかし,RFC6819では,OAuthにおけるセキュリティ上の検討事項が多く挙げられている.そこで本論文では,RFC6819で指摘されている,認可コード及びアクセストークンに関する脅威への対策の一つとして, OAuth2.0にSPKI権限証明書を適用した権限委譲方式を提案する.","subitem_description_type":"Other"}]},"item_18_biblio_info_10":{"attribute_name":"書誌情報","attribute_value_mlt":[{"bibliographicPageEnd":"613","bibliographic_titles":[{"bibliographic_title":"コンピュータセキュリティシンポジウム2014論文集"}],"bibliographicPageStart":"606","bibliographicIssueDates":{"bibliographicIssueDate":"2014-10-15","bibliographicIssueDateType":"Issued"},"bibliographicIssueNumber":"2","bibliographicVolumeNumber":"2014"}]},"relation_version_is_last":true,"weko_creator_id":"11"}}