Internet-Draft draft-ietf-ace-group-oscore-profile-05.txt is now available. It
is a work item of the Authentication and Authorization for Constrained
Environments (ACE) WG of the IETF.
Title: The Group Object Security for Constrained RESTful Environments
(Group OSCORE) Profile of the Authentication and Authorization for Constrained
Environments (ACE) Framework
Authors: Marco Tiloca
Rikard Höglund
Francesca Palombini
Name: draft-ietf-ace-group-oscore-profile-05.txt
Pages: 56
Dates: 2025-09-03
Abstract:
This document specifies a profile for the Authentication and
Authorization for Constrained Environments (ACE) framework. The
profile uses Group Object Security for Constrained RESTful
Environments (Group OSCORE) to provide communication security between
a client and one or multiple resource servers that are members of an
OSCORE group. The profile securely binds an OAuth 2.0 access token
to the public key of the client associated with the private key used
by that client in the OSCORE group. The profile uses Group OSCORE to
achieve server authentication and proof of possession of the client's
private key. Also, it provides proof of the client's membership to
the OSCORE group by binding the access token to information from the
Group OSCORE Security Context, thus allowing the resource server(s)
to verify the client's membership upon receiving a message protected
with Group OSCORE from the client. Effectively, the profile enables
fine-grained access control paired with secure group communication,
in accordance with the Zero Trust principles.
The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-ace-group-oscore-profile/
There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-ace-group-oscore-profile-05.html
A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-ace-group-oscore-profile-05
Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts
_______________________________________________
Ace mailing list -- [email protected]
To unsubscribe send an email to [email protected]
