AUTHORIZATION-BASED RESOURCE ACCESS CONTROL SYSTEM, SECURE COMPONENT, DEVICE, AND AUTHORIZATION-BASED RESOURCE ACCESS CONTROL METHOD

To provide an authorization-based resource access control system, a secure component, a device, and an authorization-based resource access control method which allow an issued access token to be securely protected for a long period of time.SOLUTION: A device comprises a secure component in which tok...

Full description

Saved in:
Bibliographic Details
Main Author ASANO MASANORI
Format Patent
LanguageEnglish
Japanese
Published 28.10.2021
Subjects
CALCULATING
COMPUTING
COUNTING
ELECTRIC DIGITAL DATA PROCESSING
PHYSICS
Online AccessGet full text

Cover

More Information
Summary:To provide an authorization-based resource access control system, a secure component, a device, and an authorization-based resource access control method which allow an issued access token to be securely protected for a long period of time.SOLUTION: A device comprises a secure component in which token information issued by a prescribed server is stored, the token information being acquired by a client as a result of authorizing access to a resource by an authorization server. The client transmits the token information stored in the secure component to a resource server, and the resource server controls access to the resource from the client on the basis of a verification result of the token information.SELECTED DRAWING: Figure 1 【課題】発行されたアクセストークンを長期間にわたって安全に保護することができる認可に基づくリソースアクセス制御システム、セキュアなコンポーネント、デバイス及び認可に基づくリソースアクセス制御方法を提供する。【解決手段】デバイスは、認可サーバがリソースに対するアクセスを認可した結果、クライアントが取得する、所定のサーバが発行するトークン情報を記憶するセキュアなコンポーネントを備え、クライアントは、セキュアなコンポーネントに記憶したトークン情報をリソースサーバへ送信し、リソースサーバは、トークン情報の検証結果に基づいてクライアントのリソースへのアクセスを制御する。【選択図】図１
Bibliography:Application Number: JP20200072994