kyosu-1/authx

認証認可・Digital Identity関連のまとめ

authx

認証認可・Digital Identity関連のまとめ

標準化団体

• IETF: https://www.ietf.org/
• OpenID Foundation: https://openid.net/foundation/
• NIST: https://www.nist.gov/
• W3C: https://www.w3.org/
• FIDO Alliance: https://fidoalliance.org/
• ISO: https://www.iso.org/home.html
• OASIS: https://www.oasis-open.org/

仕様一覧

• IETF RFC: https://www.ietf.org/standards/rfcs/
  • OAuth2.0：https://datatracker.ietf.org/doc/html/rfc6749
  • JSON Web Signature (JWS)：https://datatracker.ietf.org/doc/html/rfc7515
  • JSON Web Encryption (JWE)：https://datatracker.ietf.org/doc/html/rfc7516
  • JSON Web Key (JWK)：https://datatracker.ietf.org/doc/html/rfc7517
  • JSON Web Algorithms (JWA)：https://datatracker.ietf.org/doc/html/rfc7518
  • JSON Web Token (JWT)：https://datatracker.ietf.org/doc/html/rfc7519
  • JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants：https://datatracker.ietf.org/doc/html/rfc7523
  • OAuth 2.0 Token Introspection：https://datatracker.ietf.org/doc/html/rfc7662
• OIDF: https://openid.net/developers/specs/
  • https://openid.net/specs/openid-connect-core-1_0.html
  • https://openid.net/specs/openid-connect-discovery-1_0.html
  • https://openid.net/specs/openid-connect-registration-1_0.html
• NIST
  • Digital Identity Guidelines: https://pages.nist.gov/800-63-3/
    • draft: https://pages.nist.gov/800-63-4/
• FIDO Alliance
  • FIDO2: https://fidoalliance.org/fido2/
  • CTAP2: https://fidoalliance.org/specs/fido-v2.1-rd-20210309/fido-client-to-authenticator-protocol-v2.1-rd-20210309.html
• W3C
  • Web Authentication: https://www.w3.org/TR/webauthn/
• ISO
  • ISO/IEC 27001(Information security management): https://www.iso.org/standard/27001
• OASIS: https://wiki.oasis-open.org/security/FrontPage
  • SAML: https://docs.oasis-open.org/security/saml/Post2.0/sstc-saml-tech-overview-2.0.html
• IANA: https://www.iana.org/
  • OAuth Parameters: https://www.iana.org/assignments/oauth-parameters/oauth-parameters.xhtml
  • JSON Web Token Claims: https://www.iana.org/assignments/jwt/jwt.xhtml

その他

• 民間事業者向けデジタル本人確認ガイドライン: https://www.openid.or.jp/news/kyc_guideline_v1.0.pdf
• ritouさんblog: https://ritou.hatenablog.com/
• idm実験室(富士榮さん): https://idmlab.eidentity.jp/