Sender Constrained Token

From MgmtWiki
Revision as of 12:46, 18 December 2019 by Tom (talk | contribs)

Jump to: navigation, search

Full Title or Meme

A Sender Constrained Token can be considered to be a token there the Subject presenting the token can prove possession of some credential that is bound to the token.

Context

  • Bearer Tokens have proven to be susceptible to reuse by unauthorized parties.

Problems

  • Bearer Tokens have proven to be susceptible to reuse by unauthorized parties.

Solutions

  • Add a cryptographic binding between the token a some credential that is known to be in the secured possession of the Subject]

References