Abstract:OAuth dynamic client registration protocol (ODCRP) is designed to implement the dynamic registration process between a third-party site and an authorization server (AS). When a third-party site has completed the registration on an AS, a user can authorize the third-party site by the AS to access the protected resource on a resource server. After the user has completed the authorization, the AS redirects the user to a designated site based on the registration information. However, if an AS was attacked by an attacker after completed the register, the attacker may modify or forge registration information, then a user may be redirected to a malicious site.To solve the problem above, we propose a verified secure protocol model of OAuth dynamic client registration (VSPM ODCR) which can be used to ensure the security of the registration information. Our approach is to separate the registration function from the AS by introducing a security registry center. All the sensitive parameters about the registration process will be protected by the security registry center. The protected registration information is designed to be verifiable. That is, at the time of authorization, the AS provides the registration information of the third-party site to be verified by the user. As a result, the AS attacked by an attacker can not complete the authorization function without the help of the security registration center. To prove the reliability of the model, we give an abstract formal description of the model, and a formal definition of the security properties needed to be satisfied. At last, we verify the authenticity property and the integrity of the registration information about two concrete configurations in model by ProVerif.

Method of Resource Authentication Adapting for WoT Architecture

Design and Implementation of Multi-Role Logon Authentication Based on Tokencard System

A Lightweight Three-Factor User Authentication Protocol for the Information Perception of IoT

An Efficient and DoS-resistant User Authentication Scheme for Two-Tiered Wireless Sensor Networks

A secure and efficient user authentication protocol for two-tiered wireless sensor networks

MultiAuth: Enable Multi-User Authentication with Single Commodity WiFi Device

Toward Multi-User Authentication Using WiFi Signals

The Achilles heel of OAuth: a multi-platform study of OAuth-based authentication.

Mitigating CSRF attacks on OAuth 2.0 and OpenID Connect

Security Analysis of OAuth 2.0 Implementation

Vulnerability Assessment of OAuth Implementations in Android Applications

A Verified Secure Protocol Model of OAuth Dynamic Client Registration

OAuthGuard: Protecting User Security and Privacy with OAuth 2.0 and OpenID Connect

A task-oriented access control model for WfMS

Design and Realization for More Flexible Authentication Authorization System

Decentralized Authorization and Authentication Based on Consortium Blockchain.

A Robust Authentication Protocol With Privacy Protection For Wireless Sensor Networks

Simple But Not Secure : An Empirical Security Analysis of OAuth 2 . 0-Based Single Sign-On Systems

An Authentication Technique Based on Oauth 2.0 Protocol for Internet of Things (IoT) Network

Unified Singular Protocol Flow for OAuth (USPFO) Ecosystem

Identity of Shibboleth-based multi-resource on online experimental platform