ここで話したスライド。 https://openid.doorkeeper.jp/events/29487

1. ID
Nov Matake

2. NOV MATAKE
• Security Engineer, GREE Inc.
• Evangelist, OpenID Foundation
Japan
• Interested in..
• Digital Identity
• Privacy
• Security

4. ENTITY & IDENTITY
• EXGEN Networks
• ID&IT 2015
• OIDF EIWG
• 185 cm
• 50 ( )
•
•

5. Entity ( )
Identity ( )
1 Entity Identity
Identity

6. AUTHENTICATION
Entity
Identity

7. AUTHENTICATION
OK

8. AUTHORIZATION
20

9. ACCESS CONTROL
Authentication
+
Authorization
+
Audit (logging)

10. IDENTITY PROOFING
Identity ( )

11. IDENTITY PROOFING
SMS

12. IDENTITY PROOFING

13. IDENTITY PROOFING
Identity Proofing
“ ”
proof

15. ID ?

17. • Facebook
• Facebook Disqus
• Disqus
• Facebook? ?
• Disqus Facebook
• Entity <=> Facebook Identity <=> Disqus Identity
• Entity <=> Disqus Identity

18. • Facebook
• UID 12345 Disqus 19:15
• Disqus
• Facebook
•
•
• Facebook UID 12345 @nov

19. • Facebook Disqus
• Disqus
• Email
• Authorization
• ( , , etc.)
• Disqus

20. ID = +

21. • IDP : Identity Provider
• +
• Facebook
• RP : Relying Party
• + IdP /
• Disqus

22. ID

23. CVR
•
•
• IdP

24. • RP
• ID
• 100 Services => 100 Passwords
• ID
• IdP x 1 + RP x 99 => 1 Password
•

25. –Eric Sachs, Google
“
100
”

26. PROOFED ATTRIBUTES
(SMS / Call)
:

27. ID

28. ?
• IdP RP ?
• nickname ?
• Authorization ?
• ? ?
• ID

29. RP
• OAuth 1.0 / OAuth 2.0 / OpenID Connect IdP
• OAuth 1.0/2.0 IdP
• Server-Side App Native App Native App
Backend JS App
•