{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,25]],"date-time":"2025-03-25T15:40:47Z","timestamp":1742917247529,"version":"3.40.3"},"publisher-location":"Cham","reference-count":19,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783031651748"},{"type":"electronic","value":"9783031651755"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-3-031-65175-5_12","type":"book-chapter","created":{"date-parts":[[2024,7,25]],"date-time":"2024-07-25T14:43:01Z","timestamp":1721918581000},"page":"162-176","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Putting Authorization Servers on\u00a0User-Owned Devices in\u00a0User-Managed Access"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9191-7276","authenticated-orcid":false,"given":"Masato","family":"Hirai","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4305-8379","authenticated-orcid":false,"given":"Daisuke","family":"Kotani","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0825-2256","authenticated-orcid":false,"given":"Yasuo","family":"Okabe","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,7,26]]},"reference":[{"key":"12_CR1","doi-asserted-by":"crossref","unstructured":"Bertocci, V.: JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens. RFC 9068 (2021)","DOI":"10.17487\/RFC9068"},{"issue":"1","key":"12_CR2","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3301285","volume":"52","author":"P Bhat","year":"2019","unstructured":"Bhat, P., Dutta, K.: A survey on various threats and current state of security in android platform. ACM Comput. Surv. (CSUR) 52(1), 1\u201335 (2019)","journal-title":"ACM Comput. Surv. (CSUR)"},{"issue":"1","key":"12_CR3","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/s00766-010-0115-7","volume":"16","author":"M Deng","year":"2011","unstructured":"Deng, M., Wuyts, K., Scandariato, R., Preneel, B., Joosen, W.: A privacy threat analysis framework: supporting the elicitation and fulfillment of privacy requirements. Requirements Eng. 16(1), 3\u201332 (2011)","journal-title":"Requirements Eng."},{"key":"12_CR4","doi-asserted-by":"crossref","unstructured":"Ezawa, Y., Kakei, S., Shiraishi, Y., Mohri, M., Morii, M.: Blockchain-based cross-domain authorization system for user-centric resource sharing. Blockchain: Res. Appl. 4(2), 100126 (2023)","DOI":"10.1016\/j.bcra.2023.100126"},{"key":"12_CR5","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2021.100372","volume":"40","author":"S Garg","year":"2021","unstructured":"Garg, S., Baliyan, N.: Comparative analysis of Android and iOS from security viewpoint. Comput. Sci. Rev. 40, 100372 (2021)","journal-title":"Comput. Sci. Rev."},{"key":"12_CR6","doi-asserted-by":"crossref","unstructured":"Hardt, D.: The OAuth 2.0 Authorization Framework. RFC 6749 (2012)","DOI":"10.17487\/rfc6749"},{"key":"12_CR7","unstructured":"Howard, M., Lipner, S.: The Security Development Lifecycle, vol.\u00a08. Microsoft Press Redmond (2006)"},{"key":"12_CR8","unstructured":"Yasuda, K., Jones, M., Lodderstedt, T.: Self-Issued OpenID Provider v2. The OpenID Foundation (2022)"},{"key":"12_CR9","doi-asserted-by":"crossref","unstructured":"Lin, C.A., Liao, C.F.: User-managed access delegation for blockchain-driven IoT services. In: 2020 International Computer Symposium (ICS), pp. 462\u2013467 (2020)","DOI":"10.1109\/ICS51289.2020.00097"},{"key":"12_CR10","unstructured":"Lodderstedt, T., Dronia, S., Scurtescu, M.: OAuth 2.0 Token Revocation. RFC 7009 (2013)"},{"key":"12_CR11","unstructured":"Machulak, M., Richer, J.: Federated authorization for User-Managed Access (UMA) 2.0. Kantara Initiative (2018)"},{"key":"12_CR12","unstructured":"Machulak, M., Richer, J.: User-Managed Access (UMA) 2.0 grant for OAuth 2.0 authorization. Kantara Initiative (2018)"},{"key":"12_CR13","doi-asserted-by":"publisher","first-page":"80","DOI":"10.1016\/j.cosrev.2018.10.002","volume":"30","author":"A M\u00fchle","year":"2018","unstructured":"M\u00fchle, A., Gr\u00fcner, A., Gayvoronskaya, T., Meinel, C.: A survey on essential components of a self-sovereign identity. Comput. Sci. Rev. 30, 80\u201386 (2018)","journal-title":"Comput. Sci. Rev."},{"key":"12_CR14","unstructured":"Sakimura, N., Bradley, J., Jones, M., De\u00a0Medeiros, B., Mortimore, C.: OpenID Connect Core 1.0. The OpenID Foundation, p.\u00a0S3 (2014)"},{"key":"12_CR15","doi-asserted-by":"publisher","first-page":"163","DOI":"10.1007\/s00766-013-0195-2","volume":"20","author":"R Scandariato","year":"2015","unstructured":"Scandariato, R., Wuyts, K., Joosen, W.: A descriptive study of Microsoft\u2019s threat modeling technique. Requirements Eng. 20, 163\u2013180 (2015)","journal-title":"Requirements Eng."},{"issue":"15","key":"12_CR16","doi-asserted-by":"publisher","first-page":"5641","DOI":"10.3390\/s22155641","volume":"22","author":"F Schardong","year":"2022","unstructured":"Schardong, F., Cust\u00f3dio, R.: Self-sovereign identity: a systematic review, mapping and taxonomy. Sensors 22(15), 5641 (2022)","journal-title":"Sensors"},{"key":"12_CR17","unstructured":"Shostack, A.: Experiences threat modeling at Microsoft. MODSEC@ MoDELS 2008, 35 (2008)"},{"key":"12_CR18","volume-title":"Threat Modeling: Designing for Security","author":"A Shostack","year":"2014","unstructured":"Shostack, A.: Threat Modeling: Designing for Security. Wiley, Hoboken (2014)"},{"key":"12_CR19","doi-asserted-by":"crossref","unstructured":"Vastel, A., Laperdrix, P., Rudametkin, W., Rouvoy, R.: FP-stalker: tracking browser fingerprint evolutions. In: 2018 IEEE Symposium on Security and Privacy (SP), pp. 728\u2013741. IEEE (2018)","DOI":"10.1109\/SP.2018.00008"}],"container-title":["IFIP Advances in Information and Communication Technology","ICT Systems Security and Privacy Protection"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-65175-5_12","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,7,25]],"date-time":"2024-07-25T14:44:45Z","timestamp":1721918685000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-65175-5_12"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9783031651748","9783031651755"],"references-count":19,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-65175-5_12","relation":{},"ISSN":["1868-4238","1868-422X"],"issn-type":[{"type":"print","value":"1868-4238"},{"type":"electronic","value":"1868-422X"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"26 July 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"SEC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"IFIP International Conference on ICT Systems Security and Privacy Protection","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Edinburgh","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"United Kingdom","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"12 June 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"14 June 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"39","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"sec2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/ifipsec2024.co.uk\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}