An Authorization Scheme Concealing Client's Access from Authentication Server

摘要

OAuth 2.0 and OpenID Connect are widely used authorization frameworks in the development of web applications. However, there are privacy concerns when using these frameworks because an authentication server can easily identify the URI of a website being accessed by a client. In this study, we proposed and implemented an authorization scheme that allows a client to conceal a URI from an authentication server when a web service detects the client's request.