Information processing device, resource providing device, information processing method, information processing program, resource providing method, resource providing program

摘要

To improve security of an access token.SOLUTION: An information processor 10 issues an access token in response to a token issuance request received from a client. A reception section 10A receives the token issuance request including a nonce issued to the client, a first public key generated by the client, and a first signature for client information including the nonce from the client. A transmission section 10B transmits a login request including first identification information of the token issuance request to the client when a verification result using the first public key of the first signature included in the token issuance request is successful. An issuance section 10E issues a sender constrained token generated with the first public key as the access token when receiving an authorization permission request including the first identification information and authentication information of a user who uses the client from the client.SELECTED DRAWING: Figure 1