IoT OAuth OAuth-based Secure Access Control System and Method for IoT Environment

摘要

The present invention discloses an OAuth-based secure access control system and method for an IoT environment. A client providing an IoT service according to an aspect of the present invention; a user terminal accessing the client to receive an IoT service; a resource server in which information of the user terminal is stored; and an authorization server that registers the client and issues a token; an access control method in an OAuth-based secure access control system for an IoT environment, including: a client authentication step of redirecting to an authorization server through the authentication server to authenticate the client; and a user authentication step in which the user terminal receives a certificate from the client, verifies the certificate through an authorization server, and performs user authentication; and a token issuing step in which the authorization server issues an access token to the client.