{"id":"https://openalex.org/W4400577136","doi":"https://doi.org/10.5220/0012757900003767","title":"OIPM: Access Control Method to Prevent ID/Session Token Abuse on OpenID Connect","display_name":"OIPM: Access Control Method to Prevent ID/Session Token Abuse on OpenID Connect","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4400577136","doi":"https://doi.org/10.5220/0012757900003767"},"language":"en","primary_location":{"id":"doi:10.5220/0012757900003767","doi":"https://doi.org/10.5220/0012757900003767","is_oa":true,"landing_page_url":"http://dx.doi.org/10.5220/0012757900003767","pdf_url":null,"source":{"id":"https://openalex.org/S4306419806","display_name":"International Conference on Security and Cryptography","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 21st International Conference on Security and Cryptography","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"http://dx.doi.org/10.5220/0012757900003767","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5104421768","display_name":"Junki Yuasa","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I75917431","display_name":"Nara Institute of Science and Technology","ror":"https://ror.org/05bhada84","country_code":"JP","type":"education","lineage":["https://openalex.org/I75917431"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Junki Yuasa","raw_affiliation_strings":["Graduate School of Science and Technology, Nara Institute Science and Technology, Ikoma 630-0192, Japan, --- Select a Country ---"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Graduate School of Science and Technology, Nara Institute Science and Technology, Ikoma 630-0192, Japan, --- Select a Country ---","institution_ids":["https://openalex.org/I75917431"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035829922","display_name":"Taisho Sasada","orcid":"https://orcid.org/0000-0003-2144-4949","observed_orcids":["https://orcid.org/0000-0003-2144-4949"]},"institutions":[{"id":"https://openalex.org/I205924995","display_name":"Japan Society for the Promotion of Science","ror":"https://ror.org/00hhkn466","country_code":"JP","type":"nonprofit","lineage":["https://openalex.org/I1319490839","https://openalex.org/I205924995"]},{"id":"https://openalex.org/I75917431","display_name":"Nara Institute of Science and Technology","ror":"https://ror.org/05bhada84","country_code":"JP","type":"education","lineage":["https://openalex.org/I75917431"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Taisho Sasada","raw_affiliation_strings":["Graduate School of Science and Technology, Nara Institute Science and Technology, Ikoma 630-0192, Japan, --- Select a Country ---","Research Fellow (PD) of the Japan Society for the Promotion of Science, Tokyo 102-0083, Japan, --- Select a Country ---","Japanese Society for the Promotion of Science Fellow (Japanese Society for the Promotion of Science Fellow, institution, jp - Japan)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Graduate School of Science and Technology, Nara Institute Science and Technology, Ikoma 630-0192, Japan, --- Select a Country ---","institution_ids":["https://openalex.org/I75917431"]},{"raw_affiliation_string":"Research Fellow (PD) of the Japan Society for the Promotion of Science, Tokyo 102-0083, Japan, --- Select a Country ---","institution_ids":["https://openalex.org/I205924995"]},{"raw_affiliation_string":"Japanese Society for the Promotion of Science Fellow (Japanese Society for the Promotion of Science Fellow, institution, jp - Japan)","institution_ids":["https://openalex.org/I205924995"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056047903","display_name":"Christophe Kiennert","orcid":"https://orcid.org/0000-0003-1819-3341","observed_orcids":["https://orcid.org/0000-0003-1819-3341"]},"institutions":[{"id":"https://openalex.org/I4210145102","display_name":"Institut Polytechnique de Paris","ror":"https://ror.org/042tfbd02","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210145102"]},{"id":"https://openalex.org/I4387153010","display_name":"T\u00e9l\u00e9com SudParis","ror":"https://ror.org/05xvk4r52","country_code":"FR","type":"education","lineage":["https://openalex.org/I205703379","https://openalex.org/I4210145102","https://openalex.org/I4387153010"]},{"id":"https://openalex.org/I4405261500","display_name":"Services r\u00e9partis, Architectures, MOd\u00e9lisation, Validation, Administration des R\u00e9seaux","ror":"https://ror.org/05d29yv45","country_code":"FR","type":"facility","lineage":["https://openalex.org/I205703379","https://openalex.org/I4210145102","https://openalex.org/I4387153010","https://openalex.org/I4405261500"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Christophe Kiennert","raw_affiliation_strings":["SAMOVAR, T\u00e9l\u00e9com SudParis, Institut Polytechnique de Paris, 91120 Palaiseau, France, --- Select a Country ---"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAMOVAR, T\u00e9l\u00e9com SudParis, Institut Polytechnique de Paris, 91120 Palaiseau, France, --- Select a Country ---","institution_ids":["https://openalex.org/I4210145102","https://openalex.org/I4387153010","https://openalex.org/I4405261500"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043016218","display_name":"Gr\u00e9gory Blanc","orcid":"https://orcid.org/0000-0001-8150-6617","observed_orcids":["https://orcid.org/0000-0001-8150-6617"]},"institutions":[{"id":"https://openalex.org/I4210145102","display_name":"Institut Polytechnique de Paris","ror":"https://ror.org/042tfbd02","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210145102"]},{"id":"https://openalex.org/I4387153010","display_name":"T\u00e9l\u00e9com SudParis","ror":"https://ror.org/05xvk4r52","country_code":"FR","type":"education","lineage":["https://openalex.org/I205703379","https://openalex.org/I4210145102","https://openalex.org/I4387153010"]},{"id":"https://openalex.org/I4405261500","display_name":"Services r\u00e9partis, Architectures, MOd\u00e9lisation, Validation, Administration des R\u00e9seaux","ror":"https://ror.org/05d29yv45","country_code":"FR","type":"facility","lineage":["https://openalex.org/I205703379","https://openalex.org/I4210145102","https://openalex.org/I4387153010","https://openalex.org/I4405261500"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Gregory Blanc","raw_affiliation_strings":["SAMOVAR, T\u00e9l\u00e9com SudParis, Institut Polytechnique de Paris, 91120 Palaiseau, France, --- Select a Country ---"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAMOVAR, T\u00e9l\u00e9com SudParis, Institut Polytechnique de Paris, 91120 Palaiseau, France, --- Select a Country ---","institution_ids":["https://openalex.org/I4210145102","https://openalex.org/I4387153010","https://openalex.org/I4405261500"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110510380","display_name":"Yuzo Taenaka","orcid":"https://orcid.org/0009-0004-4530-6086","observed_orcids":["https://orcid.org/0009-0004-4530-6086"]},"institutions":[{"id":"https://openalex.org/I75917431","display_name":"Nara Institute of Science and Technology","ror":"https://ror.org/05bhada84","country_code":"JP","type":"education","lineage":["https://openalex.org/I75917431"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Yuzo Taenaka","raw_affiliation_strings":["Graduate School of Science and Technology, Nara Institute Science and Technology, Ikoma 630-0192, Japan, --- Select a Country ---"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Graduate School of Science and Technology, Nara Institute Science and Technology, Ikoma 630-0192, Japan, --- Select a Country ---","institution_ids":["https://openalex.org/I75917431"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5084740320","display_name":"Youki Kadobayashi","orcid":"https://orcid.org/0000-0001-9630-4831","observed_orcids":["https://orcid.org/0000-0001-9630-4831"]},"institutions":[{"id":"https://openalex.org/I75917431","display_name":"Nara Institute of Science and Technology","ror":"https://ror.org/05bhada84","country_code":"JP","type":"education","lineage":["https://openalex.org/I75917431"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Youki Kadobayashi","raw_affiliation_strings":["Graduate School of Science and Technology, Nara Institute Science and Technology, Ikoma 630-0192, Japan, --- Select a Country ---"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Graduate School of Science and Technology, Nara Institute Science and Technology, Ikoma 630-0192, Japan, --- Select a Country ---","institution_ids":["https://openalex.org/I75917431"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0889596,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"1","issue":null,"first_page":"674","last_page":"679"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.375,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.375,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.29440000653266907,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.19820000231266022,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/openid-connect","display_name":"OpenID Connect","score":0.9319999814033508},{"id":"https://openalex.org/keywords/access-control","display_name":"access control","score":0.9819999933242798}],"concepts":[{"id":"https://openalex.org/C2779182362","wikidata":"https://www.wikidata.org/wiki/Q17126187","display_name":"Session (web analytics)","level":2,"score":0.8565981388092041},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.791375994682312},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6982735991477966},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.5914642214775085},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5370814800262451},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.37913793325424194},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.32067418098449707},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.17693576216697693}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5220/0012757900003767","doi":"https://doi.org/10.5220/0012757900003767","is_oa":true,"landing_page_url":"http://dx.doi.org/10.5220/0012757900003767","pdf_url":null,"source":{"id":"https://openalex.org/S4306419806","display_name":"International Conference on Security and Cryptography","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 21st International Conference on Security and Cryptography","raw_type":"proceedings-article"},{"id":"pmh:oai:HAL:hal-04719043v1","doi":null,"is_oa":false,"landing_page_url":"https://hal.science/hal-04719043","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4405252976","host_organization_name":"Centre pour la Communication Scientifique Directe","host_organization_lineage":["https://openalex.org/I4405252976"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"21st International Conference on Security and Cryptography (SECRYPT 2024), Jul 2024, Dijon, France. pp.674-679, ⟨10.5220/0012757900003767⟩","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"doi:10.5220/0012757900003767","doi":"https://doi.org/10.5220/0012757900003767","is_oa":true,"landing_page_url":"http://dx.doi.org/10.5220/0012757900003767","pdf_url":null,"source":{"id":"https://openalex.org/S4306419806","display_name":"International Conference on Security and Cryptography","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 21st International Conference on Security and Cryptography","raw_type":"proceedings-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W1578972423","https://openalex.org/W2600458264","https://openalex.org/W7138853850","https://openalex.org/W2108210585","https://openalex.org/W7000285343","https://openalex.org/W2201035768","https://openalex.org/W2090654308","https://openalex.org/W2237651967","https://openalex.org/W2784797438","https://openalex.org/W4385522578"],"abstract_inverted_index":{"In":[0,23],"recent":[1],"years,":[2],"the":[3,14,33,44,126],"adoption":[4],"of":[5,16,128],"Single":[6],"Sign-On":[7],"(SSO)":[8],"has":[9],"been":[10],"progressing":[11],"to":[12,57,77,108,124,156,186],"reduce":[13],"burden":[15],"user":[17,34,140,178],"account":[18],"management":[19],"in":[20],"web":[21,24],"services.":[22],"services":[25],"using":[26,37,91,130,142],"OpenID":[27],"Connect,":[28],"a":[29,122,133,144,160],"primary":[30],"SSO":[31],"protocol,":[32],"is":[35,54,96,137,152,167],"authenticated":[36],"an":[38],"ID":[39],"Token":[40,49],"(IDT)":[41],"issued":[42],"by":[43],"identity":[45],"provider.":[46],"The":[47],"Session":[48],"(ST)":[50],"generated":[51,138,164],"after":[52],"authentication":[53,146,155,166],"often":[55],"used":[56,168],"authenticate":[58],"subsequent":[59,170],"requests.":[60],"However,":[61],"attackers":[62],"can":[63],"acquire":[64],"victims\u2019":[65],"IDT/ST":[66],"through":[67,180],"Cross-Site":[68],"Scripting":[69],"(XSS)":[70],"or":[71],"malicious":[72,102],"browser":[73,103],"extensions,":[74],"enabling":[75],"them":[76],"hijack":[78],"sessions":[79],"and":[80,159],"impersonate":[81],"victims.":[82],"Related":[83],"studies":[84],"have":[85],"proposed":[86],"countermeasures":[87],"against":[88,98,189],"impersonation":[89,110,129],"attacks":[90],"IDT/ST.":[92,131],"Still,":[93],"their":[94],"effectiveness":[95],"limited":[97],"user-level":[99,190],"malware":[100],"(e.g.,":[101],"extensions),":[104],"making":[105],"it":[106],"impossible":[107],"prevent":[109,157],"entirely.":[111],"This":[112,148],"study":[113],"proposes":[114],"OIPM":[115],"(OpenID":[116],"Connect":[117],"Imper-sonation":[118],"Prevention":[119],"Mechanism)":[120],"as":[121,184],"countermeasure":[123],"address":[125],"issue":[127],"Specifically,":[132],"unique":[134],"private":[135,149,162],"key":[136,163],"during":[139,154],"registration":[141],"FIDO,":[143],"passwordless":[145],"technology.":[147],"key\u2019s":[150],"signature":[151],"verified":[153],"impersonation,":[158],"temporary":[161],"at":[165],"for":[169],"request":[171],"verification.":[172],"Additionally,":[173],"post-authentication":[174],"high-confidentiality":[175],"operations":[176],"require":[177],"verification":[179],"FIDO-based":[181],"gestures":[182],"such":[183],"fingerprints":[185],"ensure":[187],"security":[188],"malware.":[191]},"counts_by_year":[],"updated_date":"2026-10-25T09:29:13.331239","created_date":"2024-07-13T00:00:00"}