Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

79
!"#$% ’$()*(($% +("#$%,-./"0$10$#2 34456778881-./"0$10$#7 9$5-:";34 < =>>? !"#$% ’$()*(($% 9$5-"%; @%A A"(4:"/.4"$% $* 43"( *"B)C 8"43 $: 8"43$.4 #$A"*"0@4"$%C @:) 5):#"44)A "% @%- #)A".# 8"43$.4 :$-@B4- 5:$D"A)A 43) 0$5-:";34 %$4"0) @%A 43"( %$4"0) @:) 5:)():D)A1

description

OpenID - Single sign-on for the web. Av Simon Josefsson, Yubico.com

Transcript of Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

Page 1: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

!"#$%&'$()*(($%&+("#$%,-./"0$10$#2

34456778881-./"0$10$#7

9$5-:";34&<&=>>?&!"#$%&'$()*(($%9$5-"%;&@%A&A"(4:"/.4"$%&$*&43"(&*"B)C&8"43&$:&8"43$.4&#$A"*"0@4"$%C&@:)&5):#"44)A&"%&@%-&#)A".#&8"43$.4&:$-@B4-&5:$D"A)A&43)&0$5-:";34&%$4"0)&@%A&43"(&%$4"0)&@:)&5:)():D)A1

Page 2: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

!"#$%&'%()*+,-.

Page 3: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

!"#"$%&'()*"+,"-.-'/"+

0"+1#"+./)2$.3$45/%"6

Page 4: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

!"#$%/0*'%$"#$%1*#+.

Page 5: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

7318#'$82*/34*8%9"8$16-"&83:81/"&$'6";<'//=3&+/8'&5+6&+7'

Page 6: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

Page 7: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

,"-8/)%"/8+3"/$>%8$""+8%36')$%')$8'81/"&$'6"8'$+8<'//=3&+8+'%'-'/"

Page 8: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

!"#"$%&'()*"+?$38#"$%&'(8'1%93&)%58)$8#9'&2"83:8531&8#&"+"$%)'(/

Page 9: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

@&3//./)%"8<"&/)/%"$%81/"&8)+"$%)%5

A):81/"&8='$%/8%9'%B

=)%931%8C<"$D!?

E/"&8F83$8/)%"878GH8E/"&8F83$8/)%"8I

=)%98C<"$D!?

C<"$D!8F83$8/)%"878HH8C<"$D!8F83$8/)%"8I

Page 10: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

809%/0%,%3'*%&$.

Page 11: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

7318<)#J8'8<&3K)+"&5318%&1/%

Page 12: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

A()J"85318<)#J8'$".6')(8<&3K)+"&8%3+'5B

Page 13: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

7318#'$8#9'$2"8<&3K)+"&'$58%)6"85318='$%

Page 14: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

Page 15: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

7318#'$8"K"$8&1$8%9"/"&K"&8531&/"(:

Page 16: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

8888888888888888888888888888888888888@L

@MM

8888888888888888888888888N'K'

8888OPO

8888888888888888888888888888888888O"&(

888O5%93$88888888888888888888

888888888888888888888888888888801-5

Page 17: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

:00%1#+;%4"0&4*'<%,71%=#>;?

Page 18: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

9%%<?;;3<"$)+Q5'933Q#36;

Page 19: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

9%%<?;;3<"$)+Q'3(Q#36;R/#&""$$'6"S

Page 20: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

(@<%,%"#A*%#+%#4403+$<+09%9"#$.

Page 21: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

T)$+8/)%"/8%9'%/1<<3&%/8C<"$D!

Page 22: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

A3&8-"%%"&U8'/J8%9"8/)%"/853181/"8%38/1<<3&%8C<"$D!B

Page 23: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

Page 24: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

Page 25: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

Page 26: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

Page 27: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

Page 28: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

,%/0+7$%9#+$%$0%B*%C00B#2?1;0)*+&/?401D

,71%C00B#2?401?

Page 29: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

EAA

+B"%F&:)BGH$5)%"A1():D):H&&3:)*GH34456778881#-$5)%"A10$#7():D):H72

+B"%F&:)BGH$5)%"A1A)B);@4)H&3:)*GH3445677*$$/@:1#-$5)%"A10$#7H2

4$&3445677*$$/@:10$#7&IJKL&($.:0)1

Page 30: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

Page 31: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

@9'$2)$28<&3K)+"&8-5"+)%)$28%=38()$"/83:8PVWX

731&8C<"$D!8E0X&"6')$/8%9"8/'6"

Page 32: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

E+/%$"&'%&'%+*9.

Page 34: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

!";%4"0'*%()*+,-0A*2%$"*%2*'$.

Page 35: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

\43(K"83$"8<&3-("6'$+8+38)%8="((]

Page 36: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

C%9"&8/%'$+'&+/8'&"'(&"'+583$.-3'&+

Page 37: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

A'('/U8"K"$%1'((5U8531>((8<&3-'-(58$""+8%38/1<<3&%861(%)<("8<&3%3#3(/8)$8%9"8-'#J."$+B

Page 38: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

809%/0*'()*+,-%902@.

Page 39: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

"##$%&&'$()*+,)(#&+(-(.'$(/0&0$(10&

^"=G88_"&/)3$8`QZG

Page 40: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

aQ8E/"&8"$%"&/8D+"$%):)"&8'%80O

Page 41: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

aQ8E/"&8"$%"&/8D+"$%):)"&8'%80O

`Q80O8(3#'%"/8%9"8CO! !)D):@B&#)03@%"(#(&)M"(4(C&("#5B)(4&"(&4$&:)4:")D)&43)&NOL&@%A&B$$F&*$:&IJKL&IPEQ&B"%F&:)B&%$A)(

Page 42: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

aQ8E/"&8"$%"&/8D+"$%):)"&8'%80O

`Q80O8(3#'%"/8%9"8CO! !)D):@B&#)03@%"(#(&)M"(4(C&("#5B)(4&"(&4$&:)4:")D)&43)&NOL&@%A&B$$F&*$:&IJKL&IPEQ&B"%F&:)B&%$A)(

bQ80O8&"+)&"#%/8-&3=/"&8%38CO! IJJR&:)A":)04C&43)&%)8&NOL&0$%4@"%(&Q"**")SI)BB#@%&)M03@%;)&@%A&5@:@#)4):(&*$:&TR

Page 43: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

aQ8E/"&8"$%"&/8D+"$%):)"&8'%80O

`Q80O8(3#'%"/8%9"8CO! !)D):@B&#)03@%"(#(&)M"(4(C&("#5B)(4&"(&4$&:)4:")D)&43)&NOL&@%A&B$$F&*$:&IJKL&IPEQ&B"%F&:)B&%$A)(

bQ80O8&"+)&"#%/8-&3=/"&8%38CO! IJJR&:)A":)04C&43)&%)8&NOL&0$%4@"%(&Q"**")SI)BB#@%&)M03@%;)&@%A&5@:@#)4):(&*$:&TR

cQ8CO8'1%9"$%)#'%"/81/"&! J3)&5:$4$0$B&A$)(%U4&0@:)&3$8&43"(&3@55)%(

Page 44: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

aQ8E/"&8"$%"&/8D+"$%):)"&8'%80O

`Q80O8(3#'%"/8%9"8CO! !)D):@B&#)03@%"(#(&)M"(4(C&("#5B)(4&"(&4$&:)4:")D)&43)&NOL&@%A&B$$F&*$:&IJKL&IPEQ&B"%F&:)B&%$A)(

bQ80O8&"+)&"#%/8-&3=/"&8%38CO! IJJR&:)A":)04C&43)&%)8&NOL&0$%4@"%(&Q"**")SI)BB#@%&)M03@%;)&@%A&5@:@#)4):(&*$:&TR

cQ8CO8'1%9"$%)#'%"/81/"&! J3)&5:$4$0$B&A$)(%U4&0@:)&3$8&43"(&3@55)%(

YQ8CO8&"+)&"#%8-'#J8%380O! IJJR&:)A":)04&@;@"%C&43)&%)8&NOL&*$:&OR&*"%"(3)(&43)&QI&@%A&5:$D"A)(&"%*$:#@4"$%

Page 45: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

F#+%,%/0%102*%9&$"%()*+,-.

Page 46: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

7"/G

\4)6<("80"2)/%&'%)3$]

Page 47: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

731&8C<"$D!8/"&K"&8#'$8/"$+8<"&/3$'(8)$:3&6'%)3$

A':%"&8531&8'<<&3K'(U3:8#31&/"B

Page 48: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

d6')(U8$)#J$'6"U936"8'++&"//U8"%#

Page 49: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

e((3=/861(%)<("8\<"&/3$'/]U3&81/"&8<&3:)("/

Page 50: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

7318$""+8%38%&1/%8531&8C<"$D!8/"&K"&8%38$3%8&"K"'(8'$5%9)$28

=)%931%8531&8'<<&3K'(

Page 51: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

!"#$7'%+*9%&+()*+,-%G?H.

Page 52: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

4"&K"&.+&)K"$8)+"$%)%58/"("#%)3$

Page 53: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

C(+?%5<"8>/)63$fQ653<"$)+Q#36>

^"=?%5<"8>653<"$)+Q#36>/"("#%8)+"$%)%58%381/"

Page 54: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

e//"&%)3$/8=)%931%8)+"$%)%5

Page 55: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

O&3K"85318'&"83K"&8ag8=)%931%8&"K"'()$28=9385318'&"

Page 56: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

V"#98)6<&3K"6"$%/

! [email protected].`Yh! E/"/8PVVO8OC4V8)$/%"'+83:8PVVO8idVA%38)$#&"'/"86'j)6168/)*"B

! ^3$#"8'$+8%)6"8/%'6</! E0D8^3&6'()*'%)3$! QQQ

Page 57: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

E2*%$"*2*%'*432&$;)20B=*1'%&+%()*+,-.

Page 58: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

O9)/9)$28)/8'8&"'(/"#1&)%58<&3-("6

Page 59: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

I0=3$&0+'.

Page 60: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

JK*A*2%*+$*2%)#''902/'%&+%$"*%#$$#4@*2'7%40+$20=%C=09L

Page 61: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

W)#&3/3:%8@'&+4<'#"

,9'%8'-31%8:('/9QQk

Page 62: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

M*$$*2%I0=3$&0+'.

Page 63: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

O&3%3#3(8#9'$2"/8%38C<"$D!kA1$()J"(5GB

Page 64: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

l&3=/"&8)$%"2&'%)3$83:8C<"$D!

Page 65: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

N1/%8eK3)+8O'//=3&+/G

Page 66: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

PVVO48=)%98#()"$%./)+"8#"&%):)#'%"/A#36<("jGB

Page 67: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

P'&+='&"8'1%9"$%)#'%)3$8+"K)#"/

Page 68: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

Page 69: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

C::)#"/8)$84%3#J93(6'$+8@'():3&$)'

Page 70: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

71-)#38D+"$%)%58O('%:3&6

C<"$D!U8N'K'U8e4O;Q^dV;@LU80'+)1/U8OeWU8OPOU8O"&(U801-5U8QQQ

Page 71: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

W1(%).<('%:3&68E4l8J"5=)%931%8+"K)#"8+&)K"&/

Page 72: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

Page 73: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

809%/0*'%$"*N3B&@*;%902@.

Page 74: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

a`g.-)%8ed48J"5

Page 75: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

V=38:'#%3&8'1%9"$%)#'%)3$

Page 76: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

Page 77: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

,'(("%8/)*"

Page 78: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

^38+)/<('583&8-'%%"&)"/

Page 79: Go Open 2008: Simon Josefsson, OpenID - Single sign-on for the web

! !

O3*'$&0+'.

e$/="&/k

9$5-:";34&<&=>>V&!"#$%&'$()*(($%9$5-"%;&@%A&A"(4:"/.4"$%&$*&43"(&*"B)C&8"43&$:&8"43$.4&#$A"*"0@4"$%C&@:)&5):#"44)A&"%&@%-&#)A".#&8"43$.4&:$-@B4-&5:$D"A)A&43)&0$5-:";34&%$4"0)&@%A&43"(&%$4"0)&@:)&5:)():D)A19:)A"4(6&!$#)&(0:))%(3$4(&*:$#&!"#$%&W"BB"($%C&$43):&(0:))%&(3$4(&*:$#&D@:"$.(&("4)(&$%&43)&8)/1