Recomendados
Recomendados
Más contenido relacionado
La actualidad más candente
La actualidad más candente (20)
Similar a OpenID Tutorials
Similar a OpenID Tutorials (20)
Más de Nao Haida
Último
Último (20)
OpenID Tutorials
- 1. OpenID Tutorial. Naofumi HAIDA from Cirius Technologies.
- 2. Table of Contents. • Self-Introduction. • What is OpenID? • OpenID 2.0 quick look. • Security Issues. • Other related OpenAPIs.
- 3. Self-introduction. • Working @Cirius Technologies, Inc. • Architect @Cirius Lab. • Ruby Programmer. • GeoAPIs, Twitwi Twitter, Twittalk etc... • OpenAPIS & Beyond LT • http://docs.google.com/Presentation? id=dgp485h4_561dwgpsrcd
- 4. Questions. • OpenID ? • RP OpenID ? • OpenID 2.0 ? • XRI ?
- 5. Authentication ( ) ID Authorization ( ) ID
- 6. Backgrounds.
- 7. • Internet Identity Workshop Six Apart Brad Fitzpatrick OpenID (2005.10) • Web OpenID (2007.02) • Blogger OpenID (2007.11) • OpenID Authentication 2.0 & OpenID Attribute Exchange 1.0 (2007.12)
- 8. • Blogger OpenID IdP (2008.01) • Yahoo OpenID 2.0 IdP (2008.01) • OpenID Foundation Google IBM MS Yahoo! (2008.02) • Six Apart Verisign NRI OpenID Japan Foundation (2008.02)
- 9. Many Internet users are “End User” of OpenID Now!
- 10. ~ 360 million OpenIDs.
- 11. Total Relying Parties Borrowed from David Recordon
- 12. There are over 11,000 OpenID enable sites!
- 14. We use more and more sites!
- 16. OpenID solves...
- 18. My Online Profile scattered across many sites!
- 19. What is an OpenID??
- 23. Is an OpenID a URI? It has changed in OpenID ver 2.0.
- 24. yahoo.com
- 25. coderepos.org
- 26. xri://=haida
- 27. OpenID: Identity URI Web Authority http://www.slideshare.net/zigorou/ openid-20-quick-note/
- 28. These are not OpenID.
- 29. Authorization Authentication Delegation Privacy Identity Maneger Trust Control Single-Sign-On Distributed SSO
- 31. Input Claimed Identifier @ RP.
- 33. Merits & Demerits of OpenID.
- 34. End User URI
- 35. Relying Party - - Sun OpenID Sun Sun
- 38. 2. OpenID 2.0 Quick look.
- 40. URL ID ID
- 42. XRI
- 43. Identity URI XRI
- 44. xri://=haida
- 45. xri xri ID i-name
- 46. = @
- 47. xri://@yahoo
- 48. ※ XRI xri://=haida 12 $/year xri://@mixi 55 $/year
- 50. identifier http, https URI URI 2.0 URI XRI
- 51. OpenID Provider: OP Ver 1.1 IdP OpenID
- 52. OP Identifier OP Identifier
- 53. Relying Party: RP Consumer OpenID Identifier OP Web Web
- 54. Claimed Identifier URI OP
- 55. User-Supplied Identifier RP Claimed Identifier OP Identifier
- 56. OP-Local Identifier OP Identifier OP Identifier
- 57. How does authentication work with OpenID ?
- 60. 1. RP Claimed Identifier HTML 2. openid.server link 3. RP 4. OP 5. OP RP 6. RP
- 61. How does this work?
- 65. OP delegate Identifier OpenID 1.1 HTML OpenID 2.0 XRDS XML
- 66. Claimed Identifier XRI - XRDS Claimed Identifier URL - HTML x-xrds-location URL - meta http-equiv x-xrds-location URL - Content-type application/xrds+xml XRDS
- 67. <?xml version=quot;1.0quot; encoding=quot;UTF-8quot;?> <xrds:XRDS xmlns:xrds=quot;xri://$xrdsquot; xmlns:openid=quot;http://openid.net/xmlns/1.0quot; xmlns=quot;xri://$xrd*($v*2.0)quot;> <XRD> <Service priority=quot;0quot;> <Type>http://specs.openid.net/auth/2.0/server</Type> <URI>http://openid.example.com/auth</URI> </Service> </XRD> </xrds:XRDS>
- 68. Service Type
- 69. Security Risks.
- 70. Phishing.
- 72. 1. Malicious Consumer OpenID 2. Identifier URI 3. Malicious Consumer OP OP 4. OP OP ID, Password 5. 6. OP
- 73. Firefox OpenID SeatBelt (by VeriSign) -- OpenID -- Malicious Consumer Malicious Consumer OP -- OP
- 74. OP nonce trust_root, return_to return_to malicious consumer OP robots.txt OpenID “Identity Page forquot; site:*.myopenid.com” OP
- 75. RP for Mobile OP RP for Mobile OpenID ?
- 76. orz..
- 77. OpenID Security ! http://wiki.openid.net/Security
- 78. Reputation Problem OP
- 79. OP RP AOL OP http://dev.aol.com/node/578
- 80. OP https Attribute Exchange Provider Authentication Policy Extension
- 81. OP Reputation OP !
- 82. Summary • OpenID • OpenID 2.0 User Friendly! • IdP
- 83. Thank you!