@techreport{baer-lightweight-token-authentication-01, number = {draft-baer-lightweight-token-authentication-01}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-baer-lightweight-token-authentication/01/}, author = {Sebastian Baer and Bernd Haberstumpf}, title = {{Lightweight Token authentication (LTA) 1.0}}, pagetotal = 31, year = 2015, month = aug, day = 31, abstract = {This document contains a specification for a token authentication mechanism that is sufficiently resource-friendly to use it on small embedded or mobile devices. The three involved parties are a service consumer (CON) a service provider (SP) and an authentication provider (AP). The authentication provider decouples authentication and the actual service that is consumed. It also serves as anonymizer. The consumer authenticates at the authentication provider, requests one or more authorization tokens and redeems those tokens when accessing the service provider's offered services.}, }