%% You should probably cite draft-ietf-ace-oauth-authz instead of this I-D. @techreport{tschofenig-ace-oauth-iot-00, number = {draft-tschofenig-ace-oauth-iot-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-tschofenig-ace-oauth-iot/00/}, author = {Hannes Tschofenig}, title = {{The OAuth 2.0 Internet of Things (IoT) Client Credentials Grant}}, pagetotal = 10, year = 2014, month = jul, day = 4, abstract = {As Internet of Things (IoT) deployments increase steadily the need for a better user experience for handling the authentication and authorization tasks in constrained environments increases. While several technologies have been developed already that allow federated access to protected resource the nature of IoT deployments requires care with the limited resources available on many of these devices. This document defines a new OAuth 2.0 authorization grant for the interaction between constrained clients and resource servers to obtain access tokens for access to protected resources. It does so by leveraging prior work on OAuth 2.0, CoAP, and DTLS.}, }