RFC 9203: The Object Security for Constrained RESTful Environments (OSCORE) Profile of the Authentication and Authorization for Constrained Environments (ACE) Framework

This document specifies a profile for the Authentication and Authorization for Constrained Environments (ACE) framework. It utilizes Object Security for…

Read RFC 9203 on the RFC Editor

Outgoing relationships (21 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 4648: The Base16, Base32, and Base64 Data Encodings
Normative reference — RFC 7252: The Constrained Application Protocol (CoAP)
Normative reference — RFC 8610: Concise Data Definition Language (CDDL): A Notational Convention to Express Concise Binary Object Representation (CBOR) and JSON Data Structures
Normative reference — RFC 8949: Concise Binary Object Representation (CBOR)
Normative reference — RFC 5869: HMAC-based Extract-and-Expand Key Derivation Function (HKDF)
Normative reference — RFC 8392: CBOR Web Token (CWT)
Normative reference — RFC 8613: Object Security for Constrained RESTful Environments (OSCORE)
Normative reference — RFC 9052: CBOR Object Signing and Encryption (COSE): Structures and Process
Normative reference — RFC 9053: CBOR Object Signing and Encryption (COSE): Initial Algorithms
Normative reference — RFC 9200: Authentication and Authorization for Constrained Environments Using the OAuth 2.0 Framework (ACE-OAuth)
Normative reference — RFC 9201: Additional OAuth Parameters for Authentication and Authorization for Constrained Environments (ACE)
Informative reference — RFC 8126: Guidelines for Writing an IANA Considerations Section in RFCs
Informative reference — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Informative reference — RFC 4949: Internet Security Glossary, Version 2
Informative reference — RFC 9110: HTTP Semantics
Informative reference — RFC 6749: The OAuth 2.0 Authorization Framework
Informative reference — RFC 9147: The Datagram Transport Layer Security (DTLS) Protocol Version 1.3
Informative reference — RFC 8747: Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs)
Informative reference — RFC 7800: Proof-of-Possession Key Semantics for JSON Web Tokens (JWTs)

Incoming relationships (2 related RFCs)

Normatively referenced by — RFC 9770: Notification of Revoked Access Tokens in the Authentication and Authorization for Constrained Environments (ACE) Framework
Informatively referenced by — RFC 9200: Authentication and Authorization for Constrained Environments Using the OAuth 2.0 Framework (ACE-OAuth)