D3FEND 技术详情
D3-TB
定义
Token binding is a security mechanism used to enhance the protection of tokens, such as cookies or OAuth tokens, by binding them to a specific connection.
父技术
子技术
无
关联构件
AccessToken
Access Token
In computer systems, an access token contains the security credentials for a login session and identifies the user, the user's groups, the user's privileges, and, in some cases, a particular application. Typically one may be asked to enter the access token (e.g. 40 random characters) rather than the usual password (it therefore should be kept secret just like a password).
语义关系
出向kb referenceReference - The Token Binding Protocol Version 1.0
出向strengthensAccess Token