2016

Yahoo! ID OpenID Connect

2016/3/17 ID

kura

ID /

OpenID ID

@kura_lab

1. Yahoo! ID

2. OpenID Connect

3. OpenID Connect

4. IoTYahoo! JAPANAPI

5.

ID

Yahoo! JAPAN ID

Yahoo! ID

IDID

IDMETI/ www.meti.go.jp/policy/it_policy/id_renkei/

7

http://www.meti.go.jp/policy/it_policy/id_renkei/

201211 IdP

OpenID Connect

YConnect

2012- SDK

GitHub

https://github.com/yahoojapan/yconnect-php-sdk

https://github.com/yahoojapan/yconnect-php-sdk

2013- Yahoo! JAPAN

2013- Yahoo! JAPAN

PC

Yahoo! +

ID

Yahoo! ID

20149 Yahoo! ID

http://marketing.yahoo.co.jp/service/yidconnect/

Yahoo! ID

http://marketing.yahoo.co.jp/service/yidconnect/

Yahoo! ID

Yahoo! JAPAN iOSAndroidYahoo! ID

Yahoo! ID

Yahoo! JAPAN ID

API

Yahoo! JAPAN ID

https://www.feedforce.jp/release/4979/

20155

56.5%

https://www.feedforce.jp/release/4979/

ID

http://ir.yahoo.co.jp/jp/archives/present/

1 Yahoo! JAPAN ID

3,000

http://ir.yahoo.co.jp/jp/archives/present/

T-SITE

My SoftBank

Ameba

200

OpenID Connect

OpenID Connect

2014227

OpenID ConnectOAuth 2.0

OpenIDOpenID 2.0

OpenIDOpenID

OpenID AX

OAuthOAuth 1.0OAuth 2.0

Web API

OpenIDOAuth

OAuth 2.0

OpenID Connect

API

OpenID Connect

OpenID Connect ID

http://openid.net/connect/

http://openid.net/connect/

OpenID Connect

OpenID Connect Authorization Code Flow

Implicit Flow

Hybrid Flow

Authorization Code Flow

OAuth 2.0 OpenID Connect

OpenID Connect Authorization Code Flow

IdPRPEnd-User

Authorization Request (Redirect)

UserInfo Endpoint

Authorization Code (Redirect)

Login / Consent

Token Request

Access Token / Refresh Token / ID Token

Resource Access

Resource

Start OpenID Connect

GREE Y! Yahoo! ID GREE

email@example.com

mailto:mail@example.com

GREE Y! Yahoo! ID GREE

RP OpenID Connect

email@example.com

mailto:mail@example.com

IdPRPEnd-UserUserInfo Endpoint

Start OpenID Connect

IdPRPEnd-User

Authorization Request (Redirect)

UserInfo Endpoint

Start OpenID Connect

IdPRPEnd-User

Authorization Request (Redirect)

UserInfo Endpoint

Login / Consent

Start OpenID Connect

GREE Y! Yahoo! ID GREE

IdP

email@example.com

mailto:mail@example.com

GREE Y! Yahoo! ID GREE

API

email@example.com

mailto:mail@example.com

IdPRPEnd-User

Authorization Request (Redirect)

UserInfo Endpoint

Login / Consent

Start OpenID Connect

IdPRPEnd-User

Authorization Request (Redirect)

UserInfo Endpoint

Authorization Code (Redirect)

Login / Consent

Start OpenID Connect

IdPRPEnd-User

Authorization Request (Redirect)

UserInfo Endpoint

Authorization Code (Redirect)

Login / Consent

Token Request

Access Token / Refresh Token / ID Token

Start OpenID Connect

IdPRPEnd-User

Authorization Request (Redirect)

UserInfo Endpoint

Authorization Code (Redirect)

Login / Consent

Token Request

Access Token / Refresh Token / ID Token

Resource Access

Resource

Start OpenID Connect

GREE Y! Yahoo! ID GREE

email@example.com

mailto:mail@example.com

IoT Yahoo! JAPANAPI

Web or App

IoT Device

YConnect

Yahoos APIIDCF Cloud

Web

Web or App

IoT Device

YConnect

Yahoos API

Authorization

IDCF Cloud

Web or App

IoT Device

YConnect

Yahoos API

Authorization

IDCF Cloud

Web or App

IoT Device

YConnect

Yahoos API

Authorization

Authorization Code

IDCF Cloud

Web or App

IoT Device

YConnect

Yahoos API

Authorization

Authorization Code

IDCF Cloud

Authorization Code

Web or App

IoT Device

YConnect

Yahoos API

Authorization

Authorization Code

IDCF Cloud

Authorization Code

Web or App

IoT Device

YConnect

Yahoos API

Authorization

Authorization Code

IDCF Cloud

Authorization CodeAccess Token Refresh Token

Web or App

IoT Device

YConnect

Yahoos API

Authorization

Authorization Code

IDCF Cloud

Authorization CodeAccess Token Refresh Token

Access Token Refresh Token

Web or App

IoT Device

YConnect

Yahoos API

Authorization

Authorization Code

IDCF Cloud

Authorization CodeAccess Token Refresh Token

Access Token Refresh Token

Data

Web or App

IoT Device

YConnect

Yahoos API

Authorization

Authorization Code

IDCF Cloud

Authorization CodeAccess Token Refresh Token

Access Token

Access Token Refresh Token

Data

Yahoo! JAPANAPI

1. Yahoo! ID

Yahoo! JAPAN IDAPI

2. OpenID Connect

OAuthOpenIDID

3. OpenID Connect

Access Token

4. IoTYahoo! JAPANAPI

Refresh TokenAPI

http://developer.yahoo.co.jp/yconnect/

Yahoo! ID

http://developer.yahoo.co.jp/yconnect/

Yahoo! ID Yahoo! JAPANAPI