IT Security Archive - Page 2 of 2 - Rock the Prototype

OpenID Connect – A key to digital identities

Sascha Block2024-03-03T09:05:49+01:00Categories: IT Security, Software Architecture, Software development|Tags: Authentication, Authentificator App, BSI, Consent Management, Data integrity, digital certificates, Digital data protection, digital identity, Digital identity management, Federal Office for Information Security, ID token, Identity Provider, Interoperability, IT Security, OAuth 2.0, OIDC, OpenID Connect, PKI, Privacy, Prototyping, Public Key Infrastructure, Relying Party, Safety standards, Single Sign-On, Software development, Software quality, User Info Endpoint, X.509 certificates, Zero Trust, Zero Trust Architecture|

With OpenID Connect, we delve deeper into the world of authentication and identity verification and shed light on OpenID Connect - or OIDC for short. This protocol is at the heart of modern digital identity systems and enables us to access a wide range of digital services securely and efficiently. But what makes OpenID so special and why is it indispensable for digital identity management?

Jetzt weiterlesen

OSI model

Sascha Block2024-04-19T12:47:52+02:00Tags: Application layer, Communication systems, Data backup layer, Data transmission, Decapsulation, Education, Encapsulation, Encryption, Error analysis, Interoperability, IT infrastructure, IT Security, Network architecture, Network design, Network devices, Network layer, Network management, Network protocols, Physical layer, Presentation layer, Protocol development, Session shift, Standardization, Training, Transport layer|

What is the OSI model? The OSI model, short for "Open Systems Interconnection" model, is a fundamental framework for communication in networks of different systems. Why should you know the layers of the OSI model? The OSI model - indispensable for comprehensive IT security!

Jetzt weiterlesen

Refresh Token

Sascha Block2024-07-11T15:51:41+02:00Tags: Access Token, Administrative complexity, API, APIs, Apps, Authentication, blockchain-based solutions, Cloud security, Cloud services, Compliance, Cryptography, Data protection standards, Decentralized identities, DIDs, digital authentication systems, Flexibility, IT Security, Key areas, Refresh Tokens, Regulatory challenges, Scalability, Secure network protocols, Security, Security risks, Server infrastructure, Software Architecture, Technology improvements, Token, Tokens, User Experience|

What is a refresh token? Refresh tokens are essential components of modern authentication systems and an indispensable element in protocols such as OAuth 2.0 to enable the secure management of access rights to web resources. Find out more about how Refresh Token works and its life cycle...

Jetzt weiterlesen

SPRIND prototyping competition for digital wallets

Sascha Block2024-05-30T18:29:28+02:00Categories: Prototyping|Tags: Anonymity, Authentication, Authorization, BfDI, BMI, BSI, Certificates, Compliance, Cybersecurity, DARPAofEurope, DataEthics, DataProtection, Digital transformation, DigitalAgency, DigitalEU, DigitalIdentity, DigitalSovereignty, DigitalWallet, eIDAS, EUDI, EUDigital, EUGovernance, Fintech, FutureOfIdentity, GovTech, IAM, Identification, Identities, Identity, Identity Management, IdentityTheftProtection, IdentityVerification, Innovation, IT Security, ITSecurity, LegalTech, Privacy, PrivacyByDesign, PublicKeyInfrastructure, SecureIdentity, Security, SmartID, SPRIND, SPRIND - Federal Agency for Leap Innovations, TechCompetition, TechnologyTrends, Trust, Trust models, UserExperience, UXDesign, ZeroKnowledgeEvidence|

In the first nomination round of the prototyping competition in SPRIND's EUDI Wallet Prototypes innovation competition, 6 teams were nominated. A remarkable milestone for digital identities and an efficient approach to developing digital technologies. This competition clearly differs from traditional public tenders due to its prototypical approach and emphasizes the importance of agile and user-centric software applications.

Jetzt weiterlesen

Token for authentication – Access Token, Refresh Token and Bearer Token

Sascha Block2024-07-20T17:41:14+02:00Categories: IT Security|Tags: Access Tokens, Authentication systems, Compromised tokens, CORS, Data misuse, Data security, Data security, Digital security, Direct access, Fast response, HTTPS, IT Security, Long-term risk, Longevity, Management strategies, mobile apps, OAuth 2.0, OpenID Connect, Refresh Tokens, Resource access, Safe storage, Security architecture, Security management, Security risks, Service life, Short life, Token binding, Token renewal, Token validation, User data, Web applications|

Are you familiar with the tokens for authentication? You should definitely know the differences between Access Token, Refresh Token and Bearer Token! We explain to you in easy-to-understand terms what is important to protect your data effectively...

Jetzt weiterlesen

Zero Trust – Beyond VPN: Why the Virtual Private Network is in the Shadow of Zero Trust

Sascha Block2023-12-08T08:57:26+01:00Categories: Cryptography, IT infrastructure, IT Security, Podcast, Software Architecture, Software development|Tags: Access Management, Authentication, Authorization, Confidentiality, Data Loss Prevention, HashiCorp, HashiCorp Vault, Identity Management, Integrity, IT Security, Micro-segmentation, Network Security, Network segmentation, Remote work, Software Defined Perimeter, Vault, Virtual Private Network, VPN, Zero Trust, Zero Trust Concept, Zero Trust Framework, Zero Trust-Approach, Zero Trust-Model|

Zero Trust - Beyond VPN: Why the Virtual Private Network is in the Shadow of Zero Trust - Easy to Understand: A Compact Guide to a Zero Trust Strategy Based on the Zero Trust Framework In this fifth Rock the Prototype Podcast episode, it's all about the revolutionary topic of IT security: zero trust. We wonder why the tried-and-true Virtual Private Network (VPN) is increasingly taking a back seat in the age of Zero Trust. Learn why implementing a Zero Trust approach requires new alternatives and how modern technologies can complement or even replace VPN. Dive into full of insights around IT and innovation.

Jetzt weiterlesen

IT Security

OpenID Connect – A key to digital identities

OSI model

Refresh Token

SPRIND prototyping competition for digital wallets

Token for authentication – Access Token, Refresh Token and Bearer Token

Zero Trust – Beyond VPN: Why the Virtual Private Network is in the Shadow of Zero Trust

Cookies von Drittanbietern