1. Considering issues regarding handling token
Group Name: WG4 (SEC)
Source: Shingo Fujimoto, FUJITSU,
Meeting Date:
Agenda Item: Access control & API

2. Background Token based authorization is studied in Security TR
There are some gap will be exist to apply the existing solution to M2M platform
This contribution clarify the issues regarding handling tokens from study of OAuth 2.0 systems.

3. OAuth 2.0
See details at:

4. OAuth 2.0 (another use) See details at:

5. Apply OAuth to M2M Platform

6. Scope of M2M Platform

7. Functional Requirement
Both CSE and AE
Storing token associated with target Resource(s)
Provide required token when accessing to targeted Resource(s)
For CSE only
Storing authorization context associated with target Resource(s)
Issuing token responding Authorization request [optional]

8. Conclusion Discussion point Proposal
Review the proposed flow for OAuth usage in oneM2M architecture
Consider Authorization Server is in or out of the CSE (at infrastructure node)
Proposal
Define necessary Resources and its attributes