%% You should probably cite draft-ietf-ace-group-oscore-profile instead of this I-D. @techreport{tiloca-ace-group-oscore-profile-01, number = {draft-tiloca-ace-group-oscore-profile-01}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-tiloca-ace-group-oscore-profile/01/}, author = {Marco Tiloca and Rikard Höglund and Ludwig Seitz and Francesca Palombini}, title = {{Group OSCORE Profile of the Authentication and Authorization for Constrained Environments Framework}}, pagetotal = 35, year = ** No value found for 'doc.pub_date.year' **, month = ** No value found for 'doc.pub_date' **, day = ** No value found for 'doc.pub_date.day' **, abstract = {This document specifies a profile for the Authentication and Authorization for Constrained Environments (ACE) framework. The profile uses Object Security for Constrained RESTful Environments (OSCORE) and/or Group OSCORE to provide communication security between a Client and (a group of) Resource Server(s). Furthermore, the profile uses (Group) OSCORE to provide server authentication, and OSCORE to achieve proof-of-possession for a key owned by the Client and bound to an OAuth 2.0 Access Token. Also, the profile provides proof-of-group-membership for the Client, by securely binding the pre-established Group OSCORE Security Context to the pairwise OSCORE Security Context newly established with the Resource Server.}, }