Autentikacijski sustav zasnovan na protokolu OAuth 2.0 za PSD2 platne usluge izložene putem posrednika za nadzor pristupa

master's thesis

• Title (english): OAuth 2.0 Based Authentication for Mediated PSD2-Based Payment Services
• Author: Rafael Špiljak
• Mentor: Dejan Škvorc (mentor)
• Committee member: Dejan Škvorc (predsjednik povjerenstva)
• Committee member: Stjepan Groš (član povjerenstva)
• Committee member: Vlado Sruk (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2022-07-06, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Posrednik za nadzor pristupa platnim uslugama može se nalaziti u računalnom oblaku
ili u informacijskom sustavu platne institucije. Kako bi se dodao dodatan sloj zaštite po-
srednik za nadzor pristupa filtrira i analizira sve zahtjeve usmjerene prema platnoj instituciji,
u smjeru poboljšanja filtera i sustava analize, OAuth autorizacijski sustav tako ̄der se izlaže
posrednikom za nadzor pristupa. Svaki zahtjev na autorizacijskom poslužitelju proslje ̄duje
se filteru za zahtjeve kako bi filter imao uvid u svaki dio komunikacije. S obzirom na to da
filter ima pohranjenu potpunu povijest komunikacije, filter može upotrijebiti te podatke za
sprejčavanje neobičnih zahtjeva.

Abstract (english)

PSD2 proxy can be hosted either in the cloud or in the information system of ASPSP. To add
a layer of security to PSD2 proxy is filtering and analyzing every request directed towards
ASPSPs PSD2 interface. In order to improve filtering and analysis, OAuth 2.0 authorization
service is also exposed by proxy, in which every request and response ends up forwarded
towards the filtering part of PSD2 proxy. By doing soo filtering now has a full history of all
PSD2 and authorization requests which can be used to recognize and stop irregular requests
from being executed.

• Keywords: OAuth 2.0; autorizacija; autentikacija; PSD2; posrednik; nadzor pristupa
• Keywords (english): OAuth 2.0; authorization; authentication; PSD2; proxy; firewall
• Language: croatian
• URN:NBN: urn:nbn:hr:168:013436
• Study programme: Title: Computing; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka računarstva (magistar/magistra inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-13 16:18:27