Internet Drafts

KYAPay Profile

This document defines a profile for agent identity and payment tokens in JSON web token (JWT) format. Authorization servers and resource servers from different vendors can leverage this profile to consume identity and payment tokens in an interoperable manner.

GitHub | IETF Datatracker (Skyfire)

Using KYAPay Tokens

This document describes how security intermediaries -- bot managers, fraud managers, account-takeover (ATO) protection systems, and customer identity and access management (CIAM) systems -- consume KYAPay tokens to answer a question that traditional bot detection cannot: not "is this a human or a bot?", but "did a verified human authorize this agent?".

GitHub | IETF Datatracker (Skyfire | Akamai)

KYAPay Token Exchange

This specification describes how KYAPay tokens can be exchanged for OAuth access tokens to dynamically grant agents access to resources they need to accomplish their mission.

GitHub | IETF Datatracker (Skyfire | Okta | Ory)

Identity Verification Methods Values

Knowing how a person's identity was verified can be important when making trust decisions. This specification defines a claim and values for declaring how the person's identity was verified.

GitHub | IETF Datatracker (Skyfire | Experian | Akamai)

Additional Authentication Method Reference Values

The JWT "amr" (Authentication Methods References) claim contains values conveying authentication methods used in the authentication. This specification defines additional Authentication Method Reference values beyond those already registered to represent additional authentication methods in use today.

GitHub | IETF Datatracker (Skyfire | Experian | Akamai)

Anti-Money Laundering Methods Values

Financial regulations require application of Anti-Money Laundering (AML) and Countering the Financing of Terrorism (CFT) methods in many jurisdictions worldwide. This specification defines a claim and values for declaring what AML/CFT methods were employed.

GitHub | IETF Datatracker (Skyfire | Experian)