An Extensive Formal Security Analysis of the OpenID Financial-grade API

Daniel Fett, Pedram Hosseyni, Ralf Kuesters

Forced by regulations and industry demand, banks worldwide are working to open their customers' online banking accounts to third-party services via web-based APIs. By using these s…