Formats

How is it encoded

• By value

• By reference

Reference

Opaque to the holder

Can not be decrypted or decoded

Requires call to the Authorization server to read and validate

Safer to use on the Internet

Purpose - who is it for

Type - how can it be used

• Bearer

• Holder of Key (HoK) / Proof of Possession (PoP)