“…OSA also standardizes a framework that is responsible for the security of the OSA gateway, which includes authenticating client applications and controlling access to the different services. (See [18] and [23] for a discussion of OSA and the framework. )…”