Http json restfull client/server with hmac-sha1 security