Authentication
Meaning:
Authentication is the process of verifying a users identity and establishing that they are who they say they are.
Example:
- A known set of credentials to the server and user such as a password and username
- Token authentication (these are unique pieces of encrypted text)
- Biometric authentication (fingerprints, retina data, etc.)
Authentication vs. Authorization:
Authentication is often used interchangeably with authorization, but is very different. Authorization is a term for the rules defining what an authenticated user can and cannot access.
Authentication is used when there is a necessity to know who is accessing pieces of data or information to create accountability – protecting the Confidentiality
element of the CIA
(Confidentiality, Integrity, and Availability (CIA
) is the opposite of Disclosure, Alternation, and Destruction (DAD
)) triad.