What Is Mean By Authentication And Authorization In Security Field?

Question

What Is Mean By Authentication And Authorization In Security Field?

2 Answers

Answer Question

Answer 1

The definition of authentication is to authenticate the identity of someone or a document.
In the computer field, it is used by registering with a username and password which is secret to the user, so that, when necessary that person can be identified and authenticated via the password.
In the case of authorisation, this is used on a site that has restricted access, so without permission, access can be denied.
As technology improves fingerprint identification for access, and iris identification, will make top level security harder to crack.
Secondly authorisation is used for payments made by computer. The identity is authorised via codes, and then the number is given and the amount of a financial transaction to be done over the internet, the bank in question authorises the money to be withdrawn from the account of the purchaser, and paid over to the merchant. In a secured and authorised fashion.

Answer 2

Both the terms "authentication and authorization" are used for the security purpose, usually in the computer software.Authentication in broad sense is some type of operation of verifying something as valid; by authentication we mean that what is correct and valid thing.

Object authentication and person authentication is a different thing; the object authentication is that, we verify that object's origin, while the person authentication is that, we verify the person's identity.While in terms of security of computer, authentication is some sort of procedure via which the identity of an individual who is the initiator of the communication is verified .for example when the person logs-in into any thing either the computer application software, or logging to the computer then the person authentication is required.

In general authentication is a way to guarantee that the user individual who is using the computer applications, so that individual is authorized or not.While the term authorization is used mostly in the networking, authorization is that when the compute administrator of the network gives the right to a person to use the pc also gives the facility to do work on it along with his data storage facility. The administrator give the password of that particular system in the network, to the user, that he can use that computer independently, and use the recourses attach to that computer.