What is the difference between authentication and
authorization
?
Answers were Sorted based on User's Feedback
Authentication
An authentication system is how you identify yourself to
the computer. The goal behind an authentication system is
to verify that the user is actually who they say they are.
There are many ways of authenticating a user.Like
Password based authentication
Device based authentication
Biometric Authentication
Authorization
Once the system knows who the user is through
authentication, authorization is how the system decides
what the user can do.
A good example of this is using group permissions or the
difference between a normal user and the superuser on a
unix system.
| Is This Answer Correct ? | 162 Yes | 10 No |
Answer / ashish nigam
Authentication is to check about user.Through authentication
check the user exist or not .
It check that user exist or not.
Authorization check that authentic user have proper
permission or not to access that particular page or
services.
| Is This Answer Correct ? | 80 Yes | 17 No |
Answer / manoj kumar
An authentication system is how you identify yourself to
the computer. The goal behind an authentication system is
to verify that the user is actually who they say they are.
There are many ways of authenticating a user. Any
combination of the following are good examples.
Password based authentication
Requires the user to know some predetermined quantity
(their password).
Advantages: Easy to impliemnt, requires no special
equipemnt.
Disadvantages: Easy to forget password. User can tell
another user their password. Password can be written down.
Password can be reused.
Device based authentication
Requires the user to posses some item such as a key, mag
strip, card, s/key device, etc.
Advantages: Difficult to copy. Cannot forget password. If
used with a PIN is near useless if stolen.
Disadvantages: Must have device to use service so the user
might forget it at home. Easy target for theft. Still
doesn't actually actively identify the user.
Biometric Authentication
My voice is my passport. Verify me. This is from the movie
sneakers and demonstrates one type of biometric
authentication device. It identifies some physical
charactistic of the user that cannot be seperated from
their body.
Retina Scanners:
Advantages: Accurately identifies the user when it works.
Disadvantages: New technology that is still evolving. Not
perfect yet.
Hand Scanners:
Advantages: Difficult to seperate from the user. Accurately
identifies the user.
Disadvantages: Getting your hand stolen to break into a
vault sucks a lot more than getting your ID card stolen.
Authorization
Once the system knows who the user is through
authentication, authorization is how the system decides
what the user can do.
A good example of this is using group permissions or the
difference between a normal user and the superuser on a
unix system.
There are other more compicated ACL (Access Control Lists)
available to decide what a user can do and how they can do
it. Most unix systems don't impliment this very well (if at
all.)
| Is This Answer Correct ? | 35 Yes | 6 No |
Answer / maskedmenace
Authentication: verifying the user.
Authorised: premission to access.
| Is This Answer Correct ? | 36 Yes | 11 No |
Answer / akbar hussain
in Easy terms Authentication means system understands that both the provided password and username are correct at login , and particulate user is Authenticated to move further.
Authorization:: When above said process is Successfully Completed , now system decides what are the permissions has to be given to this particular user, either Read / Write / Rear and Write (ie.Both)
| Is This Answer Correct ? | 19 Yes | 6 No |
Answer / madhusudhan hareesh
In simple terms Authentication means to identiy a
particular user by computer, and it can be done by some of
like password,device based authentication technologies.
Where as once authentication process completed and the
computer finds the valid user then Is that particular user
had privilage to access particular resources like printers
etc or not comes under authorization.
| Is This Answer Correct ? | 14 Yes | 13 No |
Answer / rahul
An authentication system is how you identify yourself to
the computer. The goal behind an authentication system is
to verify that the user is actually who they say they are.
There are many ways of authenticating a user. Any
combination of the following are good examples.
Password based authentication
Requires the user to know some predetermined quantity
(their password).
Advantages: Easy to impliemnt, requires no special
equipemnt.
Disadvantages: Easy to forget password. User can tell
another user their password. Password can be written down.
Password can be reused.
Device based authentication
Requires the user to posses some item such as a key, mag
strip, card, s/key device, etc.
Advantages: Difficult to copy. Cannot forget password. If
used with a PIN is near useless if stolen.
Disadvantages: Must have device to use service so the user
might forget it at home. Easy target for theft. Still
doesn't actually actively identify the user.
Biometric Authentication
My voice is my passport. Verify me. This is from the movie
sneakers and demonstrates one type of biometric
authentication device. It identifies some physical
charactistic of the user that cannot be seperated from
their body.
Authorization
Once the system knows who the user is through
authentication, authorization is how the system decides
what the user can do.
A good example of this is using group permissions or the
difference between a normal user and the superuser on a
unix system.
| Is This Answer Correct ? | 5 Yes | 10 No |
Define remotable objects in .net remoting?
What are the different types of channels used by .net remoting?
What is an assembly and what does manifest consists ?
Explain Singleton design pattern of Remoting?
About Iunknown interface Queue ,its methods Query Interface Addref,Release and Explain each ?
What is fundamental of published or precreated objects in remoting?
What are static assemblies?
I am developing a project.Title is "Remote Demonstator".Using asp.net and C# Abstact: While administrator moving mouse and clicking on any link in the webpage that action will be performed in Server machine as well as in client machine.The client initially have to log-in and make a phone call to the admin. This is my project. How can i get this? I can create a website but this concept i have to implement in my website.How can i achive this? How to get client system control and how my mouse movings can be visible to client? I request all to please give me a basic idea or some hint. Advance Thanks.
What are remotable objects in .NET Remoting?
What is asynchronous programming?
What do you know about .NET assemblies?
Where are shared assemblies stored?