Authentication & Authorisation
Authentication defines who you are
Authorisation determines what you can do or what you can access, once authenticated
different authentication mechanisms
- shared secret (e.g. user ID & password)
- exchange trusted token (card; certificate)
- personal recognition (signature; biometrics)
technology alone is not the full answer!