Re: Define identification, authentication and authorization...

rcarhuatocto — Thu, 10 May 2007 11:44:24 GMT

Hi all,

I agree with all definitions, but I have a point of view different on AuthN.

IMHO, AuthN is a verification process of one or many credentials. A credential can be a personal identification information (National ID card, passport, your address, your confidential information as birthday, age, etc.), a attribute or characteristic personal (over 18), inclusive could be a "capacity" (i.e. have money or any attribution).

The "capacity" is relative and dynamic. In fact, there are repositories of "capacities" and there are TTP providing services of validation (i think that is correct way) of said "capacities".

See PASSI (Catalonian Initiative for IdM and Capacities) at http://www.projectliberty.org/liberty/resource_center/presentations_webcasts

The X.509 certificates and/or Attributes Certificates are/was a initial initiative of to carry together identity information with attribution/capacity.

Best regards.

-roger

Re: Define identification, authentication and authorization...

mcurphey — Wed, 02 May 2007 07:42:17 GMT

Identification is a claim as to who you are

Authenticaiton is proving it

Search results matching tag 'identification authentication and authorization'

Re: Define identification, authentication and authorization...

Re: Define identification, authentication and authorization...