The process by which an entity (such as a
person or computer system) determines whether another entity is who it claims
to be. Authentication involves using
credentials; i.e., driver’s license, password, biometrics, etc., either
initially or in comparison to credentials on already on file, to prove and
confirm identity. Authentication is
different from authorization: proper authentication ensures truth of identity,
and then based on the authentication, authorization may be the next step to
grant access rights.