Cyber security基本概念, 2023-08-29

(2023.08.29 Tues)

credential Vs. token

• Credential: 身份或状态或特权(priviledge)的证明书，如护照，id卡，userid&password.
• Token：something serving as an expression of something else; sign, symbol 表达其他东西，一般表达为一个字符串

authentication VS. authrisation

• Authentication：身份验证，the process of verifying who a user is by comfirming credentials, e.g., username&password，证明用户是谁的过程
• Authorisation：授权书，the process of verifying what they have access to，证明用户有权限的过程，可能针对不同的用户提供不同的授权级别。