Authentication and Authorization

What is access control?

Access control is the technology to secure your confidential data. It is a system that gives access or denies access to data depending upon the permission given to the user by the authority/host.

An access control system is of two types:

• Physical
• Information/Data

Physical access control systems are used n buildings and offices to control the entry of individuals into the premises.

Information/Data access control systems are used on computer networks in offices to secure confidential data. This system will only give access to data to individuals to which they are allowed. Thus, an data might be stored in all computers but ony users with access can get it.

Access Control vs Authorization

Authentication is the process by which an individual identity is verified by the system. This will let the system know what the user has access to and to what not.

Access Control vs Authorization

This is the next step after the user has passed the authentication process.

Just like authentication, authorization is also a step in the process of access control.

Access Control vs Access Management

Access Management is planning the flow of access to information to employees/individuals over a network of computers or any private room or premises.

Access Management is the first step or plan for an access control system.