The IT Law Wiki
Advertisement

Definitions[]

An authentication service is "[a] security service that verifies an identity claimed by or for an entity."[1]

An authentication service

delivers proof that the identity of an object or subject has indeed the identity it claims to have. Depending on the type of actor and on the purpose of identification, the following kinds of authentication may be required: user authentication, peer entity authentication, data origin authentication. Examples of mechanisms used to implement the authentication service are passwords and Personal Identification Numbers (PINs) (simple authentication) and cryptographic-based methods (strong authentication).[2]

Overview[]

"In a network, there are two general forms of authentication service: data origin authentication service and peer entity authentication service."[3]

References[]

  1. Internet Security Glossary (RFC 4949) (Ver. 2) (Aug. 2007).
  2. ITU, "Compendium of Approved ITU-T Security Definitions," at 6 (Feb. 2003 ed.) (full-text).
  3. Internet Security Glossary (RFC 4949) (Ver. 2) (Aug. 2007)
Advertisement