Secure Access: terminology
Access Control (or Authorization)
- Assurance that the person or computer at the other end of the session is permitted to do what he asks for.
Authentication
- Assurance that the resource (human or machine) at the other end of the session is what it claims to be
Integrity
- Assurance that the information that arrives is the same as when it was sent
Accountability (or non-repudiation)
- Assurance that any transaction that takes place can subsequently proved to have taken place
Privacy
- Assurance that sensitive information is not visible to an eavesdropper (usually achieved using encryption)