Difference Between Authentication and Authorization

Authentication -

Authentication is an authentication procedure, for example:

authentication of the user by comparing the password entered by him (for the specified login) password stored in the database of user logins;

confirmation of the authenticity of the e-mail by checking the digital signature of the letter sender key;

checking the checksum of the file for compliance with the amount claimed by the author of this file.

In Russian, the term is used mainly in the field of information technology.

Given the level of trust and security policies of the systems, the authentication process can be be one-sided or reciprocal.

This is usually done using cryptographic methods.

Authentication should not be confused with authorization (a procedure for granting certain rights to the subject) and identification (the procedure for recognizing the subject by his identifier).

wiki

Authorization -

Authorization – granting a certain person or group of persons the right to perform certain actions; as well as the process of verifying (confirming) these rights when trying to perform these actions.

It is often said that someone is “authorized” to do this. The operation means he has the right to it.

Authorization should not be confused with authentication, the procedure for verifying the legality of the user. or data, for example, checking the compliance of the password entered by the user with the account password recording in the database, or checking the digital signature of the letter by key encryption, or checking the checksum of the file for compliance with the declared author of this file.

Authorization controls access to various system resources in the process of operation. Legal users after successful authentication.

wiki