Authentication VS. Authorization - 认证 VS. 授权

Authentication VS. Authorization - 认证 VS. 授权

Authentication & Authorization are two vital information security process that administrators use to protect system and information.
身份验证和授权是管理员用来保护系统和信息的两个重要的信息安全流程。

• Authentication verifies the identity of a user or service. 身份验证验证用户或服务的身份。
• Authorization determines their access rights. 授权决定了他们的访问权限。

What is Authentication：（身份）认证

Authentication is a process that verifies someone or something is who they say they are, is to verify that someone is who or what they claim to be.
身份验证是验证某人或某物是否是他们所说的人或物的过程，即验证某人是他们声称的人或物。

Example: 例子：用户登录
when you need to access an online site, you usually need to enter your username and password.
you make the system to identify you are the one recorded in the system, rather than a none registered user.
当您需要访问在线站点时，通常需要输入用户名和密码。
您让系统识别出您是系统中记录的用户，而不是未注册的用户。

What is Authorization：（资源）授权

Authorization is the security process that determines the level access of a user or service.
In technology, we use authorization to give users or services permission to access some data or perform a particular action.
授权是确定用户或服务的访问级别的安全过程。
在技术中，我们使用授权来授予用户或服务访问某些数据或执行特定操作的权限。

Example: 例子：用户对系统其它功能的访问权限。