Authentication, Authorization and Accounting (AAA)
The difference between authentication, authorization and Accounting is easily misunderstood, yet these are three important and fundamental terms in the framework for intelligently controlling access to Computer or Internet resources, enforcing policies, auditing usage and providing the information necessary to bill services. The confusion might arise, perhaps because, from the perspective of some users, the three processes appear to happen at the same time.
Authentication is any process by which you verify that someone is who they claim they are essentially authentication verifies identity. We are probably familiar with the concept of authentication; which is the way that security systems challenge us to prove we are the customer, user, or employee whom we claim to be by using a password, token, smart card, retina scan, voice recognition, fingerprints or other forms of credential. We can also be required to show our passport, driver’s license, etc . It is possible that some of us are less familiar with the concept of authorization and the related term “access control”.