Access Control Strategies

Access Control Strategies

1. Identification

   • Is the assertion of a unique identity for a person, system or device
     • Critical first step in access control
       • Binds a user to appropriate controls based on that unique user instance
   • Provides Uniquesness

2. Authentication

   • Process of verifying the identity of a user
     • Usually some form of private data known only by the user
       • Comination of identity and private information verifies the users identity
         • Enables trust between user and the systems for allocated privileges
   • Provides Validity

3. Authorisation

   • Final step after Identification and authentication
     • Resources user is allowed access to the must be defined and monitored
   • Provides Control