MERCIFUL PARADISE ACADEMY
MAINTENANCE
UNIT 3
COMPUTER NETWORKING
Authentication and Authorization
Authentication and Authorization are utilized in data security, allowing the safeguarding of an
automated data system. Both are very crucial topics often associated with the internet as key
components of its service infrastructure. However, each term is distinct, representing different
concepts.
What is Authentication?
Authentication is the method of verifying the identity of a consumer or system to ensure they're
who they claim to be. It involves checking credentials which include usernames, passwords, or
biometric information like fingerprints or facial recognition. This step is vital for securing access
to systems, programs, and sensitive records.
There are different types of authentication systems which are:
1. Single-Factor authentication:
On this authentication system, the user has to enter the username and the password to confirm
whether that user is logging in or not. Now if the username or password is wrong, then the user
will not be allowed to log in or access the system.
Advantages of the Single-Factor Authentication System:
• It is a very simple to use and straightforward system.
• it is not at all costly.
• The user does not need any huge technical skills.
Disadvantages of the Single-Factor Authentication:
• It is not at all password secure. It will depend on the strength of the password entered by
the user.
• The protection level in Single-Factor Authentication is much low.
2. Two-factor Authentication:
In this authentication system, the user has to give a username, password, and other information.
There are various types of authentication systems that are used by the user for securing the
system.
Some of them are:
• wireless tokens and virtual tokens
• OTP and more.
MERCIFUL PARADISE ACADEMY
MAINTENANCE
Advantages of the Two-Factor Authentication
• The Two-Factor Authentication System provides better security than the Single-factor
Authentication system.
• The productivity and flexibility increase in the two-factor authentication system.
• Two-Factor Authentication prevents the loss of trust.
Disadvantages of Two-Factor Authentication
• It is time-consuming
3. Multi-Factor authentication system:
In this type of authentication, more than one factor of authentication is needed. This gives better
security to the user. Any type of keylogger or phishing attack will not be possible in a Multi-Factor
Authentication system. This assures the user, that the information will not get stolen from them.
The advantages of the Multi-Factor Authentication System are:
• No risk of security.
• No information could get stolen.
• No risk of any key-logger activity.
• No risk of any data getting captured.
The disadvantages of the Multi-Factor Authentication System are:
• It is time-consuming.
• it can rely on third parties.
Operating Systems generally identify/authenticates users using the following 3 ways: Passwords,
Physical identification, and Biometrics. These are explained as following below.
• Passwords: Password verification is the most popular and commonly used authentication
technique. A password is a secret text that is supposed to be known only to a user. In a
password-based system, each user is assigned a valid username and password by the
system administrator. The system stores all usernames and Passwords. When a user logs
in, their user’s name and password are verified by comparing them with the stored login
name and password. If the contents are the same then the user is allowed to access the
system otherwise it is rejected.
• Physical Identification: This technique includes machine-readable badges(symbols),
cards, or smart cards. In some companies, badges are required for employees to gain access
to the organization’s gate. In many systems, identification is combined with the use of a
password i.e., the user must insert the card and then supply his /her password.
MERCIFUL PARADISE ACADEMY
MAINTENANCE
• Biometrics: This method of authentication is based on the unique biological
characteristics of each user such as fingerprints, voice or face recognition, signatures, and
eyes.
• A scanner or other devices to gather the necessary data about the user.
• Software to convert the data into a form that can be compared and stored.
• A database that stores information for all authorized users.
• Facial Characteristics - Humans are differentiated on the basis of facial characteristics
such as eyes, nose, lips, eyebrows, and chin shape.
• Fingerprints - Fingerprints are believed to be unique across the entire human population.
• Hand Geometry - Hand geometry systems identify features of the hand that includes the
shape, length, and width of fingers.
• Retinal pattern - It is concerned with the detailed structure of the eye.
• Signature - Every individual has a unique style of handwriting, and this feature is reflected
in the signatures of a person.
• Voice - This method records the frequency pattern of the voice of an individual speaker.
• OTP(One time password): it is a unique code that is valid for only one login session or
transaction. It is used to verify the identity of a user as an extra layer of security,
especially in two-factor authentication (2FA) systems.
What is Authorization?
Authorization is the method of figuring out and granting permissions to a demonstrated user or
system, specifying what assets they can access and what actions they're allowed to carry out. It
comes after authentication and guarantees that the authenticated entity has the proper rights to
use certain data, applications, or services. This step is important for implementing protection
guidelines and controlling access within the system, thereby stopping unauthorized activities.
Conclusion
Authentication verifies the identity of a person or device, at the same time as authorization
determines their access rights and permissions within a device. Together, they make sure that
users aren't only who they claim to be but also have the permissions to perform certain actions or
access certain sources.