第11章楼盖-分析.ppt

* Identification Who are you? Create login ID’s to identify users. Authentication Is that really you? Verify identify via password, PIN, biometrics, etc… Authorization Are you allowed to do what you’re trying to do? Role-Based Access Control (RBAC) is used for easy authorization maintenance Confidentiality Assurance that the information is shared only among authorized entities. Use encryption to prevent eavesdropping. Integrity Assurance that the information is accurate, authentic, and complete. Verify that data was not garbled/lost/changed during transmission. Non-Repudiation Records prove th