AAA protocol
In
computer security, AAA stands for “authentication, authorization and accounting”. Authentication
Authentication refers to the confirmation that a user who is requesting services is a valid user of the network services requested. Authentication is accomplished via the presentation of an identity and credentials. Examples of types of credentials are
passwords, one-time tokens,
digital certificates, and phone numbers (calling/called).Authorization
Authorization refers to the granting of specific types of
service (including "no service") to a user, based on their authentication, what services they are requesting, and the current system state. Authorization may be based on restrictions, for example time-of-day restrictions, or physical location restrictions, or restrictions against multiple
logins by the same user. Authorization determines the nature of the service which is granted to a user. Examples of types of service include, but are not limited to:
IP address filtering, address assignment,
route assignment,
QoS/differential services,
bandwidth control/
traffic management, compulsory
tunneling to a specific
endpoint, and
encryption.
See more at Wikipedia.org...
Protocole AAA
Protocollo AAA
In
telematica, e in particolare nelle reti di telecomunicazione o
di computer, un protocollo AAA è un
protocollo che realizza le tre funzioni di
autenticazione (authentication), controllo degli accessi (authorization) e tracciamento del consumo delle risorse da parte degli utenti (
accounting).L'espressione protocollo AAA non si riferisce dunque a un particolare protocollo ma a una famiglia di protocolli che offrono, anche in modi diversi, i servizi citati.
Per saperne di più visita Wikipedia.org...
AAA (компьютерная безопасность)
AAA (от ) — используется для описания процесса предоставления доступа и контроля за ним.Authentication (аутентификация) — сопоставление персоны (запроса) существующей учётной записи в системе безопасности. Осуществляется по
логину,
паролю,
сертификату,
смарт-карте и т.д.Authorization (авторизация, проверка полномочий, проверка уровня доступа) — сопоставление учётной записи в системе (и персоны, прошедшей аутоидентификацию) и определённых полномочий (или запрета на доступ). В общем случае авторизация может быть "негативной" (пользователю А запрещён доступ к
серверам компании).Accounting (учёт) — слежение за потреблением ресурсов (преимущественно сетевых) пользователем.
Продолжение на Wikipedia.οrg...