Communications and Information: Identification and Authentication.

摘要

This manual provides information system users, system administrators, workgroup managers, and CSSOs with proper identification and authentication (I&A) procedures. 'Identification' is the process where individuals identify themselves to a system as a valid user. 'Authentication' is the procedure where the system verifies the user has a right to access the system User identifications (user-ID) and passwords, because of their cost-efficiency and ease of implementation, are the most common I&A method. Because of their vulnerability to interception or inadvertent disclosure, they are also the weakest of I&A methods. Passwords are only effective when used properly. Inappropriate passwords create some of today's most common information system vulnerabilities.