AAA - Authentication, Authorization, Accounting

Question 1

Identification

Answer 1

This is who you claim to be
Usually your username

Question 2

Authentication

Answer 2

Check between your username and password to prove your identity.

Question 3

Authorization

Answer 3

This determines type of access, based on your identification and authorization.

Question 4

Accounting

Answer 4

All security systems need to have a log of what’s happened, time of logging, how much date used or send and received and logout time

Question 5

Authenticating example - vpn logging

Answer 5

Client on the internate => password to vpn concentrator => sending ask of matching to AA server to check credentials => credentials approved => access to internal server

Question 6

Device certificate

Answer 6

This certificate is put on the device and checked during the login process, can be by vpn concentrator or by the software

Question 7

Authorization models

Answer 7

We will authorize users and services by associating individual users to access right does not scale. You must create scalable authorization model, define by roles, attributes etc.