All,
In the face-to-face meeting there was a discussion about the following
three areas
Authentication
Authorization
Rights
During the discussion, it was stated that Authorization and Rights are
the same thing. I thought the terms had slightly different meaning;
more precisely different meaning depending on context; that is,
Authentication refers to "are you who you say you are". Applies to
users mostly but also applies to devices.
Authorization refers to "you are allowed to do and/or use this equipment
and these capabilities, etc. Applies to a user in reference to a
device.
--- User A is authorized to print on printer A, in color,
Monday-to-Friday.
Rights, more specifically, Digital Rights refers to "you are allowed to
do and/or use this content (document) and how. Applies to a user in
reference to a document.
--- User A has the rights to view this document only.
Are these broad distinctions basically correct; so that Authorization
should not be construed to be Rights.
Glen
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.pwg.org/pipermail/ids/attachments/20100413/3372ddc1/attachment-0001.html>