Authentication(인증) vs Authorization(권한)

자주 헷깔리는 용어.

Authentication(인증)

    자격을 부여 (the mechanism whereby systems may securely identify their users)

    * who ?

Authorization(권한)

    자격이 있는 경우 사용할 수 있는 범위 (the mechanism by which a system determines what level of access a particular authenticated user should have to secured resources controlled by the system)

    * access resource ?

    * perform operation ?

참고: http://www.duke.edu/~rob/kerberos/authvauth.html