The process by which an entity (such as a person or computer system) determines whether another entity is who it claims to be. Authentication involves using credentials; i.e., driver’s license, password, biometrics, etc., either initially or in comparison to credentials on already on file, to prove and confirm identity. Authentication is different from authorization: proper authentication ensures truth of identity, and then based on the authentication, authorization may be the next step to grant access rights.