4.1.10 Useability End users will come into contact with this system every day. Interfaces should be simple and sources of help well documented. 5.4 Design Notes Don t forget the note on possibility of common profile data provided with centralized authentication. The definitions below do not try to capture the way we believe the defined terms should interrelate or the larger context in which they should operate. The hope is that with agreement on those terms we can isolate and clarify core differences of opinion on crucial security issues.
Network object A networked device, application, process or information resource.
The verification by a network security service that a principal is who or what it claims to be. The determination by a network security service of what access rights, if any, a principal has to a given network object. Other authorization servers may be established as needed. They may additionally draw on local or other specialized sets of profile data. Profile data Data that describes the attributes of principals and network objects relevant to authorization.