存取控制
Access control is generally considered in three steps: identification, authentication, and authorization.