Original: Kerberos works on the basis of "tickets" which serve to prove the identity of users.
Simplified: Kerberos works on the basis of "tickets" (called Kerberos tickets) which serve to prove the identity of users.