WordNet

endowed with authority (同)authorised
without official authorization; "an unauthorized strike"; "wildcat work stoppage" (同)unauthorised, wildcat
not endowed with authority (同)unauthorised
the maximum number of shares authorized under the terms of a corporations articles of incorporation (同)authorized stock, capital_stock
grant authorization or clearance for; "Clear the manuscript for publication"; "The rock star never authorized this slanderous biography" (同)authorise, pass, clear

PrepTutorEJDIC

権限を与えられた / 正式に認可された,認められた
〈人〉‘に'(…する)権限を与える《+『名』〈人〉+『to』 do》 / 〈物事〉'を'正式に認可する,公認する;(慣例によって)…'を'認める

Wikipedia preview

出典(authority):フリー百科事典『ウィキペディア（Wikipedia）』「2016/06/27 10:03:18」(JST)

wiki en

Authorization or authorisation is the function of specifying access rights to resources related to information security and computer security in general and to access control in particular. More formally, "to authorize" is to define an access policy. For example, human resources staff is normally authorized to access employee records and this policy is usually formalized as access control rules in a computer system. During operation, the system uses the access control rules to decide whether access requests from (authenticated) consumers shall be approved (granted) or disapproved (rejected). Resources include individual files or an item's data, computer programs, computer devices and functionality provided by computer applications. Examples of consumers are computer users, computer programs and other devices on the computer.

Overview

Access control in computer systems and networks rely on access policies. The access control process can be divided into the following two phases: 1) policy definition phase where access is authorized, and 2) policy enforcement phase where access requests are approved or disapproved. Authorization is thus the function of the policy definition phase which precedes the policy enforcement phase where access requests are approved or disapproved based on the previously defined authorizations.

Most modern, multi-user operating systems include access control and thereby rely on authorization. Access control also uses authentication to verify the identity of consumers. When a consumer tries to access a resource, the access control process checks that the consumer has been authorized to use that resource. Authorization is the responsibility of an authority, such as a department manager, within the application domain, but is often delegated to a custodian such as a system administrator. Authorizations are expressed as access policies in some types of "policy definition application", e.g. in the form of an access control list or a capability, on the basis of the "principle of least privilege": consumers should only be authorized to access whatever they need to do their jobs. Older and single user operating systems often had weak or non-existent authentication and access control systems.

"Anonymous consumers" or "guests", are consumers that have not been required to authenticate. They often have limited authorization. On a distributed system, it is often desirable to grant access without requiring a unique identity. Familiar examples of access tokens include keys and tickets: they grant access without proving identity.

Trusted consumers are often authorized for unrestricted access to resources on a system, but must be authenticated so that the access control system can make the access approval decision. "Partially trusted" and guests will often have restricted authorization in order to protect resources against improper access and usage. The access policy in some operating systems, by default, grant all consumers full access to all resources. Others do the opposite, insisting that the administrator explicitly authorizes a consumer to use each resource.

Even when access is controlled through a combination of authentication and access control lists, the problems of maintaining the authorization data is not trivial, and often represents as much administrative burden as managing authentication credentials. It is often necessary to change or remove a user's authorization: this is done by changing or deleting the corresponding access rules on the system. Using atomic authorization is an alternative to per-system authorization management, where a trusted third party securely distributes authorization information.

Related interpretations

Public policy

In public policy, authorization is a feature of trusted systems used for security or social control.

Banking

In banking, an authorization is a hold placed on a customer's account when a purchase is made using a debit card or credit card.

Publishing

In publishing, sometimes public lectures and other freely available texts are published without the consent of the author. These are called unauthorized texts. An example is the 2002 'The Theory of Everything: The Origin and Fate of the Universe' , which was collected from Stephen Hawking's lectures and published without his permission as per copyright law.

References

UpToDate Contents

全文を閲覧するには購読必要です。 To read the full text you will need to subscribe.

1. C型肝炎と輸血：「lookback」プライマー hepatitis c and transfusion a lookback primer
2. ホスピス：治療理念および適切な利用 hospice philosophy of care and appropriate utilization
3. HIV感染患者における薬物乱用および中毒 substance abuse and addiction in hiv infected patients
4. 肝移植における倫理的問題 ethical issues in liver transplantation
5. 幼児および小児における赤血球輸血：血液製剤の選択 red cell transfusion in infants and children selection of blood products

English Journal

Development and applicability of a ready-to-use PCR system for GMO screening.

Rosa SF1, Gatto F2, Angers-Loustau A3, Petrillo M4, Kreysa J5, Querci M6.
Food chemistry.Food Chem.2016 Jun 15;201:110-9. doi: 10.1016/j.foodchem.2016.01.007. Epub 2016 Jan 6.
With the growing number of GMOs introduced to the market, testing laboratories have seen their workload increase significantly. Ready-to-use multi-target PCR-based detection systems, such as pre-spotted plates (PSP), reduce analysis time while increasing capacity. This paper describes the developmen
PMID 26868555

Assessment of the usability and impact of the Idaho Health Data Exchange (IHDE).

Reis J1, MacKenzie L2, Soelberg T3, Smith J4.
Journal of medical systems.J Med Syst.2016 Apr;40(4):102. doi: 10.1007/s10916-016-0445-1. Epub 2016 Feb 13.
Eighty four health care professionals participated in an online survey assessing the usability, and clinical and administrative impact of the Idaho Health Data Exchange's (IHDE) Virtual Health Record (VHR). The IHDE VHR allows authorized users to use a secure web interface to view lab, radiology and
PMID 26875079

Clinical Criteria for Physician Aid in Dying.

Orentlicher D1, Pope TM2, Rich BA3.
Journal of palliative medicine.J Palliat Med.2016 Mar;19(3):259-62. doi: 10.1089/jpm.2015.0092. Epub 2015 Nov 5.
More than 20 years ago, even before voters in Oregon had enacted the first aid in dying (AID) statute in the United States, Timothy Quill and colleagues proposed clinical criteria AID. Their proposal was carefully considered and temperate, but there were little data on the practice of AID at the tim
PMID 26539979

Japanese Journal

超音波検査領域の認定資格について (第26回関東・甲信越支部総会シンポジウム : 認定資格取得のコツ)

金子和彦
臨床病理 : 日本臨床検査医学会誌 63(4), 524-528, 2015-04
NAID 40020474947

臨床微生物学検査領域の認定資格 (第26回関東・甲信越支部総会シンポジウム : 認定資格取得のコツ)

西山宏幸
臨床病理 : 日本臨床検査医学会誌 63(4), 514-523, 2015-04
NAID 40020474938

許可された自立 : 占領期インフォメーション番組におけるメッセージの変容

宮田章
放送研究と調査 65(4), 80-101, 2015-04
NAID 110009902967

Related Pictures

Authorized | Used Cars Still Brum Brum Authorized Stock Images, Royalty-Free Images & Vectors | Shutterstock Authorized Personnel Only Sign – Signs by SalaGraphics Rubber stamp with word authorized inside, vector illustration | Stock Vector | Colourbox Authorize Stock Photos, Images, & Pictures | Shutterstock Office Stamp - AUTHORIZED Royalty Free Stock Image - Image: 3217596 Authorized Personnel Only Floor Sign - Call Us Today for Customizable Signs, too! Authorized dealer stamp — Stock Vector © roxanabalint #42810681