SECAI Core · phase 10 of 15 · noun

Authentication

A method of validating a particular entity's or individual's unique credentials.

The Explain card

Plain English
Authentication is validating that an entity's presented credentials are genuinely theirs. It answers "are you who you claim to be?"
Example
An AI agent calling an internal tool presents a signed token issued by the identity provider. The tool verifies the signature and expiry before accepting the request. An attacker replaying an old or forged token is refused.
Why it matters
AI systems authenticate in both directions: users to the model, and the model or agent to the tools it calls. Weak authentication on the agent side lets prompt injection turn into real actions against real systems.
Hook
Prove it.

Word knowledge

How the word is built, where it came from, and what it sits beside in memory.

In a sentence

The inference server requires multifactor authentication before an engineer can change the model's system prompt or deployment permissions.

How it is built
  • authentic base genuine or authoritative
  • -ate suffix make or cause to be
  • -ion suffix act, process, or result
Where it came from
Origin
English authentication, formed from authenticate and -ion; authenticate traces through Late Latin authenticus to Greek authentikos
Entered the language
17th century
What changed
It moved from attesting the genuineness of documents and statements to describing identity and access checks in computing.
How it is spelled
Pattern
A verb ending in silent -e drops that e before -ion: authenticate becomes authentication.
Pattern
The final sound /ʃən/ is spelled -tion.

Spelled like

  • validation
  • authorization
  • verification
Broken into chunks
  • authent
    • authentic
    • authenticity
    • authenticate
  • ation
    • validation
    • authorization
    • verification
What it sits beside

Same subject

Same shape

identity and access management

authentication factors

  • knowledge factor
  • possession factor
  • inherence factor

Where it sits in the deck

Phase 10: Identity, Access, and Cryptographic Foundations

Before examining threats to systems, establish the foundational security primitives — identity, authentication, authorisation, and the cryptography underpinning them.

Neighbours in this phase