security objective that assures that the identity of an entity such as a Client, Server, or user can be verified