What is the difference between role-based authentication and identity-based authentication? If a system uses ONLY a password mechanism to authenticate operators (different PIN for Admin and User) it is said to use “identity” or “role-based” authentication?
The system prompts the operator for a password (without asking for a username), then, depending on which password was entered (the User or the Admin) will offer different services for the two roles, or no services if the password does not match.
Is it true that this mechanism can be considered as identity-authentication since IDENTITY can be authenticated based only on knowledge of the PIN?
Moreover, FIPS140 security standard uses the terms "roles-based authentication" for Level 2 and "identity-based authentication" for Level 3 (http://en.wikipedia.org/wiki/FIPS_140). Is the case presented above role or identity authentication per usage in FIPS140 standard?
What are some examples of role-based authentication schemes?