I have a server that enforces access control by means of cryptography, by not giving up data, or by a combination thereof.
By the former (cryptography), I mean: If a user requests some data, the server gives it in an encrypted form. The server doesn't check who you are or anything, it just gives it to you. And if you are able to decrypt it, by implication, you have access.
With the second strategy, I mean: If a user requests some data, the server first checks if you are on a privileged list. If you are, the server gives up the data.
Two different strategies.
I wonder if there is some simple terminology that exists for these common strategies that I can use?