How do I know that the user of the system is who they say they are and only give them access to authorized functions?

• 如何知道系统用户就是他们所声称的,并只让他们访问经过授权的功能?