Difference between Authentication and Authorization some points to be remember.
*)It is a process for verifying that an User.
*)It check that user exist or not.
*)Password based authentication
Device based authentication
*)It means that a particular user (usually authenticated) may have access to a particular resource say record,
file, directory or script.
*)It check that authentic user have proper permission or not to access that particular page or
*)It decides what the user can do.
For read more in details to visit......http://www.roseindia.net/interviewquestions/corejava/null-marker-interfaces-in-java.shtml