Authentication - identifies "who you are" (e.g. username and password, public/private keys).

Authorization - an identification of "what you are allowed to do" (e.g. user is an administrator).

Session - a time period during which a user is authenticated and may have information associated with it.