Kerberos uses as its basis the Needham-Schroeder protocol. It makes use of a trusted third party, termed a key distribution center (KDC), which consists of two logically separate parts: an Authentication Server (AS) and a Ticket Granting Server (TGS). Kerberos works on the basis of "tickets" which serve to prove the identity of users.
The KDC maintains a database of secret keys; each entity on the network — whether a client or a server — shares a secret key known only to itself and to the KDC. Knowledge of this key serves to prove an entity's identity. For communication between two entities, the KDC generates a session key which they can use to secure their interactions
Kerberos is a distributed authentication service that allows a process running on behalf of a user to prove its identity to a verifier an application server, or just server without sending data across the network that might allow an attacker or the verifier to subsequently impersonate the user. Kerberos optionally provides integrity and confidentiality for data sent between the client and server.