While user authentication happens before initiating or resuming a login session. de-authentication detects the absence of a previously-authenticated user to revoke her currently active login session. The absence of proper de-authentication can lead to well-known lunchtime attacks. where a nearby adversary takes over a carelessly departed user’s running login session. https://www.campicon.com/