The checkpoint mechanism in KeyKOS | IEEE Conference Publication | IEEE Xplore