Access control and applications on trusted systems

Most current trusted automated information systems do not allow changes to or extensions of the access control policy implemented by the system vendor. This closed approach to access control can restrict the operation of site applications and commercial off-the-shelf applications on trusted systems. A flexible, open access control framework that provides relief from these restrictions is presented. A network license mechanism is used to illustrate the problem and the applicability of the framework.<
>