Building a trusted computing base
Access Decision Tuple (from IBM book)