Multipolicy Machine: A New Paradigm for Multilevel Secure Systems

摘要

The Multipolicy Machine is a paradigm shift in multilevel secure (MLS) computerarchitecture. It permits an MLS system to enforce multiple, perhaps contradictory security policies. In the Multipolicy Machine concept, each MLS computer node is capable of enforcing a variety of security policies, and data carries policy domain codes to indicate which security policies apply. Metapolicies coordinate the interactions of security policies. Thus data can be transferred from one node to another and still be protected by the appropriate security policies. Multiple policies permit more natural modelling of real-world security practices and allow easier sharing of data among users in different security domains. Commercial applications include medical, financial, and investigative systems that cross policy domains. Military applications include C3 systems in multinational and multiservice battle theaters.