An access control concept utilizing an abstract machine to mediate all access to objects by subjects.