A model for secure distributed computations in a heterogeneous environment

The author presents a model for secure distributed computations in a multilevel security, heterogeneous environment, called the multimember session model. This model does not place any restrictions on the computations using it, nor does it require any modification of security policies of local secure operating systems. It provides isolation between unrelated computations, and it ensures that the information flow in a distributed environment follows the rules of a multilevel security model, such as the Bell-Lapadula model. Protocols to establish secure communication channels within a session are also discussed