reference monitor concept

An abstract model of the necessary and sufficient properties that must be achieved by any mechanism that performs an access mediation control function.