A role is a concise abstraction of the set of privileges accorded to an entity or principal within a particular domain. Both domains and roles play a very important role in making our approach scalable and general enough to satisfy a variety of different security requirements. This is related to the research efforts conducted by TASC and the University of Massachusetts. We can use our security architecture to demonstrate the working of a reliable multicast protocol. One way of doing this is to associate a role with each multicast group.
Different users belong to different groups and can be assigned specific capabilties.
These capabilities will further enforce this division and simplify the administration and enforce ment of security policies. If the application capsules use the ANTS ANEP formats , this will involve very little work on our part. All we need to do is write the required capabilties and define the appropriate roles. Congestion control is a network administration issue. In our security framework we can create special administrator roles.