The combined components of the security model encourage the creation of a large-scale Legion system with multiple overlapping trust domains. Each domain can be separately defined and controlled by the users it affects. When difficult problems arise such as merging two trust domains, Legion provides a common and flexible context in which they can be resolved. Caching secret-keys for faster encryption of multiple messages between communicating parties. Drop-in addition of MayI functionality to existing objects.
Persistent authentication objects that serve as the representation for users in a trust domain.
Secure legion shell to allow users to login to their authentication objects and obtain associated credentials and environment information. Isolation and protection of objects using local OS accounts. Easily checked Process Control Daemon for granting limited OS privileges to Legion Host Objects. Context space configured with access control for multiple users.