Architecture requirements
- Applications need to know who the user is at all times
- must keep track of the public key
- User must be able to access his private key to sign things
- Control applications need to call security services before each new control is enabled
- Data must be encrypted in transmission, and maybe in storage