Rule system
Optional: without rules every interaction goes to the security officer (in & out)
Creates efficiency: routine requests will be covered by rules: 80% instances / 20% types
Assures Security officer of control: rules can be incrementally added / deleted / analyzed
Primitives simplify rule specification: source, transmit date/time, prior request, ...