how to achieve, across a system composed of components with different
security properties or assurance levels, the secure, cohesive implementation
of functionality for user identification and authentication (I&A), trust
establishment among components (based on authenticated identity and