authorization attributes, as in the WS-Trust standard), and access control
and confidential exchange of data. Unsurprisingly, Common Criteria (CC),
Evaluation Assurance Levels (EAL), are often suggested as the basis for defining
component-level and system-level assurance.