protection-critical portion of the TCB

Those portions of the TCB whose normal function is to deal with the control of access between subjects and objects [TCSEC].