reference validation mechanism

[The] Portion of a trusted computing base whose normal function is to control access between subjects and objects and whose correct operation is essential to the protection of data in the system. [INFOSEC-99]