We present a model of a protection system based on passwords, protection contexts and protection domains.
A protection context is a set of access rights for the memory pages.
Passwords are associated with protection domains, which are sets of protection contexts.
At the hardware level, the model is supported by a memory protection unit interposed between the processor and the main memory.