KeyKOS™** is a capability-based system which was designed to meet the performance, reliability, and security goals of the commercial computer service marketplace, KeyKOS's architecture combines several unique features to achieve simple and effective protection mechanisms with a very small amount of privileged code. Particular emphasis is placed here on the protection mechanisms which support security; while some general description of the system is included, a.more complete description of the architecture is given elsewhere.