A computer protection system in which each subject maintains a list of unforgeable bit patterns called tickets, one for each object a subject is authorized to access.