The authentication and access control process have three components:

1. an authentication protocol

2. a user repository and

3. an access control model.

The authentication and access control are to be implemented as three pluggable modules:

1. an authentication protocol handler module for the authenticator side

2. an authentication protocol handler for the side to be authenticated

3. and an access control context module on the authenticator side.