The Common Criteria[REF] is based on this science and it intended to preserve the Assurance Level as EAL levels and the functionality specifications as Protection Profiles.
Such an architecture prevents an authenticated user or process at a specific classification or trust-level from accessing information, processes, or devices in a different level.