In secure operating system,mechanism of Access and Control is the kernel of security policy realization. As we know,Identification & Authorization is the base and precondition. It is absolutely necessarily in many kinds of secure OS evaluation home and aborad[1～3]. This paper will describe the theory bases and realization of the mechanism in detail and expand it to the network.