The concept of keeping information of different security classes apart in a system. Note: Separation may be implemented by temporal, physical, logical or cryptographic techniques.