The invention provides a system and method for providing security against unauthorized
access to a java enabled network device. The system includes multiple conventional
class loaders, code verifiers, security managers, access managers, SAMs, a certificate
authority and a policy server. The SAM verifies the authenticity of the entity
and either allows a download/access to a device or rejects the download/access
to a network device. The certificate authority is a repository for public key certificates
and may be a part of the secure network or part of the unsecured network. The policy
server is a repository for the rights (privileges) an entity is entitled to on
the secure network. The code verifiers verify that the Byte Code is valid java
code. The security manager is the conventional security manager. The class loader
loads the code to the device and the access manager assigns access levels to each
Java thread that is created.