Developed at CMU, a more intelligent peripheral (disk or tape drive) that does its own file management. The drives enforce (but do not define) a security policy. Clients have an NFS -like interface and access model.