Two person control where both parties are geographically distributed

A method performed by a remote system for providing a two party computer access control in a zero trust architecture on a distributed computing system comprising:

• receiving, via a secure data connection, an initiate message requesting an execution of an action from a user system comprising a processor and a label-aware operating system configured to enforce mandatory access control (MAC), the initiate message including a first Common IP Security Option (CIPSO) domain of interpretation (DOI) label, a first payload and a first internet protocol address;
• storing, by the remote system comprising a memory and a processor, data indicative of the action;
• receiving a control message for authorizing execution of the action from a control system geographically distributed from the user system and configured to enforce MAC, the control message including a second CIPSO DOI label, a second payload and a second internet protocol address;
• verifying a temporal sequence of the messages, wherein the control message is discarded if the remote system determines that the control message was received before the initiate message;
• and
• executing, by the remote system including a memory and a processor, the action in response to:
• the first CIPSO DOI label and the second CIPSO DOI label matching at least one expected label stored at the remote system;
• the first internet protocol address corresponding to an expected internet protocol address of the user system;
• the first payload corresponding to a first expected payload associated with the action,
• the second internet protocol address corresponding to an expected internet protocol address of the control system, and
• the second payload corresponding to the first expected payload associated with the action.

A system for performing a two party computer access control algorithm in a zero-trust architecture comprising:

• a network interface configured to enforce mandatory access control (MAC) for receiving, from a first user system via a secure data connection, an initiate message requesting an execution of an action, the initiate message including a first Common IP Security Option (CIPSO) domain of interpretation (DOI) label, a first payload and a first internet protocol address and for receiving, from a second user system geographically distributed from the first user system, a control message for authorizing execution of the action, the control message including a second CIPSO DOI label, a second payload and a second internet protocol address;
• and
• a processor for executing the action in response to:
• verifying a temporal sequence of the messages, wherein the control message is discarded if the control message was received before the initiate message;
• the first CIPSO DOI label and the second CIPSO DOI label matching at least one expected label stored at the remote system;
• the first internet protocol address corresponding to an expected internet protocol address of the first user system;
• the first payload corresponding to a first expected payload associated with the action,
• the second internet protocol address corresponding to an expected internet protocol address of the second user system, and
• the second payload corresponding to the first expected payload associated with the action.