Mandatory security and object-oriented systems: A multilevel entity model and its mapping onto a single-level object model