This thesis designs and implements a security system which provides an access control for the communication between heterogeneous CORBA business domains. The design takes advantage of objects to present a manageable and effective access control system. It fits with the structure of the existing CORBA security system. To illustrate the usefulness of the system, a prototype is built.