Extending Access Control with Duties - Realized by Active Mechanisms