ion [Liskov et al., 1977] is the concept of grouping related objects and focus on common characteristics. For example, a file is an abstraction of

background

Capability-Based Computer Systems

The design and application of an extensible operating system

A method and apparatus for establishing a secure communications channel between a first repository and a second repository using a repository transaction protocol. A registration identifier and registration message including an identification certificate, and an identifier of a master repository that encrypted the identification certificate are generated by the first repository. The registration identifier and message are sent to the second repository and the identity of the first repository by is verified by verifying the identification certificate. Messages containing at least one session key are exchanged between the first and second repositories and a usage transactions related to a digital work are conducted between the first repository and the second repository using the session keys.

Method and system for conducting transactions between repositories

Various security models for supporting delegation in workflow systems have been proposed to achieve flexible access control in collaborative business processes. Since workflow systems come into their own when controlling large-scale business processes in a well-structured organization, these models are often based on role-based access control (RBAC). However, to realize a higher level of collaboration enabling users in different organizations to complete a common workflow, it is necessary to support cross-domain delegation of tasks. For this purpose, we propose a delegation model for workflow systems that extends the capability-role-based access control (CRBAC) model introduced in our previous work. The central idea behind our proposed model is that authority to perform tasks, as well as roles, are mapped to capabilities, thereby realizing delegation by capability transfer. By adopting the approach of a capability-based access control mechanism, our model provides both flexibility and reduced administration costs, thus allowing it to cope with unexpected changes in task assignments. We demonstrate these advantages by considering an example.

Capability-Role-Based Delegation in Workflow Systems

Les langages de programmation orientes-objet dynamiquement types ne peuvent pas fournir d’informations de type avant l'execution. Deux de leurs principaux avantages sont qu'ils permettent le prototypage rapide et l'integration de modifications lors de l'execution. La capacite des langages dynamiquement types accepter les changements du programme lors de son execution et en l'absence d’informations de type, condamne les approches de securite classiques a l'echec.Controler les references des objets et des graphes d'objets est indispensable pour construire des systemes securises. Les approches existantes sont generalement basees sur un systeme de type statique et ne peuvent pas etre appliquees aux langages dynamiquement types.Cette these defend que:Dans le contexte des langages de programmation orientes-objet dynamiquement types, reifier les references, controler leur comportement, et isoler l'etat des objets par le biais de telles references, est un moyen pratique de controler les references.Cette these apporte cinq contributions:-	Nous proposons la notion de dynamic read-only objects (DRO) comme un changement particulier (read-only) de comportement au niveau des references; -	 Nous generalisons le modele DRO pour permettre des changements de comportement plus generiques et nous etendons l'environnement de programmation et le langage Pharo avec des Handles, qui sont des references avec la possibilite de changer le comportement des objets references;-	Nous definissons le terme de Metahandle pour offrir flexibilite et adaptabilite aux references controlees; -	Nous proposons la notion de SHandle, pour isoler les effets de bord au niveau des references;-	Et enfin, nous decrivons formellement les modeles Handle et SHandle pour representer et expliquer leur semantique.Comme validation de notre these nous avons mis en place trois approches liees a la securite en utilisant nos modeles. En outre, nous avons etendu la machine virtuelle Pharo pour supporter les Handles, Metahandles et SHandles.

https://tel.archives-ouvertes.fr/tel-00808419/document

Towards First Class References as a Security Infrastructure in Dynamically-Typed Languages

/pdf/culture-and-code-the-evolution-of-digital-architecture-and-3ttfz5mvbi.pdf

Capability-Based Computer Systems

Citations

The design and application of an extensible operating system

Method and system for conducting transactions between repositories

Capability-Role-Based Delegation in Workflow Systems

Towards First Class References as a Security Infrastructure in Dynamically-Typed Languages

Culture and Code: The Evolution of Digital Architecture and the Formation of Networked Publics

Related Papers (5)

The protection of information in computer systems

Programming semantics for multiprogrammed computations

EROS: a fast capability system

HYDRA: the kernel of a multiprocessor operating system

Capability-based addressing