Using split capabilities for access control

doi:10.1109/MS.2003.1159028

Using split capabilities for access control

2003-01-01

6

PRE

AI

DOI：10.1109/MS.2003.1159028

Original

Original request for help

Save

Abstract

En 中文

The split-capabilities method offers improved scalability and revocation of privileges in controlling access to resources. Early releases of Hewlett-Packard's e-speak product used this method to secure the system from a variety of common attacks. Split capabilities have the advantages of traditional capabilities without their limitations. The basic idea is to divide the capability into two parts: a handle to the resource being accessed and a handle to a separate resource representing the access rights being requested. Although such separation of name from authority is potentially problematic, this system brings these two elements together in the resources computing infrastructure.

Using split capabilities for access control

Abstract

Journal

Organization

Cited Papers