Capability-based access control for open computing environments

在这项研究中，我们已经澄清了开放计算环境中基于能力的访问控制的实现方法。能力是指目标对象的标识符和对该对象的访问权限。通过利用能力的特性，我们使普通用户能够在各种环境中将其部分访问权限传递给其他用户，而无需管理员的努力。这些环境包括电子邮件系统、Web、TCP/IP连接和无线LAN连接。

In this research, we have clarified the implementation methods of capability-based access control in open computing environments. A capability means a pair of the identifier to a target object and access rights to the object. By making use of characteristics of capabilities, we have enabled regular users to pass a part of their access rights to other users without administrators' efforts in various environments. These environments include the e-mail system, the web, TCP/IP connections, and wireless LAN connections.