Capability

From Erights

(Difference between revisions)
Jump to: navigation, search
(Examples)
(Definition)
Line 4: Line 4:
Implementations may realize the difficult-to-tamper property using '''one''' of the following arguments.   
Implementations may realize the difficult-to-tamper property using '''one''' of the following arguments.   
-
*  ''Plausible arguments'' suggest and assume some computing security mechanism such as mail-box access control.  
+
*  ''Plausible argument'' suggests and assumes some computing security mechanism such as mail-box access control.  
-
*  ''Intractable arguments'' depend on mathematically difficult propositions such as one-way functions, digital signature algorithms, or encryption algorithms. These arguments can rely on the existence of tamper-resistant hardware within the system for their implementation design.  
+
*  ''Intractable argument'' depends on mathematically difficult propositions such as one-way functions, digital signature algorithms, or encryption algorithms. Such argument can rely on the existence of tamper-resistant hardware within the system for their implementation design.  
-
*  ''Infeasible arguments'' depend on mathematically infeasible propositions such as solving a system of equations with more variables than equations. An example may be the use of mathematical objects such as Shamir's secret sharing schemes. These arguments can rely on the existence of tamper-resistant hardware within the syste for their implementation design. These systems may require the use of more than one secret to construct or reconstruct a capability with designation that the system can understand.
+
*  ''Infeasible argument'' depends on mathematically infeasible propositions such as solving a system of equations with more variables than equations. An example may be the use of mathematical objects such as Shamir's secret sharing schemes. Such argument can rely on the existence of tamper-resistant hardware within the systems for their implementation design -- such systems may require the use of more than one secret to construct or reconstruct a capability with an automatically implied designation that the system can understand.
== Examples ==
== Examples ==

Revision as of 05:38, 13 April 2011

Definition

A capability is a difficult-to-tamper and transferable token that identifies an object and provides its holder with the permission to operate on the object it identifies.

Implementations may realize the difficult-to-tamper property using one of the following arguments.

  • Plausible argument suggests and assumes some computing security mechanism such as mail-box access control.
  • Intractable argument depends on mathematically difficult propositions such as one-way functions, digital signature algorithms, or encryption algorithms. Such argument can rely on the existence of tamper-resistant hardware within the system for their implementation design.
  • Infeasible argument depends on mathematically infeasible propositions such as solving a system of equations with more variables than equations. An example may be the use of mathematical objects such as Shamir's secret sharing schemes. Such argument can rely on the existence of tamper-resistant hardware within the systems for their implementation design -- such systems may require the use of more than one secret to construct or reconstruct a capability with an automatically implied designation that the system can understand.

Examples

Some examples of unforgeable capabilities:

  • Designations of objects in the E language. Those who hold these capabilities have the permission to invoke any method supported by the designated object.
  • Designations of functions and procedures in Emily. Those who hold these capabilities have the permission to call designated functions or procedures.

Some examples of capabilities that are infeasible to forge:

  • Designations of remote objects in E, such as captp://*orwqphzlugjwqj2wozz7tmg47ime466j@74.125.87.147:55189/oa6vn5whhapylswhzesdlqh5ppmjkcrq. Those who hold these capabilities have the permission to invoke any method supported by the designated object.
  • Password capabilities These capabilities usually invoke some form of plausible argument.
    • Private URLs where having the URL is necessary and sufficient to use the resource. Common examples are:
      • "Confirm your e-mail address" links for website account registrations and mailing list subscriptions.
      • Shared private documents such as in Google Docs, Google Maps, Picasa albums, Doodle schedulers.

XXX What exactly do we mean by password capabilities here, such that a captp URL is not one?

See also

XXX improve this section

See What is a Capability, Anyway? for a partisan explanation of what capabilities actually are.

See also Overview: Capability Computation

This page is a stub; it should be expanded with more information. If doing so, check the original E web site and the mailing list archives for content which could be moved into this page.
Personal tools
more tools