Distributing and revoking access authorizations on abstract objects: a capability approach

In this paper a capability addressing environment is presented, based on the concept of extended capability. First of all it is shown that such an environment is well implementing objects of abstract type. Then the problem of distributing and revoking access authorizations on abstract objects is considered and an efficient solution is presented. The revocation mechanism results in being selective, transitive and deferred.