Extending a capability based system into a network environment

ABSTRACT

The Mach operating system supports secure local communication within one node of a distributed system by providing protected communication abstraction can be extended over a network by Network Server tasks. The network servers effectively act as local representatives for remote tasks by implementing an abstraction of Network Ports. To extend the security of the port-based communication abstraction into the network environment, the network servers must protect both the messages sent over the network to network ports and the access rights to network ports. This paper describes in detail the protocols used by the network servers to support security.

REFERENCES

• 1: Guy Almes , George Robertson, An extensible file system for hydra, Proceedings of the 3rd international conference on Software engineering, p.288-294, May 10-12, 1978, Atlanta, Georgia, United States
• 2: Robert Victor Baron, Richard F. Rashid, Ellen H. Siegel, Avadis Tevanian, Jr. and Michael Wayne Young. MACH-I' A Multiprocessor Oriented Operating System and Environment. New Computing Environments: Parallel, Vector and Systolic, SIAM, 1986, pp. 80-99.
• 3: Forest Baskett , John H. Howard , John T. Montague, Task communication in DEMOS, Proceedings of the sixth ACM symposium on Operating systems principles, p.23-31, November 16-18, 1977, West Lafayette, Indiana, United States
• 4: David R. Cheriton , Willy Zwaenepoel, The distributed V kernel and its performance for diskless workstations, Proceedings of the ninth ACM symposium on Operating systems principles, p.129-140, October 10-13, 1983, Bretton Woods, New Hampshire, United States
• 5: National Technical Information Service ADA079730. DOD Standard Internet Protocol. IEN- 128, Defence Advance Research Projects Agency, Jan., 1980.
• 6: National Bureau of Standards. Data Encryption Standard. Federal Information Processing Standards Publication 46, U.S. Department of Commerce, 1977.
• 7: Roger M. Needham , Michael D. Schroeder, Using encryption for authentication in large networks of computers, Communications of the ACM, v.21 n.12, p.993-999, Dec. 1978 [doi>10.1145/359657.359659]
• 8: Richard F. Rashid , George G. Robertson, Accent: A communication oriented network operating system kernel, Proceedings of the eighth ACM symposium on Operating systems principles, p.64-75, December 14-16, 1981, Pacific Grove, California, United States
• 9: Jerome H. Saltzer and Michael D. Schroeder. "The Protection of Information in Computer Systems". Proceedings of the IEEE 63, 9 (Sept. 1975), 1278-1308.
• 10: Robert D. Sansom. Security in a Network Operating System. Securicom 86 - 4th Worldwide Congress on Computer and Communications Security and Protection, March, 1986.
• 11: Richard W. Watson. "Timer-Based Mechanisms in Reliable Transport Protocol Connection Management". Computer Networks 5 (Feb. 1981), 47-59.

INDEX TERMS

Classification:
  C. Computer Systems Organization
  C.1 PROCESSOR ARCHITECTURES
      C.1.3 Other Architecture Styles
          Subjects: Capability architectures**
  C.2 COMPUTER-COMMUNICATION NETWORKS

  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection
          Subjects: Access controls

General Terms:
Performance, Security, Standardization