Opsis: A Distributed Object Architecture Based on Bracket Capabilities

Abstract

The object-oriented access control in contemporary middleware is inadequate in view of the sensitivity of data stored on the internet and the growing threat from hackers and malicious software. In this paper we present the Opsis system, an architecture for distributed Java applications based on the strict use of 'bracket capabilities'. We describe the concept of 'capability servers' for supporting flexibility and transparency of remote invocation and for allowing the migration of objects. We demonstrate the power and simplicity of the system in an example E-commerce application including the definition of a form of secure electronic cheque.