Key points are not available for this paper at this time.
Capability-based systems such as KeyKOS support mandatory and discretionary security policies without identifying the source of every request. Some misconceptions about such systems are clarified.
Charles R. Landau (Sun,) studied this question.