When local ObjectCapabilityModel islands are hooked together by a PasswordCapabilityModel cryptographic protocol.

Distributed object-capability systems include:

* DCCS (http://www.webstart.com/jed/papers/DCCS/)
* MachOs (ftp://ftp.cs.cmu.edu/project/mach/doc/unpublished/netmsgserver.ps)
* EeLanguage
* MozartProgrammingSystem (not capability secure in itself; but there is a related project called the MilosProject which adds capabilities to Mozart/Oz)
* ToonTalk
* TheClientUtility

----
CategorySecurity CategorySecurityModel