The equivalent of setting Unix permissions bits is for Bob to allocate two categories, br and bw, to restrict read and write access to his files, respectively. Bob labels his data {br 3, bw 0, 1}. Threads that own br can read the data, so br acts like a read capability. Similarly bw acts like a write capability. The authentication mechanism