 Capability-based addressing

In computer science, capability-based addressing is a scheme used by some computers to control access to memory.Under a capability-based addressing scheme, pointers are replaced by protected objects (called capabilities) that can be created only through the use of privileged instructions which may be executed only by either the kernel or some other privileged process authorised to do so.