Patent ID: 8495730

Claim:
A method for controlling an order of access to a computing object, comprising: generating a first capability object; storing in the first capability object a set of attributes for enforcing an access policy corresponding to the computing object, wherein the set of attributes store information specifying a first party authorized to access the computing object and information specifying a first authorized action with respect to the computing object by the first authorized party; generating a second capability object with a corresponding set of attributes for enforcing the access control policy, wherein the corresponding set of attributes store information specifying a second party authorized to access the computing object and information specifying a second authorized action with respect to the computing object by the second authorized party; and enabling access to the computing object by the second party in response to the first party completing the first authorized action; generating the second capability object in response to an indication that the first party has completed the first authorized action; verifying the authenticity of the first capability object prior to enabling access to the computing object by the first party; and verifying the authenticity of the second capability object prior to enabling access to the computing object by the second party.