# Butler Lampson

> 1943– · Computer Scientist
>
> **Recorded contribution:** Xerox Alto; personal distributed computing; PARC OS concepts

## How to use this dossier

Read for a causal chain, not a hero story: inherited problem → contribution → mechanism → downstream capability → limit. Then close the page and complete the reconstruction exercise from memory.

## 1. Historical orientation

Butler Lampson (born 1943) helped design the SDS 940 time-sharing system, Xerox Alto, laser-printing and networked-office systems, and influential security and distributed-system principles. At PARC he wrote the 1972 Alto memo describing a personal computer with display, keyboard, pointing device, storage, and network. His access-control matrix modeled protection as rights connecting subjects and objects; his systems-design hints distilled experience rather than promising universal laws. The Alto and PARC environment were major team achievements. Lampson's distinctive role was architecture: choose simple abstractions that let processors, displays, networks, files, printers, and people form one coherent distributed personal-computing system.

## 2. The problem inherited

Interactive computing components existed separately, but researchers lacked a compact personal machine and principled protection model that could live inside a networked office.

## 3. The central contribution

Lampson articulated and helped build integrated personal distributed computing while formalizing access rights and reusable system-design principles.

## 4. Reconstruct the mechanism

1. Give each user a responsive workstation with local processor, bitmap display, input devices, and storage.
2. Connect workstations to shared file and printing services over a local packet network.
3. Represent protection as a matrix whose rows are subjects, columns are objects, and cells contain permitted operations.
4. Implement common cases with access-control lists or capabilities while preserving the intended rights semantics.

## 5. What changed downstream

- The Alto environment influenced graphical workstations and personal computers.
- Networked files, printers, and mail foreshadowed modern office and client–server systems.
- The access matrix became a foundational model for operating-system and distributed security.

## 6. Attribution, limits, and uncertainty

- Thacker, Kay, Metcalfe, Boggs, Starkweather, Goldberg, and many PARC colleagues made distinct essential contributions.
- An access matrix states authorization but does not solve authentication, covert channels, confused deputies, or policy design.
- Design hints are experience-based heuristics whose tradeoffs change with workload and threat model.

## 7. Reconstruction lab

Define an access matrix for four users, files, and a printer; implement the same policy once as ACLs and once as capabilities. Revoke one delegated right and compare the bookkeeping and failure modes.

## 8. Evidence trail

- [Butler Lampson](https://www.microsoft.com/en-us/research/people/blampson/) — Microsoft Research
- [Protection](https://doi.org/10.1145/775265.775268) — ACM Operating Systems Review

---

*Research checked 2026-08-09. Dates, roles, and claims about living people are historical snapshots. Linked sources remain the authority; this dossier is original instructional synthesis.*