Security models for web-based applications
Communications of the ACM
Eugene H. Spafford
Arif Ghafoor
Walid G. Aref
An agreement centric access control mechanism for business to business e-commerce