Security models for web-based applications
Communications of the ACM
James B. D. Joshi
Eugene H. Spafford
Arif Ghafoor
An agreement centric access control mechanism for business to business e-commerce