Security models for web-based applications
Communications of the ACM
James B. D. Joshi
Eugene H. Spafford
Walid G. Aref
An agreement centric access control mechanism for business to business e-commerce