Ajay Chander John C. Mitchell Drew Dean A State-Transition Model of Trust Management and Access Control. 27-43 2001 conf/csfw/2001 CSFW http://csdl.computer.org/comp/proceedings/csfw/2001/1146/00/11460027abs.htm db/conf/csfw/csfw2001.html#ChanderMD01