Joachim Biskup Hans-Werner Graf Analysis of the Privacy Model for the Information System DORIS. 123-140 1988 DBSec db/conf/dbsec/dbsec88.html#BiskupG88