Lucas C. J. Dreyer Martin S. Olivier An Information-Flow for Privacy (InfoPriv). 77-90 1998 conf/dbsec/1998 DBSec db/conf/dbsec/dbsec98.html#DreyerO98