Richard A. Kemmerer A Multilevel Formal Specification of a Mental Health Care Database. 27-52 1990 DBSec db/conf/dbsec/dbsec90.html#Kemmerer90