Thomas Y. C. Woo Simon S. Lam Designing a Distributed Authorization Service. 419-429 1998 INFOCOM db/conf/infocom/infocom1998-2.html#WooL98