Sandro Etalle William H. Winsborough Integrity constraints in trust management. 1-10 2005 conf/sacmat/2005 SACMAT http://doi.acm.org/10.1145/1063979.1063981 db/conf/sacmat/sacmat2005.html#EtalleW05