Qun Ni Elisa Bertino Jorge Lobo An obligation model bridging access control policies and privacy policies. 133-142 2008 SACMAT http://doi.acm.org/10.1145/1377836.1377857 conf/sacmat/2008 db/conf/sacmat/sacmat2008.html#NiBL08