Roger M. Needham R. D. H. Walker The Cambridge CAP Computer and its Protection System. 1-10 1977 SOSP db/conf/sosp/sosp77.html#NeedhamW77