Hristo Koshutanski Fabio Massacci An access control framework for business processes for web services. 15-24 2003 conf/xmlsec/2003 XML Security http://doi.acm.org/10.1145/968559.968562 db/conf/xmlsec/xmlsec2003.html#KoshutanskiM03