Xinwen Zhang Francesco Parisi-Presicce Ravi S. Sandhu Jaehong Park Formal model and policy specification of usage control. 351-387 2005 8 ACM Trans. Inf. Syst. Secur. 4 http://doi.acm.org/10.1145/1108906.1108908 db/journals/tissec/tissec8.html#ZhangPSP05