The formalisation of authorisation systems. - Ben Mankin (2004)