Trustworthy Access Control with Untrustworthy Web Servers. - Tim Wilkinson; Dave Hearn; Simon R. Wiseman (ACSAC, 1999)