Security models for authorization, delegation and accountability - W. C. Lui (2005)