Formal definition and implementation of business-oriented SoD access control policy. - Xing-fen Wang; Yi-jun Li (Inf. Manag. Comput. Secur., 2004)