A calculus for access control in distributed systems (1993)

by Martín Abadi, Michael Burrows, Butler Lampson, Gordon Plotkin
Venue:ACM Transactions on Programming Languages and Systems