A Calculus for Access Control in Distributed Systems (1991)

by M. Abadi, M. Burrows, B. Lampson, G. Plotkin