An attribute-based access matrix model
Protection in operating systems