Formal specification of an access control system

Computing facilities networked together but controlled by different administrations pose a problem of access control. Who decides who can use what?

[1]  Carl E. Landwehr,et al.  Formal Models for Computer Security , 1981, CSUR.

[2]  William F. Clocksin,et al.  Programming in Prolog , 1987, Springer Berlin Heidelberg.

[3]  Carroll Morgan,et al.  Specification of the UNIX Filing System , 1984, IEEE Transactions on Software Engineering.

[4]  Susan Stepney,et al.  Access Management in Multi-Administration Networks , 1986 .

[5]  Jonathan K. Millen,et al.  Verifying Security , 1981, CSUR.