A Formal Security Design Approach for Transformation of Authorizations in Information Systems