Authentication in distributed systems: theory and practice
ACM Transactions on Computer Systems
Michael Burrows
Butler Lampson
Martín Abadi
Authentication metric analysis and design