P. V. Rajkumar, Soumya Kanti Ghosh, Pallab Dasgupta: Concurrent Usage Control Implementation Verification Using the SPIN Model Checker. CNSA 2010: 214-223