David W. Chadwick, Alexander Otenko: RBAC Policies in XML for X.509 Based Privilege Management. SEC 2002: 39-54