Secure communication in non-uniform trust environmentsSecurity requirements for cooperative work: a model and its system implications
