access control clark-wilson model classified information in the united states computer security policy confidentiality covert channel data integrity database management system digital object identifier discretionary access control finite state machine international standard serial number mandatory access control mathematical induction multilevel security secure state security policy state transition system