Credential purpose-based access control for personal data protection in Web-based applications - Norjihan Abdul Ghani (2013)