A Cross Tenant Access Control (CTAC) Model for Cloud Computing: Formal Specification and Verification | IEEE Journals & Magazine | IEEE Xplore