Kang, M., O. Costich, and J.N. Froscher, "A Practical Transaction
 Model and Untrusted Transaction Manager for a Multilevel-Secure
 Database system" in Database Security VI: Status and Prospects, eds.
 B. Thuraisingham and C. Landwehr, North-Holland, 1993, pp. 285-300.
 <a href="kang-ifip92.ps">
  PostScript</a>

<blockquote>
A new transaction model for multilevel-secure databases which use the
replicated architecture is presented.  A basic concurrency control
algorithm and two variations are given based on this transaction model.
We also present new correctness criteria for multilevel-secure
databases which use the replicated architecture.  Based on this
criteria, we prove that our algorithms are correct.
</blockquote>