Enterprise Models for Authentication and Access Control Services in Open Distributed Systems