An identifiability-based access control model for privacy protection in open systems.