1. A Cross Tenant Access Control (CTAC) Model for Cloud Computing Formal Specification and Verification