An extended attribute based access control model with trust and privacy: Application to a collaborative crisis management system