Y. Amir, D. Dolev, S. Kramer, and D. Malki 1992
In the 22nd Annual International Symposium on Fault-Tolerant Computing, July 1992