Text this: Formal specification and security verification of usage control model based on PAT