A framework for concrete reputation-systems with applications to history-based access control