Synchronizing clocks in a system resilient to a wide class of failuresJuan A. GarayKenneth J. Perry1994FTPDS 1994