Kurt Stenzel A Formally Verified Calculus for Full Java Card. 491-505 http://springerlink.metapress.com/openurl.asp?genre=article&issn=0302-9743&volume=3116&spage=491 2004 conf/amast/2004 AMAST db/conf/amast/amast2004.html#Stenzel04