Erik Poll Joachim van den Berg Bart Jacobs Specification of the JavaCard API in JML. 135-154 2000 conf/cardis/2000 CARDIS db/conf/cardis/cardis2000.html#PollBJ00