Nancy A. Lynch I/O Automaton Models and Proofs for Shared-Key Communication Systems. 14-29 1999 CSFW http://www.computer.org/proceedings/csfw/0201/02010014abs.htm db/conf/csfw/csfw1999.html#Lynch99