Paul Smith Richard Keighley The Formal Development of a Secure Transaction Mechanism. 457-476 1991 conf/fm/1991-1 VDM Europe (1) db/conf/fm/vdme1991-1.html#SmithK91 http://dx.doi.org/10.1007/3-540-54834-3_27