Engelbert Hubbers Martijn Oostdijk Erik Poll From Finite State Machines to Provably Correct Java Card Applets. 465-470 2003 conf/sec/2003 SEC db/conf/sec/sec2003.html#HubbersOP03