Dominique Cansell J. Paul Gibson Dominique Méry Refinement: A Constructive Approach to Formal Software Design for a Secure e-voting Interface. 39-55 2007 183 Electr. Notes Theor. Comput. Sci. http://dx.doi.org/10.1016/j.entcs.2007.01.060 db/journals/entcs/entcs183.html#CansellGM07