David A. Basin Hironobu Kuruma Kunihiko Miyazaki Kazuo Takaragi Burkhart Wolff Verifying a signature architecture: a comparative case study. 63-91 2007 19 Formal Asp. Comput. 1 http://dx.doi.org/10.1007/s00165-006-0012-5 db/journals/fac/fac19.html#BasinKMTW07