Modelling and analysis of security protocols - Ryan, P; Schneider, S; Goldsmith, M; Lowe, G; Roscoe, B (Addison−Wesley, 2001)