Proving security protocols with model checkers by data independence techniques - Roscoe, A; Broadfoot, P (1999)