Proving security protocols with model checkers by data independence techniques - Roscoe, A (IEEE, 1998)