A proof of protocol correctness J. Pachl RAIRO-Theor. Inf. Appl., 28 3-4 (1994) 213-220 Published online: 03 February 2017 DOI: 10.1051/ita/1994283-402131