Yahalom: authentication of responder
n The property to be verified:
signal. Running_Responder.b.a.na.nb
precedes
signal.Commit_Initiator.a.b.na.nb.kab
in all the Traces(System)
n Again, this property can be verified
automatically by checking the traces