Yahalom: authentication of responder
n
The property to be verified:
signal. Running_Responder.b.a.n
a.
n
b
precedes
signal.Commit_Initiator.a.b.n
a.
n
b.
k
ab
in all the Traces(System)
n
Again, this property can be verified
automatically by checking the traces