Yahalom: authentication of initiator
n The property to be verified:
signal. Running_Initiator.a.b.na.nb.kab
precedes
signal.Commit_Responder.b.a.na.nb.kab
in all the Traces(System)
n Again, this property can be verified
automatically by checking the traces