Yahalom: authentication of initiator
n
The property to be verified:
signal. Running_Initiator.a.b.n
a.
n
b.
k
ab
precedes
signal.Commit_Responder.b.a.n
a.
n
b.
k
ab
in all the Traces(System)
n
Again, this property can be verified
automatically by checking the traces