Model-Checking a Secure Gorup Communication Protocol: A Case Study. - Alan J. Hu; Rui Li; Xizheng Shi; Son T. Vuong (FORTE, 1999)