Ten years ago the Mondex electronic purse was certified to ITSEC Level E6, the highest
level of assurance for secure systems. This involved building formal models in the Z notation, …