Formally testing fail-safety of electronic purse protocols | IEEE Conference Publication | IEEE Xplore