Initial revision
Added the figure for prover UI process.
*** empty log message ***
Thanks
Fixed several bibtex to shorten the bibliography.
Changes according to Christoph's comments:
- Added comparison with Abadi/Lamport.
- Changes the introduction and conclusion for clarity.
Updated version of the paper.
Changes after Christoph's comments:
*** empty log message ***
*** empty log message ***
*** empty log message ***
*** empty log message ***
*** empty log message ***
*** empty log message ***
*** empty log message ***
*** empty log message ***
*** empty log message ***
*** empty log message ***
*** empty log message ***
*** empty log message ***