, Volume 20, Issue 1, pp 5-19
Date: 12 Dec 2007

The certification of the Mondex electronic purse to ITSEC Level E6

Rent the article at a discount

Rent now

* Final gross prices may vary according to local VAT.

Get Access


Ten years ago the Mondex electronic purse was certified to ITSEC Level E6, the highest level of assurance for secure systems. This involved building formal models in the Z notation, linking them with refinement, and proving that they correctly implement the required security properties. The work has been revived recently as a pilot project for the international Grand Challenge in Verified Software. This paper records the history of the original project and gives an overview of the formal models and proofs used.

C. B. Jones