Speciļ¬cation, Proof, and Model Checking of the Mondex Electronic Purse Chris George and Anne Haxthausen United Nations University International Institute for Software Technology Macao SAR, China and Informatics and Mathematical Modelling Technical University of Denmark Lyngby, Denmark Chris George and Anne Haxthausen 1