“…2) Security properties description Linear temporal logic (LTL) [10,11] formulas are used to describe the security properties which should be satisfied by the improved protocol. If any properties of the protocol are violated while checking the model by SPIN, it denotes that a security vulnerabilities has been found in this protocol, and the error trail will be printed by SPIN.…”