Matthew Johnson, Frank Stajano: Implementing a Multi-hat PDA. Security Protocols Workshop 2005: 295-307