Model-based security analysis of the German health card architecture - Jürjens, J; Rumm, R (Methods Inf Med, 2008)