Embedding formally proved code in a smart card: converting B to C | IEEE Conference Publication | IEEE Xplore