Verification of a Formal Security Model for Multiapplicative Smart Cards