Design and formal verification of a CEM protocol with transparent TTP