Formal Security Definition and Efficient Construction for Roaming with a Privacy-Preserving Extension