An Approach to the Generation of High-Assurance Java Card Applets