Model-Checking the Architectural Design of a Fail-Safe Communication System for Railway Interlocking Systems. - Bettina Buth; Mike Schrönen (World Congress on Formal Methods, 1999)