A Formal Proof of the Rate Monotonic Scheduler. - Shuzhen Dong; Qiwen Xu; Naijun Zhan (RTCSA, 1999)