Formal verification of redundant media extension of Ethernet PowerLink. - Steve Limal; Stéphane Potier; Bruno Denis; Jean-Jacques Lesage (ETFA, 2007)