palavras-chave Model-based design and analysis formal verification interactive systems model checking tool support