Automated generation of formal safety conditions from railway interlocking tables
automatic generation and verification of railway interlocking control tables using fsm and nusmv summary .