Formal methods for real time computing (Wiley, 1996)