Application of a CASE tool to a high integrity engine control system | IET Conference Publication | IEEE Xplore