Formal verification of RACE protocol using SSM | IEEE Conference Publication | IEEE Xplore