A case study of verifying TFM requirements specification based on SMV | IEEE Conference Publication | IEEE Xplore