Formal methods for railway signalling | IET Conference Publication | IEEE Xplore