An automatic SPIN validation of a safety critical railway control system | IEEE Conference Publication | IEEE Xplore