Formal refinement and model checking of an echo cancellation unit | IEEE Conference Publication | IEEE Xplore