Model-Checking-Based Automated Test Case Generation for Z Formal Specification of an Urban Railway Interlocking System | IEEE Conference Publication | IEEE Xplore