Formal specification and verification of the real-time scheduler in FIP | IEEE Conference Publication | IEEE Xplore