Using formal methods to develop an ATC information system | IEEE Journals & Magazine | IEEE Xplore