A formal method of developing elevator group controllers based on S-ring and SPIN | IEEE Conference Publication | IEEE Xplore