Formal verification of AUTOSAR FlexRay state manager | IEEE Conference Publication | IEEE Xplore