On-the-fly model checking with partial-order state space reduction Grant US-5615137-A United States of America 25 Mar 1997