“…The Event-B method has been used successfully to design critical systems for a variety of applications, including the control system for the Meteor line 14 in Paris and the VAL shuttle for Paris CDG airport [21,22,23], as well as medical devices [24,25,26], autonomous systems [27,28], security protocols [29,30], control-command systems [31,32,33], and distributed protocols [34,35,36,37,38]. More information can be found in [39].…”