Publication: IEICE TRANSACTIONS on Information and Systems Publication Date: 2015/06/01 Vol. E98-DNo. 6pp. 1150-1160 Type of Manuscript: Special Section PAPER (Special Section on Formal Approach) Category: Model Checking Keyword: model checking, fault analysis, model transformation,