Matthew K. Franklin, Armen Gabrielian: A Transformational Method for Verifying Safety Properties in Real-Time Systems. RTSS 1989: 112-123