Rajeev Alur Mihalis Yannakakis Model checking of hierarchical state machines. 273-303 2001 23 ACM Trans. Program. Lang. Syst. 3 http://doi.acm.org/10.1145/503502.503503 db/journals/toplas/toplas23.html#AlurY01