It must be underlined that, to verify this property, a formal model of the system which includes several automata which evolve in an asynchronous manner (formal models of PLCS, of RIOMS, . . . ) must be built. Building such a model that can be analysed by UPPAAL without combinatory explosion, in a short time and with reasonable computing resources is not a trivial issue.