A SCADE Model Verification Method Based on B-Model Transformation | Synapse