Modeling and Verification of Zone Controller: the SCADE Experience in China’s railway systems