Verification of temporal properties involving multiple interacting objects