Application of design for verification with concurrency controllers to air traffic control software