A Method to Formally Evaluate Safety Case Evidences against a System Architecture Model | IEEE Conference Publication | IEEE Xplore