A Model-Based Approach to the Design, Verification and Deployment of Railway Interlocking System