EbXML verification using model checking