Modeling Distributed Real-time Elevator System by Three Model Checkers