Proving correctness of a controller algorithm for the RAID Level 5 system