From FPN to NuSMV: The temperature control system of the ICARO cogenerative plant