Formal methods based acceptance testing for AUTOSAR exchangeability