Model Checking in Rebeca