Towards model checking security of real time Java software