Development and Formal Verification of TTCAN