Abstract interpretation and partition refinement for model checking door D.R. Dams