Model-Based Design and Verification of Automotive CPS