Worst-case lifetime computation of a wireless sensor network by model-checking