Verification of Fault Tolerance of Discrete-Event Object-Oriented Models using Model Checking