Compositional Verification of UML Models