The layered safety concept, an integrated approach to the design and validation of air traffic management enhancements