Defining reserve times for metro systems: An analytical approach