Drag free control for the European satellite GOCE. Part I: modelling