Controlled Declassification based on Intransitive Noninterference ...



    

 ! "#%$'&(
)  *+ , ,- . /1032546+798:. ;=@A6CBD/E>GFH6+7?>HI:J ‰‹Š KMjDU LOpŒN3SPEQ \kRTRTS"ŽU VTN9WXQYWXCN[\kRTZ+‘\#WXV`]#_^3RTQ‚WXV`Pz_bd’a3\#ce]“dj9NtfhQYpXgeQY^3” i _bRTWXaD]k•j?aHQ i VTZ+\#lm–—WnQ‚VTRTo#”3\kRTa—pqZbU lNDrH\%r3at\#s+N˜ubabv%wt™Y™Cxz™šy|{+y‘} ‡C~b›˜by‘ub‡…3€‚+}Cv€:œ9~bƒ„uY3y`uY›’Yyˆ…b›‚†„ubž3yˆ‡Ÿ%… b}‚¡bu TV¬t¢"^3pŒWX£¥RT]#\#¤#WnV¦#§Q‚rt¨DP¥Q%©‚‘lm¦Y\:N9ª]#^t” d˜RTR“\UYR“U‚r3ˆrtWŒ_3NtWnˆVT”tVTWXQY´e\#SN9µ¶U‚\:p]#pXNtWX\#¯CNbQY\°V"N9WX]“NbRTjD\#VTU ‘\:N9\%R‘U P1N9\:RT\:RT]“p?\#j·N9]:QY]:j9Nb\«U‚V‘«]#RTQYU‚UYp±N9atrtNtWŒr3Q‚N3RTV,PE\#Q ‘]#RT‘Q‚S"\%¬—r¸U \"VTVTWXlmQYj9N\5WnVTj)²9r3pn\:VT]#RT\:Q‚WXRTYSWXUN9SVT”tWŒQ‚atQYN¹N­Q‚RmU‚PE\k\%N9³3Ur ®® ^tU[‘pŒ\5U‚N9Q‚”‚P°^DlU \%”YU‚\:®|¯C–D\kU R‘\%‘\#r]:^t‘\:RTWnV‘VOVT_¸WXN9]#”tQ‚´„NDf¶rtQ%WnVTlWXQY\#NtC\kR%VTa„jDUMU V«PE^9]#pXQ‚pn_^9pŒTrºU VT‘WX^tˆPE¬9U‚¬—]:VTQ‚Q R‘R‘V"_»‘^t‘Q‚]kj¸pX^tVTPEWX\%QYUNVT^tVTRTQ5\#«VTj9WXN \ ¬3URT”YQYWX–9CpX\:\#NMS¼‘\#jD]#U ^3¶RTWX_bV`\k_MV¶¬—VTQ"Q‚pŒWX–—]:\ _PElmQY^tWXVTNDjtrHQY´H^3V½¾¬—¯C\:\:RT_S¬tWnV‘RTVTQYWXN9–t”ApX\#S¿VTQbQ«WXÀSAVTQ«^9]“¬—j˜\k´3RTLOSNMWXV¶VTjt\:WX³3]#U\#R‘¬3VTVTWŒWX]:QYpŒ\‚N9aDmlVTQ\ ¬3ÄDRT˂QYÄ9¬—ÂEÄtQY‘Å`Êk\ÆEÌ#U‚ÊkN¸ÆTÊkU ė¬9͓¬tÊkaDRTQYUAU‚]#]“Q‚jN9VT]#jD\#¬3UVVÁ^9r+‘R“^9U%U‚lmpXApn_"WnVT^9‘\%^9r"N9QYrtN\:RTUApn_3SWXN9Q ”5RT\°WŒrtU \#–9U‚AˆV‘R“PqRTU‚QY]kSà ÂEÄ9\#ű]#ƈWnǂ²DÄ9]%ÈTUÂEVTűWXÂ1QYɂN Ê m V ‘  — ¬ VTV`pX\#_tj9C¬—U \:V\p=´]#ˆQ‚_tΏNbˆ^tVTV‘\:RTRQYSÏRTpX\#PE‘VTQ‚^9WXRÀ”YpnVTjb]“"j9VTpn\#WX_N9]“¯+]#lmpXWX^DN9j9r3”\:RT\5VT\jtU‹r3WŒQ%Ntlm]:\:QYl¼N9ND”‚r3R“–9WnU‚VTWXrt‘WŒQ‚WXWXSN9N˜”A´^tpq]%UU‚VTNWXQYNtQb]#®|–9]#^3U‚‘Rm\%U‚rN9r‘\#U,]#^3‘RTQYWXV`^9_¸N9r«]#QY‘N9\:]#rt^tWnVTRTWXWnQYVON_ Ð Ñ9ÒÀӗÔHÕÖA×,ؒÓHÙTÕÀÒ Ú .‚Ik.‚63Û:Ü#ÝÞ2t7ßIk.‚Ü àHÛ:.¸/17—á=23Û:â56b8k/1237äã?2båÃ/17ß6çæHÛ:23ètÛ:63ââM/17Hè+éˆ;E6+7Hètà?6+èt.I“. 8“8k/17Hè¾Ý?6tI ã?23àHÛ:/EI“ÝH.Y>)/17¸Û:.‚Ü.‚798êt.‚6+Û#I‚ë?å/q8kÝ»6t>—Bb6+7?Ü .‚IA/q7»ì˜238kݸ8kÝH.‚23Û:ê6+7?>)æ?Û:6tÜ%8k/EÜ.Gí FH4î3ï3ì—ðOñ ò°ÝH.5ì?63Ik/EÜæ?Ûk2tìH;q.‚âó/EIÁ8k2)>—. 8k.‚ÛkâM/17H.3ôeõhÝH. 7¹Ü 637¹6‹æ?Ûk2tè3Û#6+âöì’.M8kÛ:à?IT8:.‚>»8k26tÜ Ü .‚I:I Ü237H÷˜>—. 798:/163;À>H6b8#6. Bt. 7·åÝH. 7øIk23âM.M2+á/q8:I"6tÜ%8:/q2t7?I"Ü 637·ì˜.[2tì?Ik. Û:B3.‚>»ìDê¸àH798:Ûkà?I“8k.Y> I“àHìHùT.‚Ü%8#I:ú»ò°Ý?6+8[/1I‚ëÀ/17—á=23Û:â56b8:/q2t7çã˜2båûIk.‚Ü àHÛk/q8Têüèt2D.‚IMì’. ê32t7?>h63܂Ü.YIkI5Ü 23798kÛ:23;,6tI5/q8 7H2+8237?;qê5Û:.‚I“8kÛ:/1Ü8:IÀ8kÝH.ÁæHÛ:23ètÛ:63âý I¶63Ü Ü .‚I:I¶8k2M>H6b8#6«ìHàH863;1Ik28kÝH.ÁæHÛ:23æ?63èt6+8k/123752+á>H6b8#6 å/Œ8:ÝH/q78kÝH."æ?Ûk2tè3Û#6+âñ—þ‘78kÝH.I“/1âMæH;q.YIT8Ü 63Ik.Á8kÝ?. Û:.«6+Û:.Á8Tå¶250D/17?>HI,2+ám>H6b8#6Hô?Ü 237—÷’>—. 7—é 8k/E6+;Àÿ|ÝH/qèt
Ý 637?>GæHàHìH;1/1Ü­ÿ=;12bå °>H6b8#6HëHåÝH.‚Ûk.8:ÝH."237?;qê‹æ˜.‚ÛkâM/q8“8k.Y>Gã?2båä23á/q7—á=2tÛkâ56+8k/1237 /1I"á=Ûk2tâ ;12bå¼8:2ÝH/1è3݄ñeþ‘7·8kÝH.‹è3.‚7H. Û#6+;m܂63Ik.58kÝH.‚Ûk.­/1I6æ?6+Ûk8k/E6+;m2tÛ:>H. Û:/q7Hè)23á I“.YÜàHÛ:/Œ8Tê ;q.‚B3. ;EI ÿ|2+á±8k.‚7[6;E6b8“8:/1Ü .«í @,.‚7 Cð %ëtÛk.‚æHÛ:.‚Ik. 798k/17Hè">— / ’.‚Ûk.‚798À;q.‚B3.‚;1I23ázIk.‚Ü àHÛ:/Œ8TêåÝH. Û:.8kÝ?. 23Û#>—. Û:/q7?èÛ:. ;E6b8:/q2t7‹. Dæ?Ûk.YIkIk.‚IåÝH.‚Ûk.Á/17—á=23Û:â56b8k/1237Gâ56Cê[;1. è3/q8k/1â56b8:. ;1ê5ã?2båñ @,.YI“æH/q8k.«âM637Dê[Ûk.YÜ.‚7t8,6t>—Bb6+7?Ü .‚I/17G8kÝH."8kÝH.‚23Û:ê‹6+7˜>‹æ?Û:6tÜ%8k/EÜ.23áIk.‚Ü àHÛ:./q7—á=2tÛkâ56+é 8k/1237·ã?2båëI“2tâ.[Ik. Û:/123à?Iæ?Û:6tÜ%8k/EÜ 63;ÀÜ2t7?Ü.‚Ûk7˜IÛk.‚â56+/17„ ñ A7H.[æ?Ûk2tìH;q.‚â /EIÁ8:Ý?6b8MI“.YÜàHÛ:. /q7—á=2tÛkâ56+8k/1237[ã˜2båëH6+;q8kÝH2tàHè3ÝG6å23Ûk8kÝDêMè3296+;OëD/1I°23á±8k. 76+7GàH7HÛ:.‚63;q/EI“8k/EÜ,2t7H.3ñHò°ÝH.ÁæHÛ:23ìHé ;q.‚â /EI8kÝ?6+8 âM637Dê[æHÛ:23è3Û#6+â5Iâ«à˜IT8/17H. BD/q8:6+ì?;qê‹;q.Y6+0­Ü . Ûk8:6+/176+âM23àH798#I¶23á>?6b8:6?ñ H23ÛÀ/q7?I“8:637?Ü.tët6ì˜6+7H0zý IþTò¾I“ê—I“8k. â I“8k23Û:.‚IÀ>H6b8#6"6+ì’23à—8À8kÝH.÷˜7?6+7?Ü /163;H8:Û:637?Ik6tÜ%8:/q2t7?I 2+áš/q8:I°Üà˜IT8:23âM. Û#I ñ9þ‘7—á=2tÛkâ56b8:/q2t7­6+ì’23àH8°6«8kÛ#6+7?I:63Ü8k/1237­IkÝH2tàH;1>[ì˜.Á03.‚æ—8Ü237H÷˜>—. 798:/163;?8:2 8kÝH.æ?6+Ûk8k/1.‚Iš/q7DBt23;1B3.‚>637?>Á8:263à—8kÝH2tÛk/  .Y>Áì?6+7?0æ’. Û#Ik237H7H.‚;`ñC- 2bå. Bt. ÛYë/17"8kÝ?.¶æHÛ:2—Ü.YIkIš2+á 6"ÜÛ:/qâM/17?6+;˜æHÛ:2tIk.‚ÜàH8k/1237M/Œ8âM/qètÝt8¶ì˜.YÜ23âM. 7?.‚Ü.YIkI:6+Û:ê637?>56+;1;12bå63ìH;q.á=2tÛ¶6æHÛ:2tIk.‚Ü à—8k2tÛ 8k2"6+7˜6+;1ê ‚.°8kÝH.A>H6b8#663ì˜2tà—8¶6Áæ?63ۓ8:/1Ü àH;E6+ÛmÜà˜IT8:23âM. Ûm/178kÝH.,ì?6+7H0zý IþTò¾I“ê—I“8k.‚âGñt- . 7˜Ü.3ë

 !#"$%"&')(+*),-$%&!./*)/10$2$+$3"
(-#$4./
5)(36*7( 98*)(-: ./(3*[email protected]A.$3BC" BD$->$4E(3*)F(3EG0./&@$3)?IH
.$)? (-BKJL$%*2$%&& -;M?@0(B(3 48*)(3X-*)$3DJR]$!* XËʈYU˂̄Sdx À Ó NSXS=L>DÔÕmp>­ÑXlNYZIOfV)Z qŒ,_bsd́&Ö×эa
YDØa
VR

x ½ ‹ÍMD>VZÏÎÈЕÑIYUÒNm(k †Ù u NPOŒ?A
CDE«FIHGÚWÛJ?
ÜÝ Þ C
Ü XJʈY)Uæ‚ç„Sdsx À ?BADC
EGFIH«ÚéÛg?Ü2Ý ÞICDÜgN áÁNSX¢NPOÉOQXla
YZØ«UÒk/O(>pm T8a
>¹` Y)aiVUSU*,_bd́

x ½

‹(™ÖÌэa
Y
Ø«a
VR

wè u NPO

ê»ëIÜßhEGÚWÚéE)ìˆíWF HËABì¢EˆA
ëIÜE«CDÜ(îJ? ïBÞ ?BADíðßhۙEGÞICC
Ü(ñ Þ ?
ÜE«ß8A
Ü(CDî/íWF E«ÚéE«H«ÛGòê»ëIÜÛf?ë E)ì•ADë ó)AE«Þ C FIÜ(ì…ôIÜ õ FIíWA
íéE«F5Eߢ?BADC
EGFIH?
ÜÝ(ÞIC
íWABÛLíP?@XS= >ËÑ a
YDØaDV)RcXh=IV)X»a
> OQT8UÒXlOŽ`paDY)R R/VZ q



A
ëIÜÍÜ ÕADÜ(F ô8Ü2ô



‚ *È> X¹†àMp>JV)Z V)a(M(NSX a
V)aQk΄ a
YDØ«a
V)R ½ †oM(ksa
>tÑ UéV«m(NSZØ >pV«mp=5q«Y Ó ZØ«a
V«qNSZØ mpY)R@K

q NSZÕؕV)OpOpNðØ«Z RJ>(Z XËOQXtV)Xt> RJ>(Z XtÉ;= > Z•†àNPO@OQXlaDY)ZØ«UÒkÍO(>pm T8a
> Ó NSXh=5Xh=I>ÍmpY)aQa
> O ÑIYZ ) T8Z q«>(aùþ@>ÿ¹Z NSX NY)Z gN `fVZ Í q Y)Z UðkJN `ù† y NPOÉOQX a
Y)ZÕØUÒk/O(>pm(T8a
>™T8Zq«>(aùþi>lÿZ*NSXlNYZ 





ICDE«îÌF E)ì…E«F&ì€Ü/ìˆíéÚWڀC
Ü(ßhÜ(CÕÛ ADëIÜ/A
ÜC
îJ?D?BADC
EGFIH,/ñ íé?
íWîiÞIÚPó)A
íéE«F
?A
CDE«F HÍ,/ñ ?Ü2Ý ÞICDíðABÛÕ  ó«F ôD ?BADC
EGFIHi?
ÜÝ(ÞICDíðABÛŒA
EùÜ(õ FIíWA
íéE«F ?8óF*ôæ–"!ÕC
Ü2?ø ÜÝ A
íé÷«ÜÚWÛ „CDóA
ëIÜC A
ë ó«FADEù  Ü(õ FIíWA
íéE«F ?#$I ó«F ô&G% ‹Qò ' (*)+)+,.-0/2103 457698:4;8:6@?BA0;/C4D-FER"S T+UWVÉíé?T#`aE#b c#cdfe`gF-/EP?R4E%>DT5A">D# 5h#?R9 = 62i$jG 62#=^5 kl2 6!f2# >D[ 6]
>Q?R3AB\5= 62P$HIJL.625l5m#F&'-/$
,&F M?>nA"FB# S5>VM2>V1 #, 52%o pq
rs`t/J L.65.M2?>u# v?R=EB7i&F5 69 <55w;# 1 ik6R# 5Q 62@# 5 6>n?
 #7795q# =K-/?k# 2k6@&F5 6Q#8xGy{zI-/>D>T# 27\[&F65Ok6@ l5D# =5O79 5# 

>@?;  AW#, >D5%>DM9 k#, 5| M2T#, 4 8&F6K 6< 6=2# k7v Ab 62@K2795 52#\5 %'Af# OJ2}D# 5aB# $,# [‚5ƒM2#4 5O# B[ 5A\ 6^KZ9M452]# DMZSJ
L.62KA"[&]85>D5 F79,&F#795% QEi5>DM K>D>T# R7C 62#, 'DMR>D5 P 628#5>D1 P ASE,# 5O# ?W =E,# 5O# ?J„U!7C  >VK F 65F24 k# 51 [1 62q#?R,E8M2k# >…A"#>D1 #i?;%>D
75w2B7i?
!M2#K5 † ‡]ˆ ‰8Š ‹ŒKŽ, GK‘“’S&F5 6  ˆ ‰8Š ‹ŒKŽ, GI‘” † ‡]ˆ ‰8 ’Wf&F6  5OF#!•
–—`•2-ESE,# 5#?BHIJ „Uv>D>T# [9&'q#5Eq#, F 62qA",&F5D !4BKqMk# >˜  ˆ ‰8Š ‹ŒKŽ, GK‘” † ‡'ˆ ‰8 ’“”R™ ˆ ‰8š ” ‡P y Š ‹W‡j›œqž`Ÿ ™ ˆ ‰ ™Y `™m¡ Ÿ žDŒ y ¢bG † ‡ ’ ‰F‰8šVŽ‹Œ ™ ˆ ‰8 ™O £‘'¡ Ÿ žTŒ ‹Š x ‹ xGy{z ‡]ˆ ‰]‡3¤ š ¥

¦¨§l©2ª«C¬8­ ®\­4¬T# 5v¾2,&¿# 2#95JL.6@ 1M;@9 >À52275 6QR4q 62#, q# 
! 
M; KI ]Mk# >Á5]# O4@4 2VJL.65O'4279BPB42 'M,E
5O79C 6^?2#5O A"F>Dk62#5O# !# 2#
½5V 6R#, #DMk# >Â5OF iJ9Ã]A"qMB41 5 6c“4
1 #I 5BHq 
MR494 >[l&]!795E4>V!>DM;5 52# 5 ƒB42 kq 62# Q&F5 ?R%6MA"SA"@?;VM;5 52#5 QM2MR4 5BJL.62T# 5!K>VM;5 52#5 QM2MR4 5BW# F4 #?5O67T?R#7  6qA",&F52V#45QM252K5M'A"8Õ^Öq˜ ×
Ô ÉhÉhÏ»Æ;Å^ØfÙa>a` P` >a` ` R P b R KNM OYPZXK[M O\R  Ec//;=d.-eLKNM O $7>f g7 h T $#&%(' *)  ie,&39 >c>amo` npqB'`r>kl lj j ) K[M O $#&%(' e)  satc $#&%('>x : uvz)xwy  |}H0;=~=] >c ‚F0€ƒ.=C=#&„ …  >anz` ` h{  u  ‡† Š ` 7 uY…&‹„ @…f7Œ` :` PaŽx ` R  ˆ‰v  $7 >a` >fP C m >a` ƒ’R & … f “ R ‘ P ”U•v–Y—˜™—\š H0]f›Q3,&13, šxœ m t>z?q2lm x4m]q2s lˆ7p't>m yjs7ln-ƒ?‰*lw>ˆ_qjtExTmVq's7l}~w>zTzTw#ux4m7†n2w>o7m v7m7lo7‡7zTl
w>}rtE‡ ‡7p2wHÊ_xT^t#q2xTw>mKnq2s tEq:ym7zT{^w_y-y-o7p'n:t!nMtb‡7p'l-xcnlCwE}+q's7l^Ì » }Í+p2o7zTl>É?uMl…^tH{en't#}~l^nJˆUl-xTm7†eyAw!‡ tEp'lzT{en2l} tRzTln2l>Ékq2s l-mçq2s7l*p2o z4ln]y-w>p'p2ln‡Uw>mKv)É x4mZl}…Ì éê_ëì́í%x4†!m7w>p'xTm7† w>q2s7l

m7†>o t>†>lJ}~lqDtEzTz4w#uMlm yjshw!mbw>q2s7lv_xTm7†KÉ s7w#uMl-€!l-pÉ7q2s lbp'lÖi¡2£-Ø!ŸÑ^Ò#›IŸ%£#žFñ
-¥4Ò#›IŸ%£#ž  -© » mFw!p'v_lp'lC‡Ul-p'xTn'n2x4€!lq2s t>m]w!m7zT{ ‡Ul-p'=x4qq'x4m † ˆ7p't>m yjs7xTm7†Îw>m ¥4£EÙ †!o tEpjv7nptEmæt>p2ˆ xŠq'p't>p2{Zz4ll-z:¾Fƒ÷MlA}~w>p'lezTw?w>|?x4m †ºt#qt ‡ tEp2q2xcyAo7zctEp:xTm nq'tEmKyAl>É z4l-qRo nyAzctEp'xŠ}~{eq2s7lp'lm+ƒ ù Žú¯r³%°m Ÿ —M¤EŸ #-žV›~œ7ÒE›išõÒEž Cš ¿ Ò#¡2  j›I¡2£Ež¤>¥¦= Aj§-¨_¡2aÒEž bš í CÅ î š ¿ œ7£E¥ H J—A£E¡ A£Eѝa¥4 H-¥ ¾ ›~œ7-ž ½)¾e¿iÀ ¾\‹ š ÄCÅDÆ)š ¿ © ŒhrŽ?K#Ž‘)”•-›…Å  ð hÒ= -Ò—AaÒ'Ö!ÖU¡2£N=Gî OMPQSRl^_kqkˆSunW Y~R6jk]¥_E[SR[`VXZ'W V4Z'_@[«W u'\@_EY4ZV4QilïacYX_@l-V4QSRRr[iqL_@að›jSW l^]Su'R$ñ Z'T~Vgf
]¥R¡W œSu'R^ˆiT4Z[S\‰V4QiR^W@œ¥_eERtTXWacR^W ]S]iY4_jkZ'l^W V4Z'_@[«YXRunWVXZ_E[wvT