Hubert Comon-Lundh Véronique Cortier Security properties: two agents are sufficient. 51-71 2004 50 Sci. Comput. Program. 1-3 http://dx.doi.org/10.1016/j.scico.2003.12.002 db/journals/scp/scp50.html#Comon-LundhC04