Model-checking infinite state systems for information flow security