IFC Model Checking