The LOCKSS model http://lockss.stanford.edu/