A Formal Model for the Deferred Update Replication Technique