ࡱ> {xyzn?oh t3ZsRGB pHYsj?%IDATx^}o^ǕkW.toiW %[lAZ,+b-F]z# v韨Ђmb/M)a74nd@HhD  ͋s=<Ν;>y߃x4t1]Wӝ?;b}7XiMߥmlSqǴnn9_3m)cWq_= SyT|_taގ>ʵ{i+ɷZL\K`<Hs-gw-X[|U+.T$*-Lhش-Ңڥtڵ20g7gc+vۘ7k3A{y6f؛dd|-?㙓.X}Jf&jcqYG(z;?5C5Vݸ&ꍕ{i;|'4kF6m7F[֎ oz|NRM[> =ֿ6h6-,i|+FE (͓)57i/ʍխR龙 Wn&:^Sx"iM~;zvqxKgo񈓌?A:>'z1/rc,o^wόtL6:q^֢Ybc]bnc uٸ*^'1АK<GoeLӥY'4ՎXi~l1-sEgebNڙ?<*tJ?3NgT$/b*frӡ؋LbGTzK۵6J^jPcu.jc/o]IxJG]LYb,Exfcٽh΂eMˮId`*"1P8Rt+K%c/T$kV6=?" F:PT.U1A^Mocet 6֖E͸ZiFfm؋@?4{6S+io^mvJeG>1ݮb|LMs|?DV$1olCl ԌmԥM%{Q^]ڎi+)X:X{uS+!X]$d6-E[ >nDHmdf{$rb*jƷIuS*ꢃe \^I SGش:&]tCKڎ]&&.iǴv2:eyڴQ͵pQmpo.K77+ߦ^KR]{K]m{g?؋O{/]8~Si"d{/=GMK:Ӧs^zvK d,\bKa^j~.oQ.6x[ڙ.zi/}\uwΟyzg?}N5,T\ե].48GmԥDzSw}Γ~]jk&gf* ?4Bγxq͌)t;^VBu[F| n%Ɗ[Ԇó^XNPc,{u-b/Ϲmkw{zPU:7Wl-c.N1G&n/JΠr4 U[]%QvOe},kqm񖎱VҢ9պ8x㦗{ޜ^'3qU{uiL!q^9tW$v2icVdfrhӦ%i=W69Y-V7{9n!]鏟:z]Wx+/5L O${-z^]yN3g5#Տ?_h>+% ^|Q>j.j!=y=pm?~+|ۮ%}|W{˯>Djb-eO 4D xroﵯ]rgW㹮f>q]<ו~s]*VSьs8 3Iݙ脡sOq0$EmoE{?7{QҿLk}\O>Ds/273C }/a"}tI/}թEyuZs]}A _/Is|gT2wޡ|[㍏׾qy?\:>3{v̅}5fRgezK_R+Zi u y2:bJܸW^q]g37Ok3s?z\_va {]bk{]1 g(v]d.ì9Hgޣao҅Rr Q~5["J>baݬu^ -^z:9ؔiqfΧTvne6mukMXs]yKkl&S켚}[cҟ/.:'H 9rB(M~+-6[!'쳢 x ulu.}FDW3jԘ.$o:X"캮ճp:OpħMh}>U\~>\M`=pRǢ%D:]BNaZh*Sf=+޻AOS 8c3,9sgfl 4:qp6XBl)@o\&Ch *峨x7f)+9*9'lj{>Ikcg umx uStx+,[y?3"4x=%N+aE}tv}tCuˠ79[H){g1:aØdy?w΍kO|JK=zCiQK}R!Lh:3MNw2$7fW CNRsmv5ҬD]LLgZ CG?W/g:|ٓ?Dc^n504Ȥ[S?nrMG/_k}w?oeӯ?{=Tm~hXD~퍄ǎ}|O?O=ɿ?+w||*~-|EcB}{99{L7qƦ)z[:h鴽 7minUڤ%V4JozxO)`ѱ9atW&_P-LoҬoVuo{Mњ.}J֠ʘp$ mɱh~m 5>9*97i4AtcHu{ʦCM? <ץӇÍro!̧Ah>elLɗt{sfJ}˦9G>:2K&mIuq&rSocҍ(älz@YJU2iӱ;gx65r]l=ͷIƞnjFwKzi)?hz}~ˤs]]nXc-89JyNkF9];|fU?N`IHFwJj{|wܛ5Xڞ2]wԊ.+K{4thjl[onCh[Lhʮrsgn9~'WҜ6n& Gp<% yΆ{4K^y/k>O/>O:=xJ*D< b.Vw̌ 7[>s]YQ[G(ޒ5.@f-"Hg%0{C8ΉɛqTّ?w͏N<'m~'dKc5ފyM4['+m|q^d<5[ZZY 5yثXm0?7r.#/}?g}qp}kŸ( RKX0ӌnay< v؋kJr'} X kOnDx_Wj^Ti96ls|0.K^ox^uٙ\p=Y$@ૡV+]h '߷Pr.+* !eی֦Dz|g "6=oM[)A֠6 JoA/XA 庶 Ʉf;4Ddn 0Fw9a%@A3O! ņGA ғ_ܩ_ߙj@G+/qȿ^o'B[E~  p]$6ڮk|s5,>Xaӣ?O/!"뺆 r,!Dc c0+|ù"Kn+5| RYJQ|u]F3xe1v` OR|Sfq7ݴ6]e;H ]coH\89Hpv*2*=k]4GR]NsYz~k`A5hۥkʐ&l#ѡҝW*ArKۺ3!O(G~\[Cstk{=AKGJKh|݊[b|sAjNڼEw# 崦RVG]@`pūXUI08SuFq1gN"^VŠR+]ctˎ ZM`j|G+ w .:ӍiTw8"NQFϝ:Q^F zZop9RŦ\$źm2򁚮SAu r>R# 1QKKgYFCdcbMsPs mzqZ4Mn+ m ACUԃn"xIc<@KtZJ-\S$&tڎ}wjt{i@t{f-l_r/wpdq2K̹͈ CD.8^#vƩ'zP Vm f-NG5`:zGsBveq &i5uDgkĭ(zk@`(ZagaF]),um v ւ1|oI^KA@̆c@vY JT3 .yP@`;83ۡrp"=rt$@"@*olB@#`!jE ;@u HWuI3lubXp]uQvv#Oֵ47@:U] ;1\W]`Ӯ n@ 09p]C @.o |:xR4H2r#Sv 2'-eL1ͧdZPo-YiiK\)z [gz XU49$#UTt7 /emqi4E%CQ)];WC~Zpp.pkn\ଡza!&!_piq)TyLIKeֆ7d` Zt:QOTbL2h94˴Ѻ P$"qB%x~ `-!U4z g!5e^ &sgP0-[o7tUL%HbuXHݐα+aȉ3YIRѵfc5ŃHhB4j|-9S6EzcO.{ϠTWjN0;t*̎O53\B>= j"3́~LJ38 h#L$Mz1 h#Pu+9^q!Μ`9 s(+T<ǂ) /V|4)RqcDHJSK֦31Lr*M>Iҟ뱆Ӛmڲ57gȩ'GbF]ES:ŋbL*kb::22e ,dL +6h R6M A 1`#˴a_]9C &㕏d.*?u 1=47A2} Hs!<WuI3M^w >wR#mP;4- 8-t1+v _͓.#P HWuI3lubV6C:'ե,fɿ@iFY\%pՉIr]/DzinϏ>r펾3hJSȝ1.Ke@u-u-˹AAKR `c:.?X03LAzI &xu]RQ]KԮ XA9W1M$J^$c {fZr-2K%g0u0-o@hoiǠ'Zh^9lݷf1߯9'YPL;tO#t#Lbcc L9h$ 3_o3+4nMnj=A,wΌW7`0s vMAׅV6G~RK Myf::9ܷ}[5 j8͊ fR]#&a%ZiI$zo}u\W^ӷ2+BTqt(%XjUQZ{ppO/N29"ՊC p]Q ג\8^-B"`oHA f")9&΄qk&^~+'}I,5 EFuUi_O.׋?MQ$H'zYAY_9?9 RoPYaN6Wi@_vċ5 !\&Ihؘ̰#{[{MMhkku^H  Ar7ћAkԄ۬kv*b %r#ZKyn%KeOa8: +ʊdWu']SuVߏ(8O=@"2̴AbTG5) A X['w8̀ߚdKowɾNa"f"B%=vLZSqQT_K/BɞEIo1t@ _^}ϤTː٩bYd@"PJ_ck/ tr #`Uܹ$zAcc(.;n]E6bXjv|+fpi+)7S(>[{Q(C%ŸS8a~ui]c+{A<5Ž/̏'ULj/ԑ!FBN+ 1!Y*bw/ RKfξEpc5~G4C,{DMY&5#&HoA h̀^VHkةZpT7{-pqw8X\%p-A]|z%٦n[ޜo*׵|ݲkjWuI3-YW;\WInY*v@:U] [X߭yTw@P r.IuN+^^5^5P;@Fa$[" i69WƉT#u̯JG[P b/]|KkZ37" (q]܃5lY`kqDçSKLyI֋IL@ c2Rm kp] VsU5J>s3 ~k\ G`뒵̢x$r$KaQ2FpjEB/M7Po#_L\g=(4P>`7M1tk/5sE"ʙe^(ץ K(B&ߙ᎜V% j@xh"A  ^9ŃZU䠔O#0%iϘ:1{G *x'eΩx 8r]A,2fȇhs<_WN2CJHN^dC1v*"jEjoKczx|#ūQGEc~7qHd~׮2DG^+LF.q6NL{ ǔ?PI4 riNspG`%L#h$N{hbb'}gjUӦ5Ȱ&A.)Q9j8SVp24ay9/iz!8SOjRGZ-g#[-`L6vOqBꂾ5 ]oN1}/8s C4;^D][cW%9*ꪨ+ ?_e;\rfklrT PdO->mr.1Vd9,u-HDrVX/q`RDM(L (t]ŏDz*&|uu^٘1~X DqLz㧋ȳE8hfn bBuab%%I [Y 2M'N̪=#l:< ' >-*̉@Q:$Tu9ݑ8Q66{t뺜^:5G.EnGxQYsUvujy:,h#/jp6s,$Fc ݃{[yr* * J_/_x&6^-Le̿~JqJ |ԯݗ<&krTvx iI"-4SoZd<8:|nb\cX&zm;="KH.G*`:4~\LA|N.:Z^?2~f>_w$-m3҂a(rF Ϡļ3ҳ4nA+sq]9F7Aɮı{pA`25cOC]W>7 rL (gp]>oLks3~A_Lϗ<ظ1Om>2וht]vHS+6%Vr YɧhtJL{X7r<\/[#U\ Bs9.WX 1D]^bk94D/, > +9.]3E &TKp?(q@1gr`t|yjB~/MnyA-;@ *zv9/1}X42A$*E` |e-DmNA_Ack Ps2UJ` k.TQoBX@ u!z@BP  0)tNMZ 3OԒ/@>xc@8ys>C^jb 2l.9X G`ӏ9g O&SV.(5<{^?o WaXܬ L$ވG_#ƠSD”.>˟2Od e e9M-9JG6ZW؉l7Cy\_Eib 1J9 X8 a.m"9{Mv'qf$k|3oN9WiEщrF)8͍L0u:TCXץ:'*-r4q:<%V74ny|LZ`Q!v^ ΃[o7Eޅ\5-+<Ӹ£I b:N}HQœL-[/<9#~iXfxagML9='ȱ̓ҋ۾1k3i8SM̀ui/7_P?jU}T΀@+8&2%fa2Xp_Qp׉:vG;rmhlFڅ ?z郠ĥn]VAќN,'FK1+^Z!H#vI\٘ ޶EP93u$K2IAQmif*V|#鈉vu-GQ07 p0)6Z?9\cf-x&`wp9(: ))!ǻb7W1¼v2C)؝T1J]POe`bK\wNhN-Aڑak!biE?A]8TLJhiZ@Bum  mjM v$@`兯*N:gv|ů'ݦ^.tP,Tg8Ĥ/! P$#.q]sD qw9~.h<ۙzQ}at*/g|OHkf]jZ\׉cT&\%\91sJwEu帮;LE3 H VHU04*1կcЈ㮋XIe *J{/g|z[s9BKs&Hcd,:i8K sCAC@{̗@Yg޴HlbA 2LgUl\~R4{0v# *+s@!Ks$Agy?RyԞ(%ioD`s4J bQ>VrXJ47rkir8Kj^a1 cMџȯ}f[\LP34SP ut4>D> lUğhxq0e֬|keFKN6A tAI׸MÙy&fUT⺦pז <> = `ʑĩz,u9z1e%JA.Tg8؍# e.ELdIY :A4R\W(&-W g&~(d9+\W/D @NBWa".MWKt[$$@0B/jRc檣. "dp]1@` sQ_$$fAZ򾮂jP ^}6#8 uM/ @uສC @ 0-p] @ Pꐂ!@LNN/  Ë\}ёNS: 5O v]'ݳJC7u: u]vu7ԝ[K/u F"5@@^܈> gO4:3ҫ`5[s" uѾ֪:bp]JmpLc1Is Әe^WE0 E@nQQ#@ @=jU!C X'Z'  * E@`u} u"@Љo@YHg#5  {k:/RW\}AlAo⡏+hQuc-H)|p|tZk~s&} @̆deЗ8e4J@'N%9_4qNYM4@×VcGc.Oaty:a4Q@ `: %ܒ H,ţbN2rA"̍ :99uҊl>-v:iH2z+@ ,{{F4KcC ETӉ;w$FПğ5QT&Lj&L:--xӠ @x .+aYfx׋,$r`_uLTäW4AZt5 G*@)HG]u>zxn.դ'S62&^V!x/"a/n l$.xA'H#;LLNEV+{_NJ 1t1v ,{I7PBY0u7lu ]9]HBCvlpϵt0^ki3DH0_%Ǫoa m# J 6ި4*eKow.0'G/f^Z,)d+nӴl M^溊W ֎@oUrJ<fv]^3@`6Qt~/hҖ.xfF @"o-EIX@TA gJE`2\5@@`|RعCZh FaBH P <up0# ^ v>%w95vsڏ? @A sqL;[vz-b Łzϋoq+ p][T@ Bw]8AQ@A= XA5Pt<@ nԵ:^rj@Mc л|[@<84@l p][ҐP ;uN[CS  ׵% 5?wǰ)@`:r]$Ӛ  kL@ծ@LLQYHDA@ YuDvWIV7˞ -@`|Eɺ"U 6E.  Eb D~kpy 5< 6 ^WyO ^!9#!#Dq Kh)@,0$@MGk[ vkr( t6!?@`p_|Ҷbgp 6.@`Gvĸ&ۊ@um  <׵-;@ENl@ R #8wBIENDB`nY6~%BST4)PNG  IHDRsRGB pHYs+Y0IDATx^ouu'X@)CR"3M6o0d|H)jGr!(i>Y-ئ)VelS AJgy Z@T(s]Zk>{E<:k?דּϹo~/ 8Uc+L  px/}L75 p'$}S@ CRO]{_]\uq7 =ܾs3aw|;7տeV':Nt^LI|y뵍e3ݭK{^\~f}=&/"m-߹1)$"V6(;{NrLQ{?5TrW2H8S,%%Wx<:liǗ꽧jTED/}\~->jk_0'<rW}4޽" M%ʦG@3\M%SE͔@w޳#buLd 㝆~sLDx.ctKP*K߉R瑙^w#DfnndDv2x M4>ǵ[e&I󖔙ȓ.L 4-EȈuDlsEfwsXݫ=Ҽxc\ϔyߞt`odD]]>?lk#5Ot|%G浹Ffmy-v|Rڬл񼮧quFrsa[zj-z]7MΚzMO=uܩS&K_l;ͻr75_\M/L6̶5nrg-й"mz(]g{O޸v3Uz{>Tڲ뮧]sK=.> ]vֺ(vA!-69dr.f=wy=ĕ`mu߽y%;S;k`{L:J5p&4;b؞Χc#-2MӖT4 ;k‹7'wNvsv7(y񮿞̱YOڈd&1ikmMwu7M6(:k}\=݋w.dyG6'=x_vʗg?3[磭@nx'n>ɛ [o_, />UO~K7n7|[|޼%;zKz}7^U}ӏ=e[1[K[o2Km n4^ϻL[oM᫸qM˷e0w^x{n>)ͥ.~4ϯX2߭]"Z;G9+x㹃&n~L"gm;N߲ ͻmKYv?12"?oFav23_||v1vӻE3;R˧8n{/<:k./77gcO?sopym-'sw|XxSc0k+:SO}"E6pwc埯*4Q [ϼo}fݼ?Fg3Ov:3}i׭oN-sʧ=ɰ'$#:>f|C묧2wʛ 5ws:wGݫs唫KWTmOMٟ.us7SwrgBngOy?ұ؛'d7} Mv칛v{|iZqtMN4}|ϕO>~eG9sG=oFOwy9&e9~kuqC7>\B~yOoIl~yاıOMSۧfnp4t+=~VF馉c{7|/=[Fn~p鲋̼+ͳ_-^\ћ/7srvk֣s!Ыŧ*o}㻯Gn>|go?ytݏr\|߻z-gҳÅ7dkwm2Uh_O|汏tb~צ7 %#.e&6xKO]F ·~O߷Kg]|V}xS 6"k}`;I¼-Ȯ-'.+zB?C2w?HVҊv?taB??BetP=ny> ޜ?4i_|˝5]R4?[}q^)|zP krz_ta_9x)߾|2/PSHUCE#xX>OMѥ.,Z6=f[Hyw4Ǔ3_.+nSp?{sǜxz~je#txz~d*R^Gw34 Sðݳ?)O-b ا^cZM'%yKSO?[z^7ʴ=;=CM׾ks2u>5QO<̟T,|1-O^)e4Υd:,zm<{ʎK_VK^<اSMBj3w^xK/-2^~bAK7ؚ*g 3'9F Sl6ɇsލ}^ޫA?'E\D5xzl1fK$h1׿Z\.Mꬉy-'}bz3yFoX9.n3Ƿ>po>^Bܘ}H'y>I~~FTM^ԗ>8?D}~l1술??/6?~kçşay쿸Rу~>?`aoWO Y?w><%?~Z7Ѓe{o_x\k҃"Ow_y{}}kY'@ko/(?_~L|ԯ_W~g?.7^]w\ۓ? ԯr)7^r޴3>r#~7)Ss'F#O͗ _&[Ϋ?wo^[>7+7/?$'U;(;6]wڛV9; y7=_;czu$5;3xzV6B{nm$3oN3ۻO'ᄌk wSVy8.s~wS"oFJESywM1NDq&Y]%7 ޝ39k1sޝ7K,n+⚟.:߾jIKy.džߛDzJFD91"q`_ޜ鶨6q<͕xZw>>sxҼ6971qѳ\=R 34B7loݷߣ7=mnL ;c3;FσlUH|{7PݿFZ4=dC<$)D,⥿ tLYfz;M蓊tOOc3;ȉz׹|l?GxJM7Ň;/WI'J.EJXU>ŒJ[~?޲% ӉyTIq6{!SsoqޏG]?/S;T8P}NF>.& q?T!} }pF7S׏ I Dp)3'sYIEӉ3op"ziKWfN,)z>-b;V+A|mOyg{8+䩞:Nt{?.۹QY+$Hmeܮ6ޏT˺Vcsiӭ{$;[o=ߢ7t{?7mL>l^XmT͐#D[v ?w{$9ocHVwU3o{B}~{?4cZ<ߖ9 }wo@ ϗ;L̓'OT: CgB'HG  ԧIA9}'x=}!8_ΏVj.9x n}|@1| /ڧ A`jS4TF tO:pB *2kMutžw9a  SKՖ$2.vTz||k.ʁԂ@ pfj˹vK9YҦwTpC^#W n{mo3Z nE~2ߩߧ_ 4J5~% 5A?D/$7 bB  S TW"  3礻3v 0yGLH :(̛/ @.ʾsB0u% 6@ @2XtM JgRn[8ɹֱ"P@Y&Q~˼]~gϧD4rXnp #0}L- r9֋$x*1S`b ] ǙffWKmB{`2[%bs++%]ֻK'XMt+3u|͝Kb[:`=̻ԈgcBm₣+'gj۴Wڽ{9`Ih5ok{͙⹵wn d XIZus’([1n`?,';\L#5~Kzms>]r4)cj@3،J h>3h(Qg}j'Q-q@f% RXE_ʛ2o*w*7C;W6EY5n\.bUxM03 Sg|{\~Q[ 1g9FܔEd05I Ե]c;z9a=x}f/[UJp-duEr=;N[F 2_NO!>5* p4~8S7!@@4S7!@@4S7!@@4S7!@@4S7!@@4S7!@@4S7!@@4S7!@@4S7!@@4S7!@@4S7!@@4S7!@@4h3TdGw]14.A鑮*3:!8AL=_Ot~w,@/K$0<& N6S1 ht*  6S6-"ewTؽ4,B`)SU܆Ǜ!..IA g{B Լb>l'GjmtH N Sל4G d}a=!ej޸Dyr!*j8<Ym"t糼3> ڑ(qo*6#Y)8w~7u?8bM,pDy'侓{ŋBT `NZ3 v%Ok@{U?^db_*T^e3*ȥZa>dMo`d bsV Qu8)%U ;H}4j׃쀼0\4ۮSJuG3_>@>H7b)du^qNJɤ<ȸZry!΂v$dVD ̕L =RK5kQv=c鮓#A|@YC*Hz\N.dm=-w$d:V ,1s% 2B3.S*θ*JM$4g壚| K<_8Wu^q-oGV )nvCc+U۴%[~0_G4MmNUN4c{Q>fh/CMK|ay4C @yC]!LUR-&WwL.--nf4#WrR^2׀JXC& gYC ,kWP`jedUm3dݲX&qHv!bj=*QͶŽ` ٺ ) u` ߪ!&ESDLtPa5Z7Gl.϶0Bmg*S*ffc͵X2cekk ,S/qfZÇy^XW1 V?z,f|Lf+pD z{uWܓz=-9(a;? ~DyE:PǝμuknWͧYT[ Zw^m)>h_ ]6n7J\qcMM|z5pa^1U9\܄]:-ff][djVZA-|,4L0]&Ƅ+b<5Cr nkVoe5jIf;;c1uqRe5gZnXUhOľ%[!" $,6tw/'RDJk96O},@VbWD> {2wVlE'f.VʕԊ$kg8NDI| HMUƷ fbpi¶yoD<%%S'ip~[agҭe09X/LjSd5Yjȯ҃ -Sh:8oer7ZW ʊ$AF_H51{b]>< LMXsg͔$G8/tuAC@?W w˗B͝MIkN+U]PB>v)}aN.LTh54]bSZ22#qvy3$_Z[H qͩ%4-2"rI =6qgBȇJƽX(,E&*. xw9estᤘ΄t#RZ)+UJcV>BSz]{K<hgd9K$kVţMU8Kjigޔ~kjpRES$3}wvSL}vQ9i4c@` `zq EL݋FL}ha Ћ1 Ј@0u/b@0= @/`^ 84`C#{@^ԽA phԇF{<@8 zS"y Sq@"bjk,gلk+?Xs`!\Xo^urF~gsJj2\#bj?Xσ䚬xѫt{bIYz|g9v9'L}=::"߬zOG4\p}L] k^[]s^j[:I5$ٖ4u^-UBR-ĀX >Vy'1M鑿Z#e? ?^W 'CJ20E?V$vV3?Zu =@j#Ԗ{a LUyr@c"B]Q/مӻ\0&t05q$%vbI5$ ]lv =X8>^s>H?vo/f5U\֜R2WPç7FsDRt74II1&S1e-a4VsR|VMN縨3XSh?c鷒$>U ,#U2`^ خ3yx*ר:]jSqzB p=H1Q N0$n Q@SG *@ V]™tM3#US򶛺V"mN;x{zygT! pH1bV\cWύd4sl"vDn5.Z'73f5=dX@S/bԞq3b:1uӹ.սv/rg݈j6W˂ (䋣mI Eݮxeݢ|8]j cg umzCmuYfSf 0a t0^P~13*'ꅻkgɝ1_C_3t< L@` vL0|G杽Ճe=)WNX]t @h >^ s>H̽U:kiz˚S蚆b NKf Ԋ& }X^/m\u}ꦀ y`Jae;o=;]c G jkg,#rHeSqzHlor0bk^7}Y||A<)Ϋ$@zuH 2`: W +#^P@zuH 2`: W +#^P@zuH 2`: W +#^P@zuH 2`: W +#fjUK~j\zOܮ  @u˰~Ga"@dh3QD)d. >h3ulڑpI:rd }@"?F.GD/oVӃx^ʁ8.)ft>'vmOw.iVD\La .)MWָm׍ڀW,Ss[kxZnMjg pdڍ0mh%-4pmw6=O}ρH"PbjcDe`;uI1 #ԧ <@\IW2 +J p%2d!`RLC32q_4mݐ*4 @HRL-i'T-J7=k#|ۀ}KR#lB^RLMnqqy_޳vlXJ,B[@@ {BL'` `ՠ" H1f?4>.>@hpX F]GȊk[f5UUS^jPjM 맺J,HZzГA E|ϲRf% CfL"M8 -2E*kCe.RU(u)w=';_S4T,1fR9E-VM ^OVYwPDi',Y'zbg̣#$Vv",gjtܬ.Č\{awMO&WoA]ۈ:z#uq}h ŪcM|J׵0&v&:@Ks :+l^.{BH*)[u*,իAY|q=8F(ِ0V㤹f&ݓP#FRaJ)*&&˕Hm00FL & @0u7d80`s@nݐa@ 8 SwC @#>00F [~AT 7a p$WJlEq]^U]W62<1<ۀOI15&"$5h:b^(@sV~vUnJ.-v{32|pV"BL29Z9R.)V]5T$KJ1Yh`ӉJ%}+zL0Q/duA O%]I dm%r2Jgs'[RcLqi%6ŪVZ25nh-T2dVT8 Uq⦾Yq $󁸰bg jU&X} ,bj RmkpiM Tն\hzΕ3( `f(Եq,k|(M%I;e$lD-fM\5LX=7 KAjF*)  t>,G/Jv*.N2u]2qu 7K\ 0z:L<˵tg0u2b@H1{yTvWݗ. _RJAdD,IQ#@s`=3+@RzjFA4ႯdZ :jrdyI}bBRLmL|{ga<]1ZX(9 2L3VflufLs3(*E*Ҍu-+͙k}lVQMĕ2D`S;dl7랉>G :f%'ok:@> )ЛB@~Ju%6/npӡ!{Q^ܑ40bdn5aɑ]Mx"RX2Qi^e%yI: c!bs/2U3Rc)S6W'zѯF)%!QREK!\6OAX,fZMfAB!CZ=9dzƕ\.>qq9jj(4ܸ<Q&ԙ͆!+,d͐i[J96VN9^I* X[:D)m uxVu2sٶY$As`yP 7 !?+"Rt1uLY ,Seo½ږ l6ȰVzOL^Ğ9RZ/)"sOM̬10`/MX!ke޹vY[Uo[S%<P gL&3kl\+yϪI+CD_s}ͯ$)nVJtr s3]U T D+ͩ}k$&Mm=d4dzܞLFa\pB.TkE0)d@Ss ׿kB.Ga «TAӻF%AΚ?yWu`#t^JO3ufF5ֺELu.Mq՜e4sm5TRW7I pLM+䕟V +Ƨf=n>Lvk]'﹔TȯӦ?cIߴ pt05Aӭ3]@-TEHkz4qzdnQII^'0Ā`jٰU0Q #Y5[VaL&s&Igbu)Cdfщ^rJ'c!oY[LF N>{#1TMbyv$zGek+`2.ZH̎ ʖS^  SsX\uj'dRGRL-kѱV_ GƵNuQv׵VqtُĦ@ E 16˲O_+5b8рW]SRLMmqb`eFF:?{ͽfŰpSrzџ+7p!&{Lr)^Sy j5"o<,19nKVt(i,bjyA=l6eRu뉻Zk wqR I@vClT#RdT,!4Cse3 A\KԵCؒcUufȌK֘[\bU&\UqIJ:ZnomZN&^'Yrf!Wј?kr_Zd=뱕oS)7>dBSgtxPkS\Vk> )߭ͥzL񎊕Tϟ/ Ћ@S{y;LTny$3FcLtZ{%8mVN¦,Jju̩Ln%gL,x8NO륕?j\5%jV$=ĊKͅ}{r 8=52!lO\ ״K/bIHt#}P֕ T:\rAnK♄. 5nJ4qwn$dY$M'ZvK󽹋rP!PY驓E_w 9]RIs B2bvRFfIq]jN̤ҪJbbŒe_4;WoV Y- Rs *ErߘKf=Tqˊ(5+)e2$&I}Gt:- ɵ>Fncxe8=u3:plr='wn Yn:yy6F>9=X! iF6Isl$H'1\驹RxPD1$iGFbON:GfX,6 J25.ebZ2.M>κ$%)r)Yɲ jI;.B 7>BO-;Y]˕i&4;ep3%#Y"t+oR"oj>꩗zs 3D^U8Gq##{e²U`?BOYQ M /<JgR( L_q u=-}ڒGb|UxTNK5AMJsT ʖD\u+(n/In-| 0)n(ُWW:@^j'S34j ل-VʰL-ybpJP--)f.: $R[RRa3%9\MG\$ڒ4 vbH+T?;nȺYI hTJA!読!#7mBI<qv]Xjw`&)\TJn1*{A:;f"SZ.bwkKj(ꟼS70:$ AT4ƞMaJ4mGc^ .% fZ32,U ]򁰅.LH:UɵoMDڒ)uLy3؃̾جK {ufu6Dn=)L15sTK[r5˓;50bg2.?]bؖKkW|Uy%qCv ̢<2IdXrU-ѲU+)ӕ k$hj$[E,ԄZRpBXWԔ@qAKTadjٌgd3)H%smge©wۗ%kj518IOlJzCDrl]Ƃe1ďi[tlKݺښ/ಒc,'uWf"amtx3\#+yWZ(E׾Ӥ[u4.ߵkBS;O+MSϞA3UuU $֕JnA^ RytG\? ɰd @lI*&ۏt1}(o@ ;Ybs@=u *؞:uGqPc}rrLf ZDw1ѳW0, SF)>ܡ)@ @܅;GF;(@(; :SwQ Q#SQr @;bB8}8"bjd>basG@L`Ot^^U8SˍbQ,8z4C gƠ̄$>k<@` '%>˻K\ @@Lobл^v?@! "PŅziжG˷v5Mk=4ohZPh@9, wi 8>ƒ] @L}xW0H"B@#{/]ՈWٯj ޕZOg_j@D@&S  pm63C`O]8̼@k@vmbE@E[4:IENDB`F9>4`4NJFIFHH Photoshop 3.08BIMHH8BIM x8BIM8BIM 8BIM' 8BIMH/fflff/ff2Z5-8BIMp8BIM@@8BIM38BIM p%P0 gJFIFHH&File written by Adobe Photoshop 5.0Adobed            %p"?   3!1AQa"q2B#$Rb34rC%Scs5&DTdE£t6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw ? Hlu78L[hbCHV\zJX/Ⱦ;6k@[j# ssCqUJRYˇ1@)Kǎ>a#eCޝӨf5X6;7]~R=CNON} Mb_cdnC7kY3imM<nlW4u& rZ|Ngya8n& w,g dqoR9bΝn(ŭƆVYvڛZ~w/}1mm}]Nhul1e7}$~߮ePǏf^eN5ƽMez:}K$d$cg(UPSX?Y1?\Mn'wϭO.`ǝkqͷoO(F2ׅm=R:NS(-aeYcRKv&eyL8CkXeU]\1(zN;,9i};w]38`Y^?s;H.@qzs2\xx?Og'ʼn֨C55;28Vt;[Ws^[l̩eeO5o#>tywr Tk|?+@GY~|y/0De!2c}uuu<,[_wC?w>밳}Y9vo"`f.г_ҝ^~S!o֏9X %?.(#}teY5Ǵ~mv *_If&c訵c1p{ .qmG1t>5 ?[K龛nʏ75RG _>bVW8eEX9ڬXmt9:Lۜ=4I%]}W_dnְY[j~ݖXq#>~M56mo;(@JGQ&FFɲw'ۍН]M]iv;{_Z}O Ο*",Sfc.}VqnYz_P~Ne-{qq:.{+zzEvu~6@ƳkIxo>y1f(Ń1:Omoq]kXk7zϭ[R6GNn=ifo\}߹K?IK7L>=Xi6>C뮦 hcZ QO-džȷTʩ$߭~ɍ@YcXCoKg_c"e$]o6O|7ԏI/RE%I)%I)%I)%I)8BIM XICC_PROFILE HLinomntrRGB XYZ  1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmddvuedLview$lumimeas $tech0 rTRC< gTRC< bTRC< textCopyright (c) 1998 Hewlett-Packard CompanydescsRGB IEC61966-2.1sRGB IEC61966-2.1XYZ QXYZ XYZ o8XYZ bXYZ $descIEC http://www.iec.chIEC http://www.iec.chdesc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference Viewing Condition in IEC61966-2.1view_. \XYZ L VPWmeassig CRT curv #(-27;@EJOTY^chmrw| %+28>ELRY`gnu| &/8AKT]gqz !-8COZfr~ -;HUcq~ +:IXgw'7HYj{+=Oat 2FZn  % : O d y  ' = T j " 9 Q i  * C \ u & @ Z t .Id %A^z &Ca~1Om&Ed#Cc'Ij4Vx&IlAe@e Ek*Qw;c*R{Gp@j>i  A l !!H!u!!!"'"U"""# #8#f###$$M$|$$% %8%h%%%&'&W&&&''I'z''( (?(q(())8)k))**5*h**++6+i++,,9,n,,- -A-v--..L.../$/Z///050l0011J1112*2c223 3F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<' >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JK KSKKL*LrLMMJMMN%NnNOOIOOP'PqPQQPQQR1R|RSS_SSTBTTU(UuUVV\VVWDWWX/X}XYYiYZZVZZ[E[[\5\\]']x]^^l^__a_``W``aOaabIbbcCccd@dde=eef=ffg=ggh?hhiCiijHjjkOkklWlmm`mnnknooxop+ppq:qqrKrss]sttptu(uuv>vvwVwxxnxy*yyzFz{{c{|!||}A}~~b~#G k͂0WGrׇ;iΉ3dʋ0cʍ1fΏ6n֑?zM _ɖ4 uL$h՛BdҞ@iءG&vVǥ8nRĩ7u\ЭD-u`ֲK³8%yhYѹJº;.! zpg_XQKFAǿ=ȼ:ɹ8ʷ6˶5̵5͵6ζ7ϸ9к<Ѿ?DINU\dlvۀ܊ݖޢ)߯6DScs 2F[p(@Xr4Pm8Ww)Km&File written by Adobe Photoshop 5.0!Adobed@ ]H      ! 16 0@2#345P"7A'8 !1A"2Qa#%q36BRbrC$tԵѳ4EUu0@SD5v PTdf'7 !1AQ2aq"BRbr#4 @3CSs$tc60PD5%7!1AQaq𑡱 0@P Ĺ^m>Q כYwy Ү7(ᘙ;ie $E:Ba%]Wra|r|r|r|s)^I@Qow 7+jz:'7 n\|OvF* HPE}v) mvips2:7l7 ݠwkfUf,;Jo"*"zcN_ۂ 쭆=bA-]"2JB~u=]~/{{cWYy4Ug});e|9}4= 7|{)%|fҾQ5[H]\hr;bUӪLކ˞Eʶ:ϩ#)ow=EN=:y(kp^ ޻cWu.!{**t5?힆Oz>pC,[P }V6l#NhliUSU kr_s~ƤWtԙSEgaJ}ST-("L{b%BKWx>|cqmz ~oRoEL8$XdgyOkS Ye3~_SnLaqۗzi퇉YƉ [OL"D-?RO"9q8RVӛ?k]ڵwjfL4QۗNc,JmiO{M8G\Sk:A?@~Pͅb^U&=FE&=FE&fefegN]I%Kn9mr/Ie٭KwF@¦)8IvM=@ROrёu#癵{5:޶߳k[VsL>_ C&^ɟO%xĨXN Fk{d|B-%I0]ȝ?[~f"A6?'Q5QGu׃wx:]M{^aLJ< ɝ1O$j3qBi3@c)lf?A)Tj6ª<[K2}1)&F钇5bd?܅{q۸,lk->HqJw%l\cG_GxZ!`(AF~b6'hoW+zɉFs+bƒKΜ+~Hf 9kCA1dB-[+٥ĹrM+5A$hHRrE&i[Nh L/婗&/ƞӸ565ӄm7j7x\{y8cV;=ձ*6$9#S}BchSj XbP 29)2@0 |[kxT]4f&PCcRی0yƼ(6Ixw;ɡ7Q:+7FTDk22u-ġRфArޔ\o|=ƪ]|. KR"U˯Tr^pu'X*K_x]3\*l*P@MLܬe+9lp>aV(Ӫ 7>96kYI$LBTifLˑ {;9ǂw (.]N8xnOIۧ\K:Oá\KtgO5|ar"RH%<kpLa2U)X"&#Fd}nԡLYz(Ok`C OO]t:뮟Y=x/nz/]du^==OD.cYc/̛CJ$MS̘@9Rq5kW+.RrL,)x]yBB$B+W}ozZڮ[F 1M9( {+V-JIpXW$9Qn~VǶƓJJJJJA}+[phWo; t'!yW|7cY#@R <6ƚ[ œ&LL$n¿JFnHټAH^d@(f\( / )W:A,c@joo xɧXcB:/.!v76JL Aڼ`h g%Ր]U!ra}WHwU (pfLD#ʴcX;o"_e{f /< f)ɱN=Z\,93Eq 1,(Ʈ;ߵ9mq\}_$Wn5úw?g%4}0u.ȶp.|v4Ǻgn =cdiQ쟌qhvA1\a5dlcLXI3Ʉ>Ԑ/',иBKpM̡HkC3չ$c[1Rהիcǔ+Ve9[&pʭ.K^4Jb91 H&7Hד>rGx ,աVr `+s u")pjokߘh+N*OdyMNP>7ǺT H} m ޑ0 OݸWHuE\Ez 2WV|*qqqqqqqqqqqqqX|)uzWdxpfdp⬷ /ƙ8n_((1 Vf:aKoE_1pcY9{ma؅ܮOgGL:y)_Fd>zT,g_P2-oEeK 4q+dem۸M s=55OQ×$X;[s>g0A#g!M |^U!Wf2dYsG#6#YNe ^#xMb<i}ac֌=FQ;'<<ōj12e3kFΆKؽz61dkr?jy;IKslTYCnj֮ @ǽ|: PjMB"GN1])N1֑[릘ѳ̑n߳lMCsS'ٗ#is! PSv_#߻I1{ck'ɹUs6k^no )e\I]J#6fWݗ8AVM8sGz+S j,'1}ʌ0xn U.gQٍ1N-y{b1 8:a<+ֻٝ$jGk6pBbPV^ ZLRf.CL [V/ĭkXOV{t妯 {& %afԞ}~mi['0Fơf>"Ok+j3n>6(l ;㏑>̇(;RɰkSu͈qRZ㋾4w(c,5āIfV|LZ(a7VMN9}ο]& S{a0}1|y5)018T}r2`˞lMRjsZi W(N$ɓL,'+@:j,VNcqAa}`p~dn=͙oPQ.8/i $EDlsɷiDE Ld:kJw!:ڕO*clݯㄻc*уz+j].q\Ls!EAz8;dku8+Î5f(qf:ܽ3|I~ଘa63g.}ϝ yQ۱<ֈˡ.>[b]8{H&eF.%0:o+/0wxΛ7ӧtO.p%H |M9{.dfWB0h%-؜OYռ7H,OٯO)\fc(Hl*RPlMkZ(#ҚB]oJY^RkMZ5&#RIH4DbJcRs vPqɃ{vm=[3]M\V8eNp2PMe}ffXgGZtSW~oֈ6bnT}sRR6,*- YZ: l@AKr&c+k)hIr5.3SPLpσI㳂p C!qfۤx!=\%)z1%gz)}{(I3<&YBÕ5%f0}֌w^]V6*"D/zgGښ=QyT}s<>9<>9}sjkF6p 5( ~6f I%.k7$x|, XEt9E=Cn#㌾@viIs@9Ҷڥb$t9iXHKh`5Z"(O:|Qԑ l| (&j< ַS|F2W36RӈLv mSv5p~2zDRΥݯ\~PT69/N*2wtGC'„ӗ6{GJ) 4*>dsjcY2.K_EFU;'J4~Cu@Xl%dixtf'z]^Aϥ?U2;O $(jXt):8tJV*ej>MSROgbR tFÊS j5 c&\7 V[*I|ڵkWPu(}t\g7>KJ8ˈ3F(;Z\v\e3F($f@y3PL"CX p`P1)# Dj{,{Bȫ8|%EICVOQ@.DN9 QcMӬޥ3l)e46Gvp:aRwVʩ*@\^lFZq@!ڈk1[)DP/ CJ71VX*h_Gf!w+Wm[gPytY',IƯ1ݠDPCv N/$gd*_Nρb@AdO,Y(t>H˸c%(??9QJ!/dLaar]Zou(nYPP6+Ӗch?HNeAD/#* :d. G-_?8o_Qa#୥74[8p x*u Ww/S(-vz%]|hę^l_٫<,C,%$hB4umVbRA'{=zrT4ڧJfq~CU0"Ԩ/c˙ma"|Rزc k1m $qjjgBV:$nym=߫GT/imDyBEu"nCh Fڟ). )F X_#Ū(]L$p &=%bT*t)jeqA(lC& * :2R$*&nK+USTR%@"nXN6Uab)ݮeI@0rt&ٝjWJԭE3ou8 71VBj\Zn)JҮq* 0Ί O`O9dB7yc΅XoXP68P΄nB 'j6*>LRMXE _) F)ZQ>5ti5b3;73D8NQbU0cJL-: ik<7O; )Dפ YjKWh|">Һi +I:xc&Nԍ'icOW\}>Һ^i]q4J=6z돱W\}>Һi4J}>Һi}|.B1ㄵ%zi<\{r᳦>8+<Qm'WScOQGwo8Xܥs9 #wkx w%k]ϼ2QO2b)H IjT3e~*JT1毽ݡ#W-I&ICjM{Mm=NvUnsO{i-6\(̜L&5#tm#hFЍB6meu!|s'ysw>ŻG&3/Umwb P307"2RNꐉNqna詌Հ*vWEޚMƪ][;;’3CA1唅UD?VyM4b2݌JY]lEHmZXT`P9fY۵%sA5 SliXSN(ڙvړߕ[_O3RC%#Af)UMr*XAYDU[U}gH?%w?yԩV 燺'4#3ƠT8p)ǚJ5vJģ!jrjzVVqM)`8%F}2pfhsʺ R UTγ,A@-l; IW!q69$/|>x2[%5(v_*Iȷw suen~ pw$IN7,&yNT^֥JRTi$Imk3{8Ln&\'ޜ#w I\ #-;-݈;Gҿ~ړߙ;TeT!)*D7AyEEj y ($(iPc9זm S/!:#c3b95i54!q I錕*LCgpnd87/bu4SQ!iaj$q;;g`Db/+a Ð 2څG|(e<$I&Ͻ惵KI*=%dR\xb DW.fp{ 5tE&J笩VNC}gj}Eoq?ϵ7zSMjσmI_uwpT%!]x{+|thf,`RÄq1L%?2mdӶ/~9Iғd0o)V6RF]+B"`B .y4:>h7ژxٌuj]3ATSjI:ƈ 6|6a _C8PGO _Vue([Pn P}Ven13Nu![J*ХxTBhdiSaoP(VzY'=nzd>X+?8YxZ}b˂`pqGUr!biC`jOoCm\kU̮lTT$FjVŔ1̭GxT*)7K8mq 0'e[〓1h!|p9!8L/4dIʷGcVD VdrWL)H S,ؕ%T7672?G*?FsAMZ+C )T8gpfIP$A r QX :Yf";"-(T>{0˙8+BYog V4;@wi>uBw(JUMKpXWN Bed҈F:#)).̱U5Ko֓h+Hng٦cC;N\aZm5Sx)JQR|8jfjBBd&Ky(:B `^sgh3-a=J]!8*D+R^ ;W҅rAO9 !r mI$IkyÈZ) yU-S9XRⓅ@V+X i-!5jBg9)Se3{.S=Lҷp)LTdi~oa!2!p9 %Bb2'SمS/*:8`H$auU(K.«kV3!R픩%XT/~3ˋ*‡T&fxP%"?٧i{<檚J +)Hf7o1ks-M|y4Ǹ_UEƙ\Ő㛻){]ӊ@WH2<x8PL:2|殑.Krbذ(NS2ӏ~i)ˆ󪺤 !p$ƣ)CWDw.)_%r yUjѳ8T$jj3JТ I(V[ob >(jU%VBlp0( Ġ!R0X烂#Lax\R!¡)HM--yer.$bvYP?Lu"$de剟xUR}gj}}glDʼn0)2xNP6|!+-)R)GhN6cf7v߻?#f6cf6cf6cf6cf6cf6cf&'XB/َőh6b}gj}}w{sKQSRJPA3inFg=G{Tթm &VXJ-?Ǔb#DjH帱HQ` \਎W|`TYVpќ1R닑[+9YS1+ei¹{e& *ߘǃȤERj&ؾY+*6Lhsk$6Q`jZ&9_]fJjCAT iBI1$i*9\Vzp՝1l!\km>-~_ N;uvWﮟMӜ9&4k |`ֲH\xTi,FǢO{Pp>$aZAQG,D;Id@rY>:#KK4cξ>|XxsUQU}[E;y*\'k:+ӊv {?5{U+c{vWP,)6J><kEb:R? θ]?tjk+9YCg_hFu|NETM_Y: ι+9Y]Ьm Um\]})Ԭ]g-³`>[ɻ}k+9Y^F\GG WXwX5iE>C_hf` '(ޜ񑊭{:/ $hqFS" Xq#͒OtAB9vj*Jqa(m{n.Ṉ0䨪fSd12Ute>pwi4k{j;V S9)=\fe kʮ"V*(Itj%cxTt8WUuq3`#?8ԍjjk"C:T hkS0"5 v& 7iISq_ZgMr'o:1Hi*!Aw055ynHJ?Qj1\PHehdLfMCdxKМPmk3Bpmn\סcyx#+\AKg&)U9tc8`iQNgujw;)!w亹hx1!7kDPIV56ziHXeto26 ,]4\U(glxӳ:Ԍ+xsЍ"6_ ٢ȍVֲ>¨`x1VP`@FyU>jjI `0`0*Z1N@>(Ub/"7M=zݗQbॲAY1^?-kT.~F?cf\@TL4(F XvF{X "7f17][d B#K^^ ^J淺ܟPD7|!bд߼{bjw|/;øfk(Tc:Y}kudyUBRrRcƧõlX'l" ,CX1?BQF"#ַì#|E+ea9& u?d% YC%Em3CLmHHNO;cӌMֿtEѩwV\W,\.a K]N!{tqMZC-My6 6oq$ӈJsJqTo{6,_{ mgq7OIJVmF&U5:"m7m;;\ij5Jl#{'iFdE}c1_ (!@f3\±UQQtR^Yjy "ń"y ^ݽDG1tKkkyaJ_ĕ*{PmGcǽ=l흤+|*T$zyg@q|kxq=9\,}w퓌PrǕHv kȺ!(_Vɕ>uu}ș{(2G@TFb}59Տ%qs;~ޡCƨM`k9]]UYu4g 2I?$Vߢ7Yf)#1W y&mtPI1~J,w;szUҾM 4TU)0.\cgw CFM5b(J:9 aUS0"H,F= 2z'*-o il(Q5̃ 8Fy#y#NOmcw^lrMlEkHT}[5]+&#̲ugjoa3b{uH)\ve .69q Uc75(Yk.0n|j3 ӆn}Y^bG/͑?Ev]8ep$zy *BLnMuU<>\P3=XnuB4X#K*<*<[DohTTS1b$횺CBrG UoʻkѓA KN!ؚOrIS|QK+g;Vv ʻ~ \G-nSμcX_10DGn;7梂ߥyKgPVDOugB'u4LՂ:#X[JKeسx3(o1?vӫruM_c܎]cz܂rvb!!#e[G=Px7prqCRQFb#VD iQBjȖVƾ HAB?-x.[5fI{Tw''W==?Ʒs=xz+F*O]b8_bq#VPTl1Cd VG심G랺Um_D$*-Z1䊝48/S_/w1kcc JL&U4)v{xgpæKIYe( N&#^تL^ (!!3eXpڀl% *Ng7bWףW69j Ɛ#tx&iE'DTExy9{rBt>n^O4VgUVF)N >\.Wa+Aɥ4aroIx-|z57wϳ'׬C3eLQin+{ﴨwH͆ȝ]Md=/kw5M`suUe UG9۸/-ZGVv,i;qo'X$Jgb[EtMom[t+\m3 Jȶ 2Ģ1+a,X 5) 3[a#t$s7u:̧'G#[QYA'ͬCǃnJ0?e\0(܄*uڂY# H|0 !)?eè)$Q~H#;ӮrN[B1j/I 1qo&1V9A]]XϬO8cHk~~oצv.$BjYEc[kwn'\V U2Mts.v{e_gxx8ue ߦs.ca߸͸FI/X8ߧ\6 ~67ʺ~~oϔ1ޏv nwt[/X=Cޏ_|Wo9._!c0=&nx˴@=QoڏE]eZj5><6O~*-gCƱy0Fz'k\21{SR}A.Cб*.ہHbqOEkN|_f,9H`5<=$lkSőQ R[7ϙzؔ(TZ (66ͨJBTGXj끜 i"@ċΥf5s?L۴`t MCU2E-@D_c-PlK.yQ(^9t\/B2wĬ9Q&g:JTzDc =4xT9RW4B*zo7Ȃ'eߖ6Ԣ6+36[=Y1jv#P&bX3E:|ĴP cљ}Dj-Ja4anp(u#Udlҳ1ݳMoKFAz$pw*z #Xn9O$8 2'32 1qhP2<0Rw99]qMr@'w!UI-, lAp.f"IEw_<90ILg wuCUu u[ rל6H?/`J(~B,À4p32j2bu֯r}!X@k<"`jQaX0ejRzS^S+ 0DjNZn@@}c/nBd/wmks\9s8W9Ay+зQ{`_-@зYUBɰ٣)P#.˂&Y_k .lfq"<Ѵ\,_OdҔ\M+H@5Jl|۾&>I`tF'dW{R F`[԰ةIhk049e ۼ123FR R{]#zC>gّZ$;Om0G+K0]Bvnwg>E",pXuXG@ ȷ's-$~LRڏZ舽9Bx;r/kWG1q'?oցB*zc`:u9Z<S>}!L78ؙxU ~~.nU;<14Ty[;x7C*!a6].4jtꃁT7p%(Bm(nK61tio*(DRt4-hru˟"+`P$gDG HT-&Qy \4 X+D447 k hQkfu. 8fvƔрDx"5FxZWē(4sjޮ^xиԀ Ȋg:;ؑП}Ar!`ABT]*L JlixN607Э)1n؍T(cR"Ua `}oLi Fs Ӡtqx"ɀ:_bbIj:9Bud2T+\em ,pIH5J{&(=ʧ :=LAaFI4dQ_QIw:u/JdPDbg_cv!(h퓷=}/jcaVep6D*eRCxhT4HJɒWk9ǘp<~y뜘D+R+ Qj\DoįTP!]+#/ɖO@=X'{+P}GƵ5z 8%H"8"pNGXbBAjU)@jrX*6d^5k4s=:"w(48?/QuN~\һ23ZN~LIW?OF?Utw_39p ɷ(Ev44 $}$"S|׌??{w/kuiVAqH4 C0Eȧ&ׅRI1I(HDA7 _9J#qn), P(H\TcB+e;#\`!RȅQ؆w*h27V%@A;0Kwe0n:Fӕ8ebᖴyQ HnUÖ܎C9G+ ku(c·߯^i듷3_>Lg ٝN t Ђ# _cs*' (cPxAL=aTL1X0tu Nd0d7Zs2""Elr*q]5:L'ޛ ][rzn [d;z:s#xuk.lW(0 a E ;'T.wEN뉢+og(s NW79.{5aNr/pyvXX6<;<ש:p>c࿬n瓧9xYpKpv`KF%VwLz?CZo$1,L*Oq Ws}\ts>x_Wl}\ s"q\@m?f?li]%qsKu /i08U-aPFA1kѠl\}Xwo?epABkͨGP`A ].zH.픚R!4fٽk5ODRZwv2/4xC"4GL"AM&HKE)&t0O<.?]W6pΟjR)=^ =SEuXb21C}H Vj#_՘ˆCՈpQagPE2A ˁd3Jo\W n*v#9 +#GXoLă,݅ˇ' !Ȓ5pÍ␦fO%d4b^Ev'fL#2 j`{WEϥϟZ(Q6ҽQD9Kj(A , DcTTYk]5E3U$0@A0$ Ctu蚝Ŋn$7j/\7?( Ó/[C][gN _LI\8=ta ji|0dR':`3`X!HtMB#* I "2+Wzu>@(s= F GZCAq *m^hVl sEpPk,^5cyOXj7 k2b.G?ɳ$kf2_TH"/ӊ3I儎1<2S>x|d C}'wf΋LMvLMq+ cr3wIJAz(9Ú90eCLlsxE6# EOqWU0MpkEр3.` &%m#\x`h١V[l%?'2i^9aEd.en= T9 zuP .ݧ`O%cVg_-κ,ivAw] !r˻8'ݖ 6: f:'&u6nO8D5WIO We`˾[2ýx E7!I0ny֦_+3<)5!^a^@0[Ąptx{ PB82B# 6KPg!XJ<ф`b7q@I[)`^/ Yp M `]"VLVŦ@-,NyZYj% z3vz(IS>\,ESbcաm ' zÑ1%R-X!W Gн"_5܂}qA<E'2Kw!!|@r2k$Qs)B'QhRd&' W.7^G rҢk|b if5pZL&&Vc`%Q(Jt+4ŎL>]G%&5;2>1X2 :XQREZD @؎2H *Pl/mnйLAm2^0 v=KG6 !w.$DHJ4،R4IQC='ce\؄0h!HQMg:! v!Uz:KF%oE1-0 0ͽ[|j0!GF&t}>,)lHJ,2`L陔""*/ڰSR9;@"3 E**? IX8D+}hswu i wsC %7ep>Z(A4D7\O 4TGs jߎ?x6E˩J(=6Жs!Y ̟RwcU[ٯYBGY@ЂiWTO+{w /@5ti>58M^v@E!/W Piw ("0(l$(í{\gvDDFb*ߍ'ĭ#h܍kݒ;Gac6f)@F ~h1׽ |#Lc"qlpm^8rE%C{4+wq.YǦo,XavR:;bD ꠞb7lAI'jDLrZz~%D l-H&׏y%ɗ" Y̓4;nXJþhE8e -]ߖw?Ɉ܂| FIr0 pz$ yƍ03f0Ȁ&@Ws 7&gw wNBzOn5 Pu-@c1PNG  IHDR#sRGB pHYsod4IDATx^}o^ǕcW*Y䮽Hn+I)XY.fLkYb,oʮ_ߊu>9\h}h6^HC6FJ7KDF yq{gfܹ?hyfΜ=sܹ\ |@`l>s XI5ߺW,Y_q}`x PkDU=K5w˯Ed`-wY"8t /ZTp:ۓ0s[~:˩m*q{n.)8twqgcXlDwƁCw2e-αܿ87 etsi֜mV-UF>[miYTlPdlON϶Dn&*mڢKKx>2m4_ WlO/ܷ*֏~bOnק.F 1wXT)GkZ˹ݡ6j{O[+D +nz@>G+ظS_ڧ~wK߼"]5cs_:^=T -n<_S޿_ 7R|N}Z؟8vJgͲ\ԜYߙm|[[aUzٯ*Sglb٧ίG\\٧v}.˾Ui+V֛=ey,"Gi. T{-߇-/{ʅw,$M37qIv|jM}plEVu6$^ڧ֫GkW?zU\9-^*g-{&m=}#<|jmn1P_§^wwfQT _l(e>&b>Zj}"mmA:75d/ۦY҄h;}R_]:39M,,>]Aiqӯw4I8|o0lH*+_z<,֧6mҶƯ 4wG [[HO?6mrhdin:/kSƎ3޿[8my43p{/}n>g%fMǧ|k_˻o|ew_^_Ǭw9k7}rZUWwݯ{N~wƬw_8OkVwVDEՉS0#/ũu=bֈY#fM?M~NKz#7o{yo?V&B#{E~Sg̉ش^Rc[G?:ݾ]O.v,$|O7WWKevolzxӏ>r·6a/;o)F _7 G'%Nſ.C _iqR-1kI~n.;HyZ4${Yat3D 7(_c_U#v[oP/{s'9f}- HW/b&gq{qמ.峏~7Y'2\|ƬoTY5sgѓ7~#[I#fBAZFbvnz@,%f-+'|h:؏nx|7{] Ϝ$B' n޺_.gM V[w|MS#WΗ.g?IdʢWg_!G;Ao/>k\wS$. y"@.{ߧFn?ɌݍSO [o1@w}YTK#_K\o@Ľz/{{@>ŗYۻv v^cN/M.hA;փK㏛^>k <%jyWunbjm>:O)bwQۡ2g/dGͣG%ȏgl~%QNvw1GLQ87wWο:Kg/%>*?J\zyƯmWߠHyO~繧bg-Zll<+,"^c$?=NlvTk1;zܺ}IZ䪾CBf}>pdg=Ϻ-}} v?I6Z݁gMhe7W@jå?_feS3ŏnޤ@0f^uwG>˻k>sv=|U!VVjk@l#!n/|ؽdKtLlnҲc9w_xm]rU,y̖w߻w2>BkoM^9 7QH+͛$KR\q^rV7ͥde)ETN=ݞ%z=Х~VU+Y^1|!1t|o,[}'T:vze&"{y{2j502m.f-LM(Kh#>kbL.'E0h۽ئϚfyX?7f=ԯ=M[J%;F+vgXsiF;u]N~W>kϔѯ]5^6wߦ})T{oys(Ma/~[q?)Ჽ:_"zSn-2ɚt9:;}65m_-pnH6s~;kϟZ*ӿu777Ϟڢ593O샳 O?k/G6v9Ŭٷb+nxklh~=l">C89iP a86{>k]D!VgR}a[N|u h #>D;L+~NN8KS_8E޵}{7W{oo=7oſxc:tvtϿOKAN;={߾W/=Y8:ٵw^޿xı?_?InkO64|~+>u?߿OFA)}wӿo'~)$/;=_m>?;5zC~r'>QLo›߽spS;gOGt?o{o|O/nťUo} ݅I9p/r|η>@뙏Ll#p59K;9.E{|Nʾ#-Y>ߋCHzcq[}rg}PT|!]y:ˡ7tAciINfAj鬳ȢWq,m@PZYFf&[zd}vf ,67]@-q4hf9}9"K?MsS2G3B.F{;9|}ټ&WHw=mU7L^sٰ^([ |Z4ߛ>cslʇx}wX-y9 '#hNQ#դy iϚ#Ə6tڌԤS:KIEx45}D|KOM{ e'`9puR3huʉKeOb sMΥ^=9V6:op wh< ~)sÖYfO5tf?}&2=Z<)n[gOȩ \c OoMu(i|sƗ [I yzNgtZ2sgLsǏ%Om~s(~e9qY&Hp*c|muď nyrց[GmTyr՝^|؜q=eqr*iWʥg;B 祫cwJ&y9ugUW;=yO/y֧6>x`羶=DNt:S}Jߛ_V>Mۧ:g:Q~x'zBd]/g.ډ޴Z$9N9<׺>|.w~YsOI>5BZ*伽:>ْ2jO]F(ϰ_O4n}j*)6Lfg]le>"qu%γVW;yW2}+m8ڮp5K{ $*Jkҵn3 +dXŀ@7tݼ7W㏬P:D8;  ~p^y+ lgaG%2*z&Κ md(mӕ1&HMmsݠ (iTx|V_a4+ ֬.j1UG"+ßeFj3=# V;@Րaq4h}ڕ)BV'L~щHAAlܯk>t.̞:w~Q+J'sLttsDi?\T4zZZZlkSCN 18لgТAJd*\'ܜcS_b!AQ~auɌhH־Ze*]9./*wWrDlX< twn] ʷoTaN+ꚰqRgd:kVzVY/=+@wUu.':q$/P&M,ˏrNV A=>t3#XX'ޢ$s)4 @=#*WljNc4Q2O3cIOIHmϚ@ЉBћz|%S&$JXrtM*#!~uծ_zhRRKi0NnIPLZͧpmϺ[h\cQK%zRutf.F5eO)WqЈזmi=^mʠrX6S,}BnRW6=k^=E;L&)t1N/g2w~ͧSpǫOVV8 ' ɤe| z֎hNw1)"?Uɜ,마{VLAJWz}S9ěLJP @< 9Gmf5&[D(=iB8@4@I̺A3G*jEa ` y t@H_H0])&+lcZ'ܭj/$ #oV5ܾ=H@$"pKNM'y 08 ;簞M ky89E,Rru[8dݖ|v8ZY5>eۺwY[2P@  0sS]#a*py :PY~eP%MȚP-Ձ@ٳڜ)3lHS ٧;3%?ONLe:A , UꝨ4:!8wg. ;ԝ+\FJ)g"t[\`C.*o&g'a傼S)8Im2tk|? ugGp|E)sO >N dΘt8!ɚ/PΒA.MJH/PMk3"G[/ȺD!v.;e=%AD+@U@-YkXFa%Y9 )<r}e >m -&MUGS[}Bf]?np=޳A)8F- =Xtl$V{ߺ<4FoO ]V#[]:/]@b|g#R;\)k Ԣ~~pB]n  w(گWn[ @"fM۠sK /O/Ve]i thPJ^2Q>T%8)SLnzbcݚPpdw\ͷqͩZ VZcsNJQuCYQ)Hqᝓu-h@ 3A&kzfeX!Y v嵓u#FN1$z&5Ytꕬe^3_3Ҍ\S;8SFћ2Qn(ȭGdQA-qڿiv3'׵ڹ֖ oQźZֽ2nu#tP揞NNtȠ)kBsTD*ryiAgԺG:%N>c)w.NXpkGYĆ2i/9uqM|<3V}m FYw M-")>aHߟm bd@Z8)Nd9mډOK/.+٨׶O-2զCLo0WyڠʸC Y MgoW7z4i.@=+376cʌ ֭lwStMslwL-C7³vz$eԥw"J6@@_҄miIȯL. Z-D҉:h݂ >V e`D;qc^p@Jp̏ z3yj@& s@d=^֞( pGڙsBJ"'ڿs H@@ *vr=y a#Yo@`{sqC.EI#ʾήUאPc.( &dl(`m(jvNP9>eJrG&d/7Xx<NCFn`Y=xQ@pS?bwh0JQzEAl' vir|miׂ ddGH[%Y#d'3X?_w>P!0@d휢І,HtY~Cճҧ YnehN}y2uP=?v=H T{& JAn>.[j Zؾ[Kb._;^ &9HYfuXɚݡ̑Z sG@AFe1!6N kg}'?PDaqZCmA:̀np밖&k6&u $NITSsu+Kΰ}HڈuPwP~,4!kgWu%'J["ҷT61GwY׏D^^|ҁg_A@Y7 d]x-#žK4Cìk\ K)i|dӰǥAoԧ~ZZ%ZYAaZk]JSơfqӻL]4TD ߬) at`>SV6!ka?Zg:u|W9 H"`~/l8@\M6;B>hH+z*8RKvRtZg\2;Mg̼BບpˤE!]&׍-S1魺6THCeC]7+@o4DQ*˧2)hiϺBFgE`Eu"jtau`T D3(]8o(O̗6'_W&Y'5 +fN)1 #)UD~"e-YՁX JWhɺk:#Y,^n׬2mWݮAѺC`_hLf \IN9Yf 5XD4lqPmUH7q 2e$L\6DϺɩ{ž 9U IoL8ǛƩ{88un*O뒬c?7=ǩx)L{ZH%uII}g?XuҍmI>ZÕ^: D5 k*&پ<&d]FgpZB''td i[%pXmZ9Anz&1zij.\Ż&rрޛxtAo7XE߉q Ơq["׿)ͫd]vq8"d=W3|qa^G4s*7ƒH 8qee bR=bil3sin5icEu5,e g̹#h(9‚J-J ~L|>jtuMǟmc7ҺG?z&AC Yw٧5A @sEd=מ@`$GgG{3BM<УC@ Q@@-R`$wEMZ6<2 3uǽL/ѹewze4L~cʲ!-GWcPQv4!kIn;o[*(nR߻<g.Cp7# u++fCg‘WVuLq`?:p=Qv}iM8mh,?L'7I liEBRAMV4ɯxNI9#a]Y6sBT Y)X X# 5SB9 hd8w02dž+F"`lBgL~cZ'mJ+vH:+܂߀ؿkɚ=1ûm| ڿxXi7Z踫Nݖ霬xji}3ug]W_-z\)q#m󰒬Ӎ3񯛑u:PLЛĽ%dK8l80SOf^Őd퓦~KcZ'0"M蘸< 'i}i +aԏhrd?ƳZgGW[,؞nu/Ai&S13.Dih? Gu˷7!Y[*[Ǭ#QcX:WP5ƹOsSpohpp uofkYu|vRdk?MĥkIt=r`бD#|gј-8)LW4!چ Z_\~8yJ+A]! 9@ o ?q.Od= 5-:ep+dh$^_&U YtZ7 }'J,6BVZL>K y O`H*5Oĭ$pWޑtSp7H\tde WE܀nb]>^s&Xw _sU`+RM:vV=& ]BJȉ{:&GKbھnAeZ&viQ6*hB2;nbyMFqFgYE^HC(O"YG&tVLԗSkaª~ܺN0a4$k_-0jS(ޮ_DTVZ>ɦHN)Qxֹ-uXEC茬/{t@Swς@]x+S|X@`ܿi|&uݓ:8&-ϳ&kB0UzX>E& 0|LHNۏ : "~ sn3!5c 1a4H1@@- Y:)5M&knSEҳfA @=ЍFE 0mRȩ!i# gr<38"OL{x: @)}Qx ijhW. 0+Aֳ"0 0(p Rpw+vR@ $C^"7pW$ =*@Ӿxx!&ލu@`0}q9hY(sFd=އ@h  0gVHִP18ہhȚx?tNB] A1Ԁm艬GHhc$ ƎZGH%qO> ? Rh IDATx^]ohGd8{{#`8 GfOH[X˘HE̚;F#D H=@Bd6 V{4uȄY$!`H!UUTtיKU^_3[tG$XIR-0Il>Ơ7wVO6zY@rٓo,k0Zem,Ͳ VGKe2P c]/ڒeڭ-kݲ, ͑2ԥiuXwR>JwѺ|.K2=\Z( ҢuYiVRV-a[/|g{whHl #Cxg-ٽӼZyJ)ox>QsSC~raxE|mTxy`\A߲fX׸ogWn͊XS7o_N8(:\~zҘa_N%3''9O3Okpg7um}s%PPZc-yk^ <1ʙR2IN5qma0j!deMQ Zzw0~Ag @+C {0 }tb-%^8H= ŋ*6E>{pѱSc'=o" tŦ(:*XyT< lY]G='NM*ik܉!]Ύ3"[Z~a<ҽ;58ݝOOx0ބGlE69Up!ݎ5F5NEWlr!^ؔ)MhUK#4Y۠Q)^r? /Mgl|_9p ZQi=6z%ս;kg~2_=6.6m -걩P ȅѮ]3o^8 3 aȟx"m[@m=f}kflbzO4o 74<()`Zaձ@mMVW!\I~n:|z(mz[]r~嗠l`}eiuu9 ,`/  :2T\EΠ̙K7Xb_z_̣""TƝ*Ƭ#ȑ(FbS(s#%etĩpOJ/L +HX0+/rIGB&O_:+螞T0FNScpqp "F(seI9@$$Ȼc5 cbZ & ڂ4I/b_uX~`ĞcSȎcfM]SFSH_nZ K *xV'BcS(fd0 VCy $`L塰*/`VU⑼ZkI|gΏGLBUĩ\uPY!*O:z:3njO)5 |3*\͘&۲d>GJfN/-+|rgiBO+ Mu*n? :).d)s|qGF2Z'#her9vkl/L}/ t"wd"-p/L\JrȻg #6 i"_*0U:;sy us3WNBU{Nb/J;=TG7̌2l gsL2/#3S20]' ɂEM0ށI=6coȌMoe3 DM4H/c,cμ5 P4/*)tdcE9V5kzy ]7U)ʰ)O; +0M:B"FO Bra/=s}ب؋Bi4qĹq#60C`1'`Rfk_Uxj7&}({K鬢.}w|eXg`\k!멶{{8B⣯w}ooJ_^C@j_ﳟ}~sy⽿</oL$QPx?L[rG߿X ;wvѵ;#m?ocڞ옾pw.|?4Sw+L1 o6`M>J K?\VOɾdV__?\G+[nY`.Ӿh<|Б=z`A6ZS?duݐF///Vt-u6˳sml>':wa=/׀,e <Z{[\[ibZb]~.@ݥT/ ;Bc;`T;`ܗO|45'GQmWnyLr{EjxKFL|Iqxf43l 1ŻR؅sA-sXFiǥ$[+MO꽽0:i %xyL;wJԻu )W[];:oR,"D,Q~ZǙצ=o))/,-ɦdP8Յ$x{]Ԟl<-NHi bOs¨:>.~qIv TMzE8&peySQ<KsO?p+{!FUjg<3W \7cShx'Mvq2X6FBR`884ٴL]6K  HR,z~j|Y2]r*~Se-?2P80iu5 ^DBQ%LQWP3vU~a1# C|J 5ǐ*3uy SC.urÎz8\s(H $CN1рCԘOeo6t!^`U ؕ S'$a0AYC ah}^U?t+SnWCz SdڨT$g14CW]_'~ReQJ[_Lg:#Q9gmIJN%֣-W̓f.rBuʉ'o8zfK /,u7 ?:KץxUi ezi4ZFkOFgI"-@0 h0*^ Ŧsb_7wc{fj&=ާJ-<@m>A,SId,0~|G`0a%* HY0ī 2S,P xfDs14N"KYPeWhRCB CPp ShFUUp `º 銁X?Id00VP%]+tCz$E"@0$Z ?uuʏ:$A,N 39K5"]c'Ѥ44ыA֚juƦ0wش5] J~U"-t]W-*V4J@t*uѤ򾴔00cG4zG*ƚz-ajP3`jF 1 [^ylx"0L=Ҷ9,@0m?6y/M^0u?J^tW⯚Lij,LM[ 4o0ɦV[GzeygfRyW,+l#6u7t;wV= w=º1р]>XAAYJ UIcCL*P"6\R)`-I"i6'ԜљUʱj=b,LMKéR#lБW.8R]Ȧ>A@A5P0,LC43u~o=HtY":S` a R5(蝾ri!JuO/ZzH^!,P;:Aُ9T*zIiׄ!;UOk8K1nR;V*X`'WjU#0Xjhͭz.3n5SK-V O|A/ Sc?F)[jKV.͐4fʔͩnjD<ޱ.V]pR$4cDv }9L F6md P9*5XOVn>bͽG[uUS՚ %zIn瘨MLD5!(xzAQD gS?Uqďp'1t50-gц zT&tW(3KRa~7=FDX&( McpHi#FM+kfwㄠ1dgv񓣆@E}z{'vsȻz7~L-6Z;Ӗrw\;۸i\-JzŦF477H 4b`i D*L 14N" X`'S@ ,@0HE)a  I"0 Lc$R`J1pH0% 8T$b`i D*L 14N" X`'S@ ,@0HE)a  I"0 Lc$RG< D1P |(vfV hHi#-Luդ%USAc5tn9U=ѿ["󵳅Q[a nK?1`xx{b&@P߆b4ɜ?$CW_?{&H>)fbd|!( ÐBHr򳪈pJ60'(/ly\ʀ1`k!ahDg`FH"$z?n~z0~cX$#(À*Ch>g(P'qo RQMiBPh@1B*? 557#J5n7.$xXeDqns54^{VfJx4O@#!afǗߏ~X·o[Q-r&(  PxJC!, [X`+$lXUԺP!<!n$9^yuX%^vy6f~"@c{(6a_?r>+ m0~9>oUH)[^69yX7t 9F420l6$ Aw?=m?4n25S9¢52Cda441 <@ @:w+?TA Q lQs?`'4-̥$!,̩-ate ( e? I?: ?2†@ 13Z#+pS?h Ie6128V B ϫ˯\;g* R=3r np *bd650G&X5d_+Hx 7 r6G+!h؎BǍ~V/׳U ^FX<<˅f46@fL3; Dp,/ddj" \&<=܋ǟfg5 r" jW;Ԙ2~CWFÀ =+P`cE)1R&FD`xޮ? tbU+l y#t2AjI0}/j3!}B^'XPC7sMOl B@C+C"c4}!ˣi߿gzͷly]pf;;֖TuGQW@1Wr֏? *ͬw—<@ ] )kB/'O"20 C= _YXu3ͤ![#F+Մla`z-߮M킶A6Ң;G l_X?ll 4`u5~G`bJ310! @F5m1G#!7KGޭ8,}< ?s ٦ ,LܬRlL|l2If>V`/3; 3ÿ)ӯ_y t_O~ӟ~ HLÈ(1p ZH6i0ÃРILFxecdٗM_L+x(ir G+n߂[>F!6M.=nV.6I6!n6i6F^6Y`Ȳ0sc?^?_}/?ݷo^?FfFfIг@#3=`Gt%o 7ncG0k 0#AL&\;e? (H c z>K.&e)c+m",*L@?oyg_z V]Wː4v,U4/?d,%V CG@ : aB{?Lh=E q-oSٞ= %{!,)*Mmoa?_>yeߗUU< ^; )#ɍ`: N? ل5cG 4لp F'oz?&F*0A3x4x]?Ё5A{٥8T5#R6L&"~FZ? ?o}X}?o}7x%3$2V@YxtLX3#hx0Mhf^<*ӿ.=߿ͪຓ@'p qp; qh!'hwC-1GlopxHs,菿zo_L7Sp'Xgf61HfK1󍞒7 i~yYS#I JWC` 47+<6!ӺLН=P;~n;xZH?9 >z~˓{_|âaOb >3V`KQe`KN~vjx`@ QhxÏoY IR+̀7 ©*+)m @U&cgRV#X?juʈ4[[ ǵv{ӬLNAAw=@ TdAQq/h.@@!#Fk`7&~r.%uC! |rF5r|.(xF=vu xTnOμl}:$(!!SC =\pW@"We gn';KKQ@7q:~&#ܹ&?i >@'({ (,$\o..c,Y ˀ:330Қ*(W^Ojwg83v tXCMq89t Q@@A*^ ̽;CYy K8teC4š-/h?bo_~OvZ{,KbH31a͢ A60zv&&F_FHLGpDuDrdP4tسtFٗ_ff(ǐ-FP q^#U|lnA8@ x*ms}ok F,܀yl솒b" xHgJE?XV}~չoec=26F˿ V ؔF@ QhH%ωgg2A^8D~^,ki-=Q*1TC„b~0 'Vz(H|Fp$ePru_&1? fτ4qYM2=t oh7 hT hd#]|5oCoA<(5 4VdDl #baUM+@!+j!|ۅ2zj\ r?, ƫD̥:Gu xıEO?ϴ3B&E'/LdL%@Fir)6d 0<{߿206z?JݹvrSF7< ۟'T]t#CKZZ hC!]2M3@tx+za??@k Hlh>M!ӼynJt8hL#FwBbe)|rE(DF^ '>c]8@ѳoa/cbs.em3qYMNeaE.GS? fs3a@΁(% ]wuBڣgw=7#t zg05{{A酉 z)Au x=Ь]WiBL }E?ڠx  1 ,ॲI[?,ǘaqr[ U4DvR8xwbXG=13](^~YgR\ ށ?~0Nsr2VVUQ*&V`LСbFw?n~^f"ǍZ9mtoLThN b!)-w~Dd/-D1_I^C'E:XmAio7"|" |[Ɨ/xW/=z;1&Ouh0q/%ɤQX(ʘ04B^~ffFؖH([g`gPY#8(^250ӟ_y #q/n0N@?xM\s@vRA΃]fuQ7_0^ukWߝL7o{s"\ 6:* R.}I,y~YՃr0\ꇸXD[/Ф{y͙'aI|x |%xLW+d7 #%NgS`= DZ{373;xk ^dB~|pbߩ[#I2*6&uj* ƌ-LYCI@W_ 2|n=A+Ec01E@ RʧFΦc_A]i%/"l .[ [7!N;|agN3ܽ3bfR O&pkPrgd HJJ1]`iI>ΡM2W<2.Mu/[.-0sc@G+a@;u-gN2@#{"3xdƈM&P8/ tW1ry)Kx} 1\~,H[ARI7E(`pG]7\ #g?y?ɇ=$ | >[ <%૶]CzנD4/{3 d)W?72P]lo}RZ&`ǏMWW!#1ϟ`z/dVA 5;dldPd *ffBJ(%@g1Æ@N`rϡe Dg5Uo4QgD G)o6Agťܶ*#Nc#xZ33={<" 7sihem߉OІ&ؼW Sp.K'*&/Z>"8=z+hM?m]%4Br@Gہ+&7n_YY8m;e\#tؓZa0G{I > :Oж6|ٜ P]~cN=G|l23* ۭ!'w]۟^~:M7 (D 60|1|yםwB&Z!װ@Aut34n22̺yLn1Bڱ # z L+3hVx )ɇS7/F:gPF6i ͇~puhMѴPzb 0s}v$?A~1I h _x+fش=##μ>.`3`!9_g.\U0E0'!]5d]Eq_y8ڢ K։Jv| &c?lhh$@~[P&Hu}@שi%qPڡ] \Ŕl H4(m찅{et +Kƿښ <w :=FN>6bxDao#C@lO{_ ^s$ |yIq n1–A= z𵢁VKQ\a]Z ٱ$ȩ)2匳\A >|Fr"k VWLeoabLB2af1lAA Qd?~yv1M "B=e`mյzE:ÖnψN ,_Mh%U2?ز|Pi7_3AX? `$Yu @JPB;z1= {! r=ǑgYvIq| vv[|(S #D #+(K5닼'VFߞ? 1ix@1Q)fN'~ fFH8W2AazA;XZِP@WM}7+@ 2Ý%`ABn8v\] ¯ x+ JZ>@ZЌfefnٷ?/ah%L d`(ES6KvHlKp2 /$ư!Ͱi#j!o? @6x"hXY0::ª+ %m\A^,$vwk; ۅK68 m<2r? q$?bmlVh@ѕУl M;`[;⃭?뿬=A3#X>3HC = D z*㣏;zօߓˆon!' aV@nʻsZZe; < nԓ e67nfX!5-ة$Xg\gZtqr22Z[ST'),/vW1*v[?H។0"#7#6 lhVNrQVl('Î%@;Yuշsb\F cnPbw4bB%?ˏG$발4@FSDG90|f6۷ Hg ̠"5lap ʆ 8r?t?^o&&jB3- 9|a5@Q-@=7+ \0; `8fb39g.㮝a[Y/ ak|}ï7" |0p: 8/ad·ᘂ*/eϳ/*&jFv@ԙg߿yR73~NMY^W\3d<# 6ڝi(7B0B{ir{+C33n|nc NGpkHCWD$|$  pG_a-GF@Qc ^~=y&Ҳx?%`&FVFRAFh7x9]P]~cΐ% ,, 3g22s0@b@=~GvoQbjr' ( srC/F:G95tT0?|eAM!LDi$ _3)-Gs@I]Y0P@[gAnHޒH3BT}} p+Bv%0~Xu C2@@I?U2㑉o]D 00@1Q)&;RXKMvlvs 3f2} B h4x+\9׬00An@aD  _!zV~r% 3b8Nq4d?x&f_|F+^ @?z 'F jLU $LuGiP6tElP #󿮎?R5 9v[!7k`X#BOogXm8x@Qe!(|~}&&"6CoN21IuD| ] >wÛ $yM ͨv~4aA@9 e5#i0+- >g.#R!CCFV6F! ̩z= ##}Ə?]lFp%>:o^߶ X qsIÛ$XL#?xx0-<@a #/?z<" mDxafb_`eх8@Q'_^\NNvD 8Ym/sC9{kShb( b-` vy%c V 3,G@YJIH?zS fd ¡&Dj-8t'Je&NAE=##(ʌ$\B~=.5f2]m⸵6|?; .r.v23WH%&&/GT PqIqrAIX_}9GF[}` rοO1"V`c]#3W|ܬR țHCf`|yXVS|ϣ2/!GnƬAg5@ le JY衖]DĦ<iԂ?w d?#3FSJ3̂ HّJ$矷a&1..@Tq4pB{?$E JR_>#mx󠿏D?|P^# D"7'?Bbd ʽ *d?g..d3B&En$i6)AWb>xߌ Ԑh"(ؘ٘@G<te?Դ3 @Q!?1K Awgedw 23N{+0k&üy M6hp ,*vq@9&& #)qB r x̟ _S<dgDgZ߆MYg!Jf$ CSz_A r1;B!5%;+#%C}r8 cd.?Ve],VCY/w[85"8@Qc)忟 eIX20XYy(X>|dYr5H&O;CEؘv2@]/^1! '#{97a˰FKG u7tبE=A4 6P?L4I*pZ51V`ưu _fD`D\]8RGtHeD?)3|`A0: -"wUaQG\OW'߽cXq d~70.::T)<'2ZBH7/頸i?lV :n\gر?x$r{ >n :x? +!cB77FRВpyZ ;(#?d`Pzd 3,&_kƚ  2A^F|@L??~w0II03DG1JJA/:!We$9X!T 7g4bDmqJ )bg<0B fpOOcݲ_[6>Lg/JK##fޭ a(䍴c)D*J 4k)Q%[W^u @U04f5 Lʸ~t?l@Ii90GLC > $/O?c pHc #QL#3'MàSHiׯc߿ 6#?hnP,!X? 3r=Kk4F'! :'#kRҶJ!d *Ʉ}]aQ=樂qZ}A}? eqMđT']+Qn-[\bIIE : E)IѼȿ672] 5RkͻLK)fbB?&A}3î >N0Ї޽{>SIZVVVׯ_{`VSSsvvFN@ŏ?޷o߁P__a޽wLh @ݛ7ov@{a[ 96=`7we?V7(@l3e??euPgbZy_.@i@@[ZZoݺuԩw""!!%%% [y*VfOY0rW'/AV&KIrIG.9H6~ȵ3pVf/""@@TF4wsCB\SZffFOC/ ?mk``@~ozFggFNHkΞ= Lv ET: O>$e`f@:<H{ɓ_|0=v777}d``a!E ^x޶mۦM}t_0XN:t(33ORvƛ̠F`cOd|k_}|x10o"&~yە![b1\yHS4N~0U@f%b7mҍһ w5yS³'AO u/m4MD˞J i( od(S! #I v5r}蟉;~Ic? PP !* ?S5ifYE# 0hltIL2X0RDZ89aL0+vLBg~m+W!-Z?\o'YN X T 錋_ ( t\)٬d5'R@LM1nK&Qorc>"runĐoi>!kXAg5Sp׻|vu _ >ϢxƹCAW`@~ A0ێhm uцyOLL,99Y:E|FHzxx@r;P'lWGGn,t$:l2 :]|/ 7)c|r/b~{C%=&f?YT)ChoA̙3x`899K`m Ϝ9+xS<>  - {O49,R5jֹX+~|ڭ"Ey  *d`&a{9㪄{ > q &40A2@Z1ܻAipRgbfuE`A V!(Fob Y]S>^H&O׽Wt@]xֿr' `^Hq勵~Hr< f2 %Fheu8HfgVi߯?a3#x.U&*@7 oXB EL ==wE> :߷EB!#r`v^& 9c8Ѳ z6d|` xLHGi{ȣ\*Au/(de ##7_az{]\l2fĘWēcj@9 4 ^G$DבZ) QBË`Kt`_=PAJtş7M7k/^@-dv1X̜9V⯷}l ϻs3AFTL^0To ,)Z0ԫ??8E&qqq@g;w$`X]|ڵk2)C[ܮ 6Xxx>~_Jm{R1A ^yY_g"YDJ X$A]E\Ca?/?!I܌ +3 Uwq9Le>< Iڐ5#%%!!+: óYFBΓDVp6+#l|:,A5tK? 00CNKsfcS{ưj1vSRR_~̙k`xÆ 0dv 8J(9}a$Jrf8+wMeca坏8JR,cî?zg܆JBed ɌCWfbdEf"!3!ޡS&Z-CT)`ػ D?+ X=|۷222YѣG\%..Z&Xoϑ@_o?~TcxYPxK@.6/|`Cg.]___<=y_^`9 G20 i:~~>x$,)_O4+@JФȤ!& Z+fgG|y@ # X2A*&&Ha#HHr*w@42lK.00r VY ɓ'O^w=~!k<(DUXs8LHڵ^a`}_h,q~<&l=X-8YDHIfZƍ?}^> ,|||"##YhHzظ>˵g>t;!&ן[aEEH];Uv5B32 rit(|(d4<|,xQ癈4cE-y8xMpp["l_G{~=Mܬ_?fgWU#Ըb42V O?﮸`b0IЂ]BX~`4db!\ Ždb*+NA:_ l+1xt3?6Z&`eHp W/`] ?o> z$h``/5@/?&/iGux?[!hȁߥ E#((5ЯNE03C13pE3~%W <T l'ry effcbdn L|b&O?af~D-?q Il3]&4b qZXP0CQkݩJP6jRF̽LkmPշv## ^LL8AҠ )g>^61!>i0;c)|+| #;3;ʁ ift |/A f&VfV\1iS : s[NvHշSsdH݇ B`*)0Xoe P11",Nev3@M9I?2 -AÏ!mX&pUQH4^@AÈE>-89q3@ @wQA;= leMπW)8~:Hr6 ̀BD7F?%e00d GIU _ibdЃא6Xdx?8teLuL_y:X־şp-oFېRAd h{q34‹yu2I:LGӐY?y/fτ+eXVT5#dWxbv0Jf3g1M7L}FG? +Ka#U^=]HXgg0bboY42vQ;W b(=22BOdD jha s9 5##\DXک\̒ܚ!"KL@ *FޯӐ 0VCS$O#c[kGߒ}a>|IF_omeLOcF7|T-*A33#cd׀<JcoΙX~vE1ng/g&a Uƒuz:<;w;!M?p 2F12 13f&rqu1SVwgca"sM K .[nyF8,\`/CC)wN "IS \~\&Bd-CiぽR>OeV "cl4F)о TAChcr&y J<ˋc?%pȿ9 9`5ޣY  &NBlI|h7%I7as !kXFH%3G5nc#4,twr+2q Ĉ8Keo]F!\Pni`aK5z@TI"! 1.ca.?Hi^I'vMIdr;CJ11FaxO$a 6/!q F q&i@v!4!bKmC}~BwLA5#L!]<,2R665QqNn332qs9h0|v ϰęu93SƤ)ڕAMxG*|ácϛ+'CC@G-lxn *K) bn7|̤4'"gf_R*^dTWgE̐{i۳X r*$)@Qw :0*Ot2A/eab˟'0%ˡIoGC,:)2D_Z?+ @j0\|E;>poŰ#YGg|ID #|!8( [ $/o] + Ց<2 4$& dN<#^Fəݷ-$LL$KLHQ0a LK@4q2ڝ Y4Y Hԭ>?~zi⠍k+r pGξ>? 500 $ĥ)F+`@$322F0qC%FqοvI>?̀6[32'_?YsI~܁-'-`~I`7G'$h(o!!AJ]yȾ[F :c%ap`0P(1An#׋+AtABŹaqt4@~)!k `\q1ƹs}|GJaC@=d!#ZLSd?DUC+aaQ gBòX?]|=[t®8 G/!o>~qOr {{}{E_ߘ1.#)j0( sպ4@*C8%xÊ>,d@ŗ+^"t1%؆vdxI\i 0DK6<||h{ )3"#c@:曅og>*&;Č_Ba2"&&ݧЃ@t&FcX/YH vh,g'k -CM  ag-t$ )T> CH<VBCo3@+AybN8ۯ7L\ zx Re?$Q-O.Vq DFR}A1?;FV&7߯Vݼ9;\AR(X5LW݉r%?:"TB ^rL ѱݳhP8ذhd@4Ȳz"331yHg#<йsMoh;;kCOMOȀ͗^23:a$>Nb`H \XCy\4 DQh& #YM$+IZz=24}0wzVQ $r rx.=:FQ1^M 3 `׃c*~Έ Jt X_U?Y@Ă_$f.3ZvV`Ǎ]_/d=3R4t蓂?Bf}!'>|qxz%"*a1ajƀ,Oz}W Kgv~cU\`3`/abvH5Vh/e{c4 #QLf#u @ڀ-DV\}=rH pܷv \<Ͽ JJ~R@>tV fFv}<)^hCXRX|AT`JLࣵ(?(]?($d4zWC?<)'8gD_A+78d$+Y`G)H@Dc5?.(Ͽ,QkH6kXyd'k$Ev{=v ;X/_}i{!~`O݁!ZPS 4>;\Dԣ@Y;~ĥTLAϋ&!6fnW .F:d%d~XQvNװOw3qmnFAgX$F m~vӈ(i v}`؂d9&K^ANH6 ,dbuaF  |a|S&#ەw Gh ά N߿ f2m = أ2@4 Av~veCfFiлpUA&`3|Ow=~8t.;:Qؠt9 Z`H rpm1Cݏ{E~q; fo2@/5s]fEu@F7k j|/ >l(dDX3|xg_@DtdC512 1221f?~ HH~yݠW_2!#ҺRI8,cj9g#"`>#r@ѳ AĞT Ћ9CI0ٙ>zvͷ I NqGJ( g]x{^gea7KD|ͰϻcR6̴DNxod9#l7 "p{LL>?(Ő 6"Н@-=}m3` `b0_]302h؆^qnksN`ҷ$]/ ~QLiFx]ew킽bxʂh01B.qOB03 FC gZa@DTK$I[4XRnI2BE }?~VuIϿ(B$~E)?~}`Hw?Iq b,Q14H0ϋw} ԣxͿ1( rhA.U;ձ',bgD\-H7 {ܔ6 qjo? gZbl8 ~]̐"BFY1(l#FxvwBqt$/g?y  Ҙ2Iln*dyF>F"hqףBSy;|`(o9I!0MH[{vc  ݈}# xPԈl+/'= a/҃ fۻ)m`g°w_8:O}@T`>̓Ff1@d@,`$DDX ,\<ҭO# '5l{шyET{g?=+,} /AP `U3qRsy駭L8 *. ^,4Jvf^U`}~vu&{ F=$kkXmC<iWn]GPf.`RDs!9_P&g'$'+iQ.?4~yqÏ{|?6H >?)w @$E ؘy7\@E Gw РnB#Ww?l8(ۯu Ж4E1 ڂfTrœrnB\,G ǟ6?o:|+S扁^Xͥ[tEsZ٠'ۄC@"O;(̌aJ:tk`+: 433rɈ(s ?=vW_/@Qf`9##to5xsl?a^V1;YHmq%C8G>qjP3 Ȉ*3 +0<43$+7 f?Xeb1AՑX ?W/~q˯gZ>VQR1 :>tɌ 1n3hfH@Ct_?z^s՜_12 uKΩd +`T012d`be`o~}՗_OvA^X?:+N@xZ)!giGZMbF3`42m :5~ c`K^WDmA[;N/*v>~vUnVyN^69v!6&~.6qfF6F.NVI̽ ǟ"o^_64>|Ͽ߁.c {+C;밅TMkA! ? Dd%tyh6`@C&6_};{YՃX`mO3 ο*.T&HGzE)?@9MU+K3O՟~11"f@ oDD*ԈiePґ|L<;"u>#DaH@C!WW_O;ϟL̐F:ga3"!w6rda W B2kwPr [@+0Ɛ$c`M2eSd`WQgf4Q'vyM`}DkSNV<8NP4 ˠU"^ 3@ٔ>;Vׅ}4ʥFZ ec5Qgfdw5H6x8CK}տ oN>v0E s?m,95K x55n7\y!-Qau?0Fz 73bieCE(DUzI|{#j3p@C /۞|:L]̰ǔZ!̣ƙ/,?BˠRKOW,WK4e4c @C;j虈@֯}7nNBBV40B뼑0CZa+b@㐿%?d4x`zh=3 ႞鵎$rx&A?LO"Wѧ" x `3A~wo_̆:n-d $y-%xXg@ <@ >0|nۜ}ZCrBA#R6D_p &ʭc$Q+ [2 ?v4@C m&Qfزȴ)HuwvLIY?f6A.]<5h!$: O;aЄf@]U!?yp[o~wLL~8!?RMo_xi|<Ўyd-d3t`.xGџ <*aR<ܖ Q0l@,C6w?~ۥ?~,dDa Cڌvi8xEt> L9KZMC8U4хS H(0d2Mݳχn]>S5.ʵBziU ̬l|l BI~̌0}GU FT 3uaWb2Ly>l_~}|@Vc@WprJ+ x+ sH(eQ0<@A,&lc"<Z ~7.v?8:gSt"8 RX G4rШ#@ ЏD~~7|g{ fs 9>÷ojZNCAv5>%vE!! fm8kj"?)}_>|{?|;>ƈ?!R)f9XXyd8TyXeD9x8YŹY9YDYGca@f`:}_w}_{?~1zǮǮ$$afbfbca Q  +PTIENDB`C( / 0DArialNew Ro.:,:000Wo 0"DGill Sans MT:,:000Wo 0" DTimes New Roman,:000Wo 0c0.  @n?" dd@  @@`` 6$         $%&ob$oh t4`4NA=b$ Pu-@c1 5~b$l)dF *vMb$8q[w 3Gp sf 0e0e     A@  A5% 8c8c     ?1 d0u0@Ty2 NP'p<'pA)BCD|E||S"@(ʚ;3ʚ;g4ZdZd0$ppp@ <4dddd 0:<4!d!d 0: <4ddddP. 0J80___PPT10 ? %8Credential ManagementRobert D. Olson June 11, 2004OverviewGeneral security overview Some PKI history Validation Authorization Operational Issues Certificate Authorities Management tools D=Security OverviewAG Toolkit provides foundation for secure communication Essential component: Authentication Process by which a claimed identity is verified AG needs authentication for & Users Services Devices <ZZZ Five elements of AuthenticationDPerson, principal or entity What is being authenticated? Distinguishing characteristic What does the entity hold that allows proof? Proprietor What party is requiring the authentication? Authentication mechanism How is the proof of identity actually achieved? Access control mechanism How is the authenticated identity used?ZZZ-Z Z,ZZ0ZZ(Z- ,  0  ( AG ElementsLet us consider entering a venue Entity: An AG user Distinguishing characteristic: the public key in his certificate Proprietor: owner of the Venue Server Authentication mechanism: X509 certificate validation Access control mechanism: AG Venue Server access control configuration*--Public Key Infrastructure"AG uses PKI for authentication Some PKI history Originally used for server authentication and data protection for e-commerce Web servers held identity certificates, clients authenticated servers Clients remained anonymous Client authentication possible in web-based systems, but rarely used60E0EMutual AuthenticationDefined as authentication process where both client and server both present certificates Each party authenticates the other s identity AG Toolkit based on mutual authentication via Globus Toolkit   ValidationDuring authentication, each party validates the identity provided to it Validation can be considered a series of questions A  no answer to any of the questions results in failure of validation& Which results in the failure of the attempted communication. Validation 1.aWas the certificate presented issued by a Certificate Authority that I trust? The process presented with a certificate must hold the identity cert for the CA which issued the cert in question Digital signature of the presented cert verified with the public key in the CA cert CA cert must be available, and signature verified, for validation to succeed.&NN Validation 2.Is the certificate currently valid? Each certificate has a well-defined range of time when it is considered valid. For validation to succeed, the current time must fall within that range. Each issuing CA certificate must also be within its time of validity.&$$ Validation 3.Does the entity presenting the cert hold the private key corresponding to the cert? A process requesting authentication must provide proof it holds the private key Proof typically takes the form of the requesting process encrypting a random challenge with the private key 2TTCertification ChainsA Certificate Authority can delegate the authority to sign certificates to a subordinate CA Each subordinate CA also has an identity certificate Validation of an identity issued by a sub-CA requires checking of all certificates in the chain.State of the Toolkit Given the preceding discussion, how does this affect the AG Toolkit? Any communicating party must have an identity certificate. Any communicating party must hold the trusted CA certificate for the CA that issued certificates to any party with which it communicates.&EE*)Certificate DistributionIdentity CertificatesEach  human user of the AG required to have identity certificate ( Required is actually a result of the policy enforced by a particular service) ANL AG group provides two mechanisms for obtaining identity certificates AGDev CA FuturesLab group runs a fairly casual Certificate Authority Requests generated through the AG Venue Client Issuing policy requires real names and email addresses Generated certificates installed through the AG Venue Client as well  Anonymous CAFor testing purposes, and for instances when a more serious identity is not required An  online CA , certificates issued immediately by an online service Names always of the form  Anonymous User XXXXX Service CertificatesAutonomous services (VenueServer, node services, etc) also require identity certificates Typically do not have encrypted private keys (protection via OS security) As of AG2.2, AGDev CA also issues service certificates, %Other Certificate Authorities/An organization that has an existing PKI may use this easily with AG Existing CA certificates to be imported to all participating AG software (clients and services) Identity certificates imported for use Future enhancements to aid in the determination of precisely which CA a client or service requires */ZZ/$Certificate Management in AG ToolkitgAGTk provides comprehensive certificate management tools Certificate Manager and Repository objects for use by applications Maintain sets of identity, CA, proxy certificates Provides interface to underlying security environment Command-line and GUI-based interfaces for manipulating certificates Security tools entirely hide the details from application codel9DhD?9DhD?  c(GUI Certificate Manager Certificate View   /GUI Certificate Manager Trusted CA Certificates!"*GUI Certificate Manager Certificate Detail"Future DirectionsfToward easier certificate management Toward easier installation Toward support for future Web Services#Other Certificate Access MechanismsBurdensome to copy identity certificates about from machine to machine Potential solutions: Memory stick (works with current tech) Encryption tokens (requires new support from Globus Tookit) Certificate proxying servers (MyProxy)&\\>   Node Cluster Services_In a multiple-machine node, each component requires a cert However, if components do not communicate externally, do not need outside CA Local CA set up at install time, certs issued to all node components If remote access required (remote control), user identity certs may be issued by the node administrator (tight control of outside access possible)``,XS Insecure ToolkitIn some environments, security may not matter at all Toolkit supports the use of entirely insecure communications No certificates required All messaging in the clear Appropriate for closed networks I worry about compromise potential on the open Internet*Z8Z8%%Graduated Security$We ve discussed tightly locked-down systems, and unlocked systems& Is there a happy medium? Consider that: For most use, we don t need bulletproof security But for some applications, and in some communities, we do We may desire to shift from one mode to another dynamically*lZZl&&Graduated Security, cont.mConsider the Pervasive Collaborative Computing Environment Project (Deb Agarwal, LBNL) Among other things, PCCE is investigating a graduated security model Supports varying levels of user registration Varying modes of user authentication and credentials Supports both established and ad hoc collaborative modes Research question: How can this be applied to the AG?XZbZoZ 6ZboH+*Graduated Security, Cont.Anonymous Certificates also a intermediate solution Anon cert uniquely identifies a client, but does not bind user identity to the client identity Certs issued automatically (And immediately)',+&Online CA with external authenticatorslAutomated CA which issues certificate based on some external criteria Example: Unix login authenticator User submits cert request with NIS login & password (encrypted) CA uses NIS to perform password verification On success, CA issues certificate To the user, he used his Unix login to gain access to resource To the resource, the user provided a valid certificateBhZZvZhv   Web ServicesGrid-based computing moving toward Web Services for high-level communication SOAP + WSDL + high level Web Service interface WS-Resource  resource management WS-Service Group  service registry WS-Security  secure communications&}j}j## WS-SecuritySOAP enhancements for Message integrity Message confidentiality Single-message authentication Encoding of security tokens As WS technology matures, AG project will track the security work Likely to still utilize X509 PKI, retaining utility of Certificate Management tools<ZdZZd$$Linkage to other projectsDepending on user requirements, and based on our support of the Globus PKI mechanisms, possible to support such things as the NMI-supported tools: Kerberos-based authentication, via KX509 SAML/Shibboleth for interaction with web-based single sign-on systems&oo,@Lg  CreditsThis work is supported in part by: The Mathematical, Information, and Computational Sciences Division subprogram of the Office of Advanced Scientific Computing Research, Office of Science, U.S. Department of Energy, under Contract W-31-109-ENG-38, the National Science Foundation under Grant No. ANI-0222509, Support from Microsoft Research, and Federal funds from the National Library of Medicine, National Institutes of Health, under Contract No. N01-LM-3-3508 and Grant R01-LM-06756, And viewers like you. <#ZZZ#P  ` ̙33` ` ff3333f` 333MMM` f` f` 3` 3PP333` 3PP333>?" dd@,?" dd@    ," @ ` n?" dd@   @@``PR    @ ` ` p>>  |(    6zo "P`` : T Click to edit Master title style! !$  0X}o "P` o RClick to edit Master text styles Second level Third level Fourth level Fifth level!     S  0x#o "`` o F*0  0To "   o RAccess Grid Retreat 20040  0o "`  o H*0l  C 6Aaglogo-mediumc"0p2  C Afl-logo-ti-small.png 00069D3D Macintosh HD BCCA75EF:"0pB  s *޽h ? 3PP333 AGRetreat$ 0$(  r  S |-:> : r  S Z `   : H  0޽h ? 3380___PPT10.;0p-OR  PR(  ~  s *oBP``  B   s *XBP` B "p`PpH  0޽h ? 3380___PPT10.;zj<  `<(  ~  s *$BP``  B ~  s *BP` B H  0޽h ? 3380___PPT10.;rr  pD0(  Dx D c $(P``   x D c $GP`  H D 0޽h ? 33  H0(  Hx H c $_oP``  : x H c $LoP` o H H 0޽h ? 33  L0(  Lx L c $!BP``  B x L c $4BP` B H L 0޽h ? 33  P0(  Px P c $BP``  B x P c $BP` B H P 0޽h ? 33  T0(  Tx T c $HFBP``  B x T c $GBP` B H T 0޽h ? 33  X0(  Xx X c $ oP``  o x X c $d2oP` o H X 0޽h ? 33  \0(  \x \ c $mBP``  B x \ c $nBP` B H \ 0޽h ? 33  `0(  `x ` c $IBP``  B x ` c $rBP` B H ` 0޽h ? 33  d0(  dx d c $BP``  B x d c $yBP` B H d 0޽h ? 33<  <(  ~  s *(i@P``  @ ~  s *i@P` @ H  0޽h ? 3380___PPT10.;~V     @0  (  r  S ::P``  :   <f:   gSubj: bob Issuer: AGDEV0  <m p oSubj: Anon 342ad Issuer: AGANON 0 "  <d m   PBob s Laptop 0 8     ` `  61   ySubj: zuz Issuer: AGDEV0$"   <Lȵ   X Susanne s Laptop08   @  `   <dB0   jSubj AGANON Issuer: AGANON0"  <pm  @  D Anonymous CA 0 8 p @0  p 0   6*o` p@  iSubj: AGDEV Issuer: AGDEV0"  6Вmp @0  @AGDEV CA 0 B  ND?" `   T ?"~ `4e  BIssues 0B  ND?"`B @ ND?" H  0޽h ? 3PP333  h0(  hx h c $,@P``  @ x h c $-@P` @ H h 0޽h ? 33   l0(  lx l c $y@P``  @ x l c $pz@P` @ H l 0޽h ? 33  0p0(  px p c $HP``   x p c $P`  H p 0޽h ? 33   t0(  tx t c $vP``   x t c $ P`  H t 0޽h ? 33  x0(  xx x c $|}P``   x x c $ ~P`  H x 0޽h ? 33  0(  x  c $|P``   x  c $8P`  H  0޽h ? 33  x(  x  c $5@P``  @ X  0A? H  0޽h ? 33  x(  x  c $D@P``  @ X  0A?H  0޽h ? 330  p(  x  c $$@P``  @ X  0A?X  0A?0  H  0޽h ? 33  0(  x  c $@P``  @ x  c $8q@P` @ H  0޽h ? 33  |0(  |x | c $@P``  @ x | c $0@P` @ H | 0޽h ? 33  0(  x  c $BP``  B x  c $BP` B H  0޽h ? 33<  (<(  (~ ( s *BP``  B ~ ( s *BP` B H ( 0޽h ? 3380___PPT10.;Js  0(  x  c $BP``  B x  c $XBP` B H  0޽h ? 33  p0(  x  c $d @P``  @ x  c $ !@P` @ H  0޽h ? 33  P$(  r  S mP``  : r  S x.mP` m H  0޽h ? 3PP333  `$(  r  S +oP``  : r  S mP` m H  0޽h ? 3PP3330  `40(  4x 4 c $ BP``  B x 4 c $BP` B H 4 0޽h ? 3380___PPT10.;0 L  P0(  x  c $د@P``  @ x  c $@P` @ H  0޽h ? 33  @0(  x  c $@P``  @ x  c $@P` @ H  0޽h ? 33<   0<(  0~ 0 s *aP``   ~ 0 s *P`  H 0 0޽h ? 3380___PPT10.;Pr@%NQPRg ͗TVY[/]?_Oa_coe!vxz |~щɋɃه(C*0i%9,Oh+'0R hp  , 8 DPXCredential ManagementeIvan R. Judsong1C:\home\olson\docs\AG\retreat-2004\AGRetreat.poticr Robert Olson\do17eMicrosoft Office PowerPoint@P )@qү;@/֢O#GPg  R('& &&#TNPP2OMiB & TNPP &&TNPP     'A x(xKʦ """)))UUUMMMBBB999|PP3f3333f333ff3fffff3f3f̙f3333f3333333333f3333333f3f33ff3f3f3f3333f3333333f3̙33333f333ff3ffffff3f33f3ff3f3f3ffff3fffffffff3fffffff3f̙ffff3ff333f3ff33fff33f3ff̙3f3f3333f333ff3fffff̙̙3̙f̙̙̙3f̙3f3f3333f333ff3fffff3f3f̙3ffffffffff!___www~66W~6yy666fWG}yf޼ݍݼXGxüoo޶ݼ޶ݽfWjWAoGojGuifXWݔjigxGGy㓱oo޽oGj6G6ioogg6yy6Aiii㎓oݼ~666~ޚޔ--&TNPP &՜.+,0d     On-screen ShowFutures Laboratoryz#  'Arial Gill Sans MTTimes New Roman AGRetreatCredential Management OverviewSecurity Overview Five elements of Authentication AG ElementsPublic Key InfrastructureMutual Authentication ValidationValidation 1.Validation 2.Validation 3.Certification ChainsState of the ToolkitCertificate DistributionIdentity Certificates AGDev CA Anonymous CAService CertificatesOther Certificate Authorities%Certificate Management in AG Toolkit)GUI Certificate Manager Certificate View0GUI Certificate Manager Trusted CA Certificates+GUI Certificate Manager Certificate DetailFuture Directions$Other Certificate Access MechanismsNode Cluster ServicesInsecure ToolkitGraduated SecurityGraduated Security, cont.Graduated Security, Cont.'Online CA with external authenticators Web Services WS-SecurityLinkage to other projectsCredits  Fonts UsedDesign Template Slide Titles#$_ :Robert OlsonRobert Olson  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefgijklmnoqrstuvw|Root EntrydO)PicturesCurrent UserpSummaryInformation(>DRPowerPoint Document( DocumentSummaryInformation8h