Criteria Approach to Separation Assurance