In this paper,the Bell-LaPadula formal model for secure computer systems is introduced,and the key theoretical results are proved. In addition, we also point out that the sufficient and necessary condition,given by reference[11], for secure information system is wrong. Exploiting a new concept,the correct sufficient and necessary condition is presented.