Proving One-to-One Property