Formal Framework for Checking Compliance of Data-Driven Case Management

Journal on Data Semantics - Tập 10 Số 1 - Trang 143-163 - 2021
Haarmann, Stephan1, Holfter, Adrian1, Pufahl, Luise2, Weske, Mathias1
1Hasso Plattner Institute, University of Potsdam, Potsdam, Germany
2Software and Business Engineering, Technische Universitaet Berlin, Berlin, Germany

Tóm tắt

Business processes are often specified in descriptive or normative models. Both types of models should adhere to internal and external regulations, such as company guidelines or laws. Employing compliance checking techniques, it is possible to verify process models against rules. While traditionally compliance checking focuses on well-structured processes, we address case management scenarios. In case management, knowledge workers drive multi-variant and adaptive processes. Our contribution is based on the fragment-based case management approach, which splits a process into a set of fragments. The fragments are synchronized through shared data but can, otherwise, be dynamically instantiated and executed. We formalize case models using Petri nets. We demonstrate the formalization for design-time and run-time compliance checking and present a proof-of-concept implementation. The application of the implemented compliance checking approach to a use case exemplifies its effectiveness while designing a case model. The empirical evaluation on a set of case models for measuring the performance of the approach shows that rules can often be checked in less than a second.

Tài liệu tham khảo

Awad A, Decker G, Weske M (2008) Efficient compliance checking using bpmn-q and temporal logic. In: Dumas M, Reichert M, Shan MC (eds) Business process management. Springer, Berlin, pp 326–341. https://doi.org/10.1007/978-3-540-85758-7_24 citation_journal_title=Comput Ind; citation_title=On efficient processing of BPMN-q queries; citation_author=A Awad, S Sakr; citation_volume=63; citation_publication_date=2012; citation_pages=867-881; citation_doi=10.1016/j.compind.2012.06.002; citation_id=CR2 Awad A, Weidlich M, Weske M (2009) Specification, verification and explanation of violation for data aware compliance rules. In: Service-Oriented Computing, 7th International Joint Conference, ICSOC-ServiceWave 2009, Stockholm, Sweden, November 24–27, 2009. Proceedings, pp 500–515. https://doi.org/10.1007/978-3-642-10383-4_37 citation_journal_title=J Vis Lang Comput; citation_title=Visually specifying compliance rules and explaining their violations for business processes; citation_author=A Awad, M Weidlich, M Weske; citation_volume=22; citation_publication_date=2011; citation_pages=30-55; citation_doi=10.1016/j.jvlc.2010.11.002; citation_id=CR4 Belardinelli F, Lomuscio A, Patrizi F (2012) Verification of GSM-based artifact-centric systems through finite abstraction. In: Service-oriented computing—10th international conference, ICSOC 2012, Shanghai, China, November 12–15, 2012. Proceedings, pp 17–31. https://doi.org/10.1007/978-3-642-34321-6_2 Best E, Devillers RR, Hall JG (1992) The box calculus: a new causal algebra with multi-label communication. In: Advances in Petri Nets 1992, The DEMON Project. Springer, Berlin, pp 21–69. https://doi.org/10.1007/3-540-55610-9_167 citation_journal_title=Expert Syst Appl; citation_title=Conformance checking and diagnosis for declarative business process models in data-aware scenarios; citation_author=D Borrego, I Barba; citation_volume=41; citation_issue=11; citation_publication_date=2014; citation_pages=5340-5352; citation_doi=10.1016/j.eswa.2014.03.010; citation_id=CR7 citation_journal_title=Data Knowl Eng; citation_title=Diagnosing correctness of semantic workflow models; citation_author=D Borrego, R Eshuis, MTG López, RM Gasca; citation_volume=87; citation_publication_date=2013; citation_pages=167-184; citation_doi=10.1016/j.datak.2013.04.008; citation_id=CR8 citation_journal_title=Expert Syst Appl; citation_title=Conformance checking based on multi-perspective declarative process models; citation_author=A Burattin, FM Maggi, A Sperduti; citation_volume=65; citation_publication_date=2016; citation_pages=194-211; citation_doi=10.1016/j.eswa.2016.08.040; citation_id=CR9 Combi C, Oliboni B, Weske M, Zerbato F (2018) Conceptual modeling of processes and data: connecting different perspectives. In: Conceptual modeling—37th International Conference, ER 2018, Xi’an, China, October 22–25, 2018, Proceedings, pp 236–250. https://doi.org/10.1007/978-3-030-00847-5_18 citation_journal_title=MIS Q; citation_title=Perceived usefulness, perceived ease of use, and user acceptance of information technology; citation_author=FD Davis; citation_volume=13; citation_issue=3; citation_publication_date=1989; citation_pages=319-340; citation_doi=10.2307/249008; citation_id=CR11 citation_journal_title=J Data Semant; citation_title=Knowledge-intensive processes: characteristics, requirements and analysis of contemporary approaches; citation_author=C Ciccio, A Marrella, A Russo; citation_volume=4; citation_issue=1; citation_publication_date=2015; citation_pages=29-57; citation_doi=10.1007/s13740-014-0038-4; citation_id=CR12 citation_journal_title=Inf Softw Technol; citation_title=Semantics and analysis of business process models in BPMN; citation_author=RM Dijkman, M Dumas, C Ouyang; citation_volume=50; citation_issue=12; citation_publication_date=2008; citation_pages=1281-1294; citation_doi=10.1016/j.infsof.2008.02.006; citation_id=CR13 Esparza J (1996) Decidability and complexity of petri net problems—an introduction. In: Lectures on Petri Nets I: Basic Models, Advances in Petri Nets, the volumes are based on the Advanced Course on Petri Nets, held in Dagstuhl, September 1996, pp 374–428. https://doi.org/10.1007/3-540-65306-6_20 Fdhila W, Gall M, Rinderle-Ma S, Mangler J, Indiono C (2016) Classification and formalization of instance-spanning constraints in process-driven applications. In: Business process management—4th international conference, BPM 2016, Rio de Janeiro, Brazil, September 18–22, 2016. Proceedings, pp. 348–364. https://doi.org/10.1007/978-3-319-45348-4_20 Gonzalez P, Griesmayer A, Lomuscio A (2012) Verifying GSM-based business artifacts. In: 2012 IEEE 19th international conference on web services, Honolulu, HI, USA, June 24–29, 2012, pp. 25–32. https://doi.org/10.1109/ICWS.2012.31 Haarmann S, Batoulis K, Weske M (2018) Compliance checking for decision-aware process models. In: Business process management workshops—BPM 2018 international workshops, Sydney, NSW, Australia, September 9–14, 2018, Revised Papers, pp 494–506. https://doi.org/10.1007/978-3-030-11641-5_39 Haarmann S, Batoulis K, Weske M (2019) Compliance checking for decision-aware process models. In: Business process management workshops. Springer, pp 494–506. https://doi.org/10.1007/978-3-030-11641-5_39 Haarmann S, Podlesny N, Hewelt M, Meyer A, Weske M (2015) Production case management: a prototypical process engine to execute flexible business processes. In: BPM (Demos), pp 110–114 Hashmi M, Governatori G, Lam HP, Wynn MT (2018) Are we done with business process compliance: state of the art and challenges ahead. Knowl Inform Syst 1–55 citation_journal_title=Trans Petri Nets Other Model Concurr; citation_title=Business process modeling using petri nets; citation_author=KM Hee, N Sidorova, JMEM Werf; citation_volume=7; citation_publication_date=2013; citation_pages=116-161; citation_id=CR21 Hewelt M, Weske M (2016) A hybrid approach for flexible case modeling and execution. In: Lecture notes in business information processing. Springer, Berlin, pp 38–54. https://doi.org/10.1007/978-3-319-45468-9_3 Hewelt M, Wolff F, Mandal S, Pufahl L, Weske M (2018) Towards a methodology for case model elicitation. In: Enterprise, business-process and information systems modeling. Springer, pp 181–195 Hildebrandt TT, Mukkamala RR (2010) Declarative event-based workflow as distributed dynamic condition response graphs. In: Proceedings third workshop on programming language approaches to concurrency and communication-cEntric Software, PLACES 2010, Paphos, Cyprus, 21st March 2010, pp 59–73. https://doi.org/10.4204/EPTCS.69.5 citation_journal_title=Commun ACM; citation_title=Communicating sequential processes; citation_author=CAR Hoare; citation_volume=21; citation_issue=8; citation_publication_date=1978; citation_pages=666-677; citation_doi=10.1145/359576.359585; citation_id=CR25 Holfter A, Haarmann S, Pufahl L, Weske M (2019) Checking compliance in data-driven case management. In: Business process management workshops—BPM 2019 international workshops, Vienna, Austria, September 1–6, 2019, Revised Selected Papers, pp 400–411. https://doi.org/10.1007/978-3-030-37453-2_33 Hull R, Damaggio E, Fournier F, Gupta M, III FFTH, Hobson S, Linehan MH, Maradugu S, Nigam A, Sukaviriya P, Vaculín R (2010) Introducing the guard-stage-milestone approach for specifying business entity lifecycles. In: Web services and formal methods—7th international workshop, WS-FM 2010, Hoboken, NJ, USA, September 16–17, 2010. Revised Selected Papers, pp 1–24. https://doi.org/10.1007/978-3-642-19589-1_1 citation_journal_title=Commun ACM; citation_title=Frameworks = (components + patterns); citation_author=RE Johnson; citation_volume=40; citation_issue=10; citation_publication_date=1997; citation_pages=39-42; citation_doi=10.1145/262793.262799; citation_id=CR28 Knuplesch D, Ly LT, Rinderle-Ma S, Pfeifer H, Dadam P (2010) On enabling data-aware compliance checking of business process models. In: Conceptual modeling—ER 2010, 29th international conference on conceptual modeling, Vancouver, BC, Canada, November 1–4, 2010. Proceedings, pp 332–346. https://doi.org/10.1007/978-3-642-16373-9_24 Knuplesch D, Reichert M, Ly LT, Kumar A, Rinderle-Ma S (2013) Visual modeling of business process compliance rules with the support of multiple perspectives. In: International conference on conceptual modeling. Springer, pp 106–120 citation_title=Behavioural models–from modelling finite automata to analysing business processes; citation_publication_date=2016; citation_id=CR31; citation_author=M Kunze; citation_author=M Weske; citation_publisher=Springer citation_journal_title=J Softw Maint; citation_title=Philharmonicflows: towards a framework for object-aware process management; citation_author=V Künzle, M Reichert; citation_volume=23; citation_issue=4; citation_publication_date=2011; citation_pages=205-244; citation_doi=10.1002/smr.524; citation_id=CR32 Leitner M, Mangler J, Rinderle-Ma S (2012) Definition and enactment of instance-spanning process constraints. In: Web information systems engineering—WISE 2012—13th international conference, Paphos, Cyprus, November 28–30, 2012. Proceedings, pp 652–658. https://doi.org/10.1007/978-3-642-35063-4_49 citation_journal_title=Proc VLDB Endow; citation_title=VERIFAS: a practical verifier for artifact systems; citation_author=Y Li, A Deutsch, V Vianu; citation_volume=11; citation_issue=3; citation_publication_date=2017; citation_pages=283-296; citation_doi=10.14778/3157794.3157798; citation_id=CR34 Ly LT, Knuplesch D, Rinderle-Ma S, Göser K, Pfeifer H, Reichert M, Dadam P (2010) Seaflows toolset—compliance verification made easy for process-aware information systems. In: Information systems evolution—CAiSE Forum 2010, Hammamet, Tunisia, June 7–9, 2010, Selected Extended Papers, pp 76–91. https://doi.org/10.1007/978-3-642-17722-4_6 Ly LT, Rinderle-Ma S, Knuplesch D, Dadam P (2011) Monitoring business process compliance using compliance rule graphs. In: On the move to meaningful internet systems: OTM 2011—confederated international conferences: CoopIS, DOA-SVI, and ODBASE 2011, Hersonissos, Crete, Greece, October 17–21, 2011, Proceedings, Part I, pp 82–99. https://doi.org/10.1007/978-3-642-25109-2_7 citation_title=Modeling and enacting complex data dependencies in business processes; citation_inbook_title=Business process management; citation_publication_date=2013; citation_pages=171-186; citation_id=CR37; citation_author=A Meyer; citation_author=L Pufahl; citation_author=D Fahland; citation_author=M Weske; citation_publisher=Springer citation_title=Communicating and mobile systems: the pi-calculus; citation_publication_date=1999; citation_id=CR38; citation_author=R Milner; citation_publisher=Cambridge University Press Object Management Group (OMG) (2014) Business Process Model and Notation (BPMN). OMG Document Number formal/13-12-09. Version 2.0.2 (2017) Object Management Group (OMG): Case Management Model and Notation (CMMN). OMG Document Number formal/16-12-01. https://www.omg.org/spec/CMMN/About-CMMN/ . Version 1.1 citation_journal_title=Knowl Inf Syst; citation_title=Verifying the manipulation of data objects according to business process and data models; citation_author=JM Pérez-Álvarez, MTG López, R Eshuis, M Montali, RM Gasca; citation_volume=62; citation_issue=7; citation_publication_date=2020; citation_pages=2653-2683; citation_doi=10.1007/s10115-019-01431-5; citation_id=CR41 Pesic M, Schonenberg H, van der Aalst W (2007) DECLARE: full support for loosely-structured processes. In: Proceedings of the 11th IEEE international enterprise distributed object computing conference, p 287. IEEE Computer Society, Washington, DC, USA. http://portal.acm.org/citation.cfm?id=1317532.1318056 Pommereau F (2009) Algebras of coloured Petri nets and their applications to modelling and verification. Habilitation à diriger des recherches, Université de Paris-Est/Créteil. https://hal.archives-ouvertes.fr/tel-02309973 citation_journal_title=Computing; citation_title=Batch activity: enhancing business process modeling and enactment with batch processing; citation_author=L Pufahl, M Weske; citation_volume=101; citation_issue=12; citation_publication_date=2019; citation_pages=1909-1933; citation_doi=10.1007/s00607-019-00717-4; citation_id=CR44 Reisig W (2011) Petri Nets. Springer, Berlin. https://www.ebook.de/de/product/19303359/wolfgang_reisig_petri_nets.html Sackmann S, Kuehnel S, Seyffarth T (2018) Using business process compliance approaches for compliance management with regard to digitization: evidence from a systematic literature review. In: International conference on business process management. Springer, pp 409–425 Santoro FM, Slaats T, Hildebrandt TT, Baião FA (2019) Dcr-kipn a hybrid modeling approach for knowledge-intensive processes. In: Conceptual modeling—38th international conference, ER 2019, Salvador, Brazil, November 4–7, 2019, Proceedings, pp 153–161. https://doi.org/10.1007/978-3-030-33223-5_13 citation_title=Lola a low level analyser; citation_inbook_title=Application and theory of Petri Nets 2000; citation_publication_date=2000; citation_pages=465-474; citation_id=CR48; citation_author=K Schmidt; citation_publisher=Springer Semmelrodt F, Knuplesch D, Reichert M (2014) Modeling the resource perspective of business process compliance rules with the extended compliance rule graph. In: Enterprise, business-process and information systems modeling—15th international conference, BPMDS 2014, 19th international conference, EMMSAD 2014, Held at CAiSE 2014, Thessaloniki, Greece, June 16–17, 2014. Proceedings, pp 48–63. https://doi.org/10.1007/978-3-662-43745-2_4 Slaats T, Mukkamala RR, Hildebrandt T, Marquard M (2013) Exformatics declarative case management workflows as DCR graphs. In: Business process management. Springer, pp 339–354 Solomakhin D, Montali M, Tessaris S, De Masellis R (2013) Verification of artifact-centric systems: decidability and modeling issues. In: Service-oriented computing—11th international conference, ICSOC 2013, Berlin, Germany, December 2–5, 2013, Proceedings, pp 252–266. https://doi.org/10.1007/978-3-642-45005-1_18 Sporleder T (2016) Fragment-based case management: specification and translational semantics. Master’s thesis, Hasso Plattner Institute, University of Potsdam, Germany Swenson KD (2012) Case management: contrasting production vs. adaptive. How knowledge workers get things done, pp 109–116 Tosatto SC, Governatori G, van Beest N (2019) Checking regulatory compliance: will we live to see it? In: Business process management—17th international conference, BPM 2019, Vienna, Austria, September 1–6, 2019, Proceedings, pp 119–138. https://doi.org/10.1007/978-3-030-26619-6_10 European Commission for Translation, D.G.: Translation tools and workflow Weske M (2019) Business process management—concepts, languages, architectures, 3rd edn. Springer, Berlin. https://doi.org/10.1007/978-3-662-59432-2