Formal Framework for Checking Compliance of Data-Driven Case Management
Tóm tắt
Business processes are often specified in descriptive or normative models. Both types of models should adhere to internal and external regulations, such as company guidelines or laws. Employing compliance checking techniques, it is possible to verify process models against rules. While traditionally compliance checking focuses on well-structured processes, we address case management scenarios. In case management, knowledge workers drive multi-variant and adaptive processes. Our contribution is based on the fragment-based case management approach, which splits a process into a set of fragments. The fragments are synchronized through shared data but can, otherwise, be dynamically instantiated and executed. We formalize case models using Petri nets. We demonstrate the formalization for design-time and run-time compliance checking and present a proof-of-concept implementation. The application of the implemented compliance checking approach to a use case exemplifies its effectiveness while designing a case model. The empirical evaluation on a set of case models for measuring the performance of the approach shows that rules can often be checked in less than a second.
Tài liệu tham khảo
Awad A, Decker G, Weske M (2008) Efficient compliance checking using bpmn-q and temporal logic. In: Dumas M, Reichert M, Shan MC (eds) Business process management. Springer, Berlin, pp 326–341.
https://doi.org/10.1007/978-3-540-85758-7_24
citation_journal_title=Comput Ind; citation_title=On efficient processing of BPMN-q queries; citation_author=A Awad, S Sakr; citation_volume=63; citation_publication_date=2012; citation_pages=867-881; citation_doi=10.1016/j.compind.2012.06.002; citation_id=CR2
Awad A, Weidlich M, Weske M (2009) Specification, verification and explanation of violation for data aware compliance rules. In: Service-Oriented Computing, 7th International Joint Conference, ICSOC-ServiceWave 2009, Stockholm, Sweden, November 24–27, 2009. Proceedings, pp 500–515.
https://doi.org/10.1007/978-3-642-10383-4_37
citation_journal_title=J Vis Lang Comput; citation_title=Visually specifying compliance rules and explaining their violations for business processes; citation_author=A Awad, M Weidlich, M Weske; citation_volume=22; citation_publication_date=2011; citation_pages=30-55; citation_doi=10.1016/j.jvlc.2010.11.002; citation_id=CR4
Belardinelli F, Lomuscio A, Patrizi F (2012) Verification of GSM-based artifact-centric systems through finite abstraction. In: Service-oriented computing—10th international conference, ICSOC 2012, Shanghai, China, November 12–15, 2012. Proceedings, pp 17–31.
https://doi.org/10.1007/978-3-642-34321-6_2
Best E, Devillers RR, Hall JG (1992) The box calculus: a new causal algebra with multi-label communication. In: Advances in Petri Nets 1992, The DEMON Project. Springer, Berlin, pp 21–69.
https://doi.org/10.1007/3-540-55610-9_167
citation_journal_title=Expert Syst Appl; citation_title=Conformance checking and diagnosis for declarative business process models in data-aware scenarios; citation_author=D Borrego, I Barba; citation_volume=41; citation_issue=11; citation_publication_date=2014; citation_pages=5340-5352; citation_doi=10.1016/j.eswa.2014.03.010; citation_id=CR7
citation_journal_title=Data Knowl Eng; citation_title=Diagnosing correctness of semantic workflow models; citation_author=D Borrego, R Eshuis, MTG López, RM Gasca; citation_volume=87; citation_publication_date=2013; citation_pages=167-184; citation_doi=10.1016/j.datak.2013.04.008; citation_id=CR8
citation_journal_title=Expert Syst Appl; citation_title=Conformance checking based on multi-perspective declarative process models; citation_author=A Burattin, FM Maggi, A Sperduti; citation_volume=65; citation_publication_date=2016; citation_pages=194-211; citation_doi=10.1016/j.eswa.2016.08.040; citation_id=CR9
Combi C, Oliboni B, Weske M, Zerbato F (2018) Conceptual modeling of processes and data: connecting different perspectives. In: Conceptual modeling—37th International Conference, ER 2018, Xi’an, China, October 22–25, 2018, Proceedings, pp 236–250.
https://doi.org/10.1007/978-3-030-00847-5_18
citation_journal_title=MIS Q; citation_title=Perceived usefulness, perceived ease of use, and user acceptance of information technology; citation_author=FD Davis; citation_volume=13; citation_issue=3; citation_publication_date=1989; citation_pages=319-340; citation_doi=10.2307/249008; citation_id=CR11
citation_journal_title=J Data Semant; citation_title=Knowledge-intensive processes: characteristics, requirements and analysis of contemporary approaches; citation_author=C Ciccio, A Marrella, A Russo; citation_volume=4; citation_issue=1; citation_publication_date=2015; citation_pages=29-57; citation_doi=10.1007/s13740-014-0038-4; citation_id=CR12
citation_journal_title=Inf Softw Technol; citation_title=Semantics and analysis of business process models in BPMN; citation_author=RM Dijkman, M Dumas, C Ouyang; citation_volume=50; citation_issue=12; citation_publication_date=2008; citation_pages=1281-1294; citation_doi=10.1016/j.infsof.2008.02.006; citation_id=CR13
Esparza J (1996) Decidability and complexity of petri net problems—an introduction. In: Lectures on Petri Nets I: Basic Models, Advances in Petri Nets, the volumes are based on the Advanced Course on Petri Nets, held in Dagstuhl, September 1996, pp 374–428.
https://doi.org/10.1007/3-540-65306-6_20
Fdhila W, Gall M, Rinderle-Ma S, Mangler J, Indiono C (2016) Classification and formalization of instance-spanning constraints in process-driven applications. In: Business process management—4th international conference, BPM 2016, Rio de Janeiro, Brazil, September 18–22, 2016. Proceedings, pp. 348–364.
https://doi.org/10.1007/978-3-319-45348-4_20
Gonzalez P, Griesmayer A, Lomuscio A (2012) Verifying GSM-based business artifacts. In: 2012 IEEE 19th international conference on web services, Honolulu, HI, USA, June 24–29, 2012, pp. 25–32.
https://doi.org/10.1109/ICWS.2012.31
Haarmann S, Batoulis K, Weske M (2018) Compliance checking for decision-aware process models. In: Business process management workshops—BPM 2018 international workshops, Sydney, NSW, Australia, September 9–14, 2018, Revised Papers, pp 494–506.
https://doi.org/10.1007/978-3-030-11641-5_39
Haarmann S, Batoulis K, Weske M (2019) Compliance checking for decision-aware process models. In: Business process management workshops. Springer, pp 494–506.
https://doi.org/10.1007/978-3-030-11641-5_39
Haarmann S, Podlesny N, Hewelt M, Meyer A, Weske M (2015) Production case management: a prototypical process engine to execute flexible business processes. In: BPM (Demos), pp 110–114
Hashmi M, Governatori G, Lam HP, Wynn MT (2018) Are we done with business process compliance: state of the art and challenges ahead. Knowl Inform Syst 1–55
citation_journal_title=Trans Petri Nets Other Model Concurr; citation_title=Business process modeling using petri nets; citation_author=KM Hee, N Sidorova, JMEM Werf; citation_volume=7; citation_publication_date=2013; citation_pages=116-161; citation_id=CR21
Hewelt M, Weske M (2016) A hybrid approach for flexible case modeling and execution. In: Lecture notes in business information processing. Springer, Berlin, pp 38–54.
https://doi.org/10.1007/978-3-319-45468-9_3
Hewelt M, Wolff F, Mandal S, Pufahl L, Weske M (2018) Towards a methodology for case model elicitation. In: Enterprise, business-process and information systems modeling. Springer, pp 181–195
Hildebrandt TT, Mukkamala RR (2010) Declarative event-based workflow as distributed dynamic condition response graphs. In: Proceedings third workshop on programming language approaches to concurrency and communication-cEntric Software, PLACES 2010, Paphos, Cyprus, 21st March 2010, pp 59–73.
https://doi.org/10.4204/EPTCS.69.5
citation_journal_title=Commun ACM; citation_title=Communicating sequential processes; citation_author=CAR Hoare; citation_volume=21; citation_issue=8; citation_publication_date=1978; citation_pages=666-677; citation_doi=10.1145/359576.359585; citation_id=CR25
Holfter A, Haarmann S, Pufahl L, Weske M (2019) Checking compliance in data-driven case management. In: Business process management workshops—BPM 2019 international workshops, Vienna, Austria, September 1–6, 2019, Revised Selected Papers, pp 400–411.
https://doi.org/10.1007/978-3-030-37453-2_33
Hull R, Damaggio E, Fournier F, Gupta M, III FFTH, Hobson S, Linehan MH, Maradugu S, Nigam A, Sukaviriya P, Vaculín R (2010) Introducing the guard-stage-milestone approach for specifying business entity lifecycles. In: Web services and formal methods—7th international workshop, WS-FM 2010, Hoboken, NJ, USA, September 16–17, 2010. Revised Selected Papers, pp 1–24.
https://doi.org/10.1007/978-3-642-19589-1_1
citation_journal_title=Commun ACM; citation_title=Frameworks = (components + patterns); citation_author=RE Johnson; citation_volume=40; citation_issue=10; citation_publication_date=1997; citation_pages=39-42; citation_doi=10.1145/262793.262799; citation_id=CR28
Knuplesch D, Ly LT, Rinderle-Ma S, Pfeifer H, Dadam P (2010) On enabling data-aware compliance checking of business process models. In: Conceptual modeling—ER 2010, 29th international conference on conceptual modeling, Vancouver, BC, Canada, November 1–4, 2010. Proceedings, pp 332–346.
https://doi.org/10.1007/978-3-642-16373-9_24
Knuplesch D, Reichert M, Ly LT, Kumar A, Rinderle-Ma S (2013) Visual modeling of business process compliance rules with the support of multiple perspectives. In: International conference on conceptual modeling. Springer, pp 106–120
citation_title=Behavioural models–from modelling finite automata to analysing business processes; citation_publication_date=2016; citation_id=CR31; citation_author=M Kunze; citation_author=M Weske; citation_publisher=Springer
citation_journal_title=J Softw Maint; citation_title=Philharmonicflows: towards a framework for object-aware process management; citation_author=V Künzle, M Reichert; citation_volume=23; citation_issue=4; citation_publication_date=2011; citation_pages=205-244; citation_doi=10.1002/smr.524; citation_id=CR32
Leitner M, Mangler J, Rinderle-Ma S (2012) Definition and enactment of instance-spanning process constraints. In: Web information systems engineering—WISE 2012—13th international conference, Paphos, Cyprus, November 28–30, 2012. Proceedings, pp 652–658.
https://doi.org/10.1007/978-3-642-35063-4_49
citation_journal_title=Proc VLDB Endow; citation_title=VERIFAS: a practical verifier for artifact systems; citation_author=Y Li, A Deutsch, V Vianu; citation_volume=11; citation_issue=3; citation_publication_date=2017; citation_pages=283-296; citation_doi=10.14778/3157794.3157798; citation_id=CR34
Ly LT, Knuplesch D, Rinderle-Ma S, Göser K, Pfeifer H, Reichert M, Dadam P (2010) Seaflows toolset—compliance verification made easy for process-aware information systems. In: Information systems evolution—CAiSE Forum 2010, Hammamet, Tunisia, June 7–9, 2010, Selected Extended Papers, pp 76–91.
https://doi.org/10.1007/978-3-642-17722-4_6
Ly LT, Rinderle-Ma S, Knuplesch D, Dadam P (2011) Monitoring business process compliance using compliance rule graphs. In: On the move to meaningful internet systems: OTM 2011—confederated international conferences: CoopIS, DOA-SVI, and ODBASE 2011, Hersonissos, Crete, Greece, October 17–21, 2011, Proceedings, Part I, pp 82–99.
https://doi.org/10.1007/978-3-642-25109-2_7
citation_title=Modeling and enacting complex data dependencies in business processes; citation_inbook_title=Business process management; citation_publication_date=2013; citation_pages=171-186; citation_id=CR37; citation_author=A Meyer; citation_author=L Pufahl; citation_author=D Fahland; citation_author=M Weske; citation_publisher=Springer
citation_title=Communicating and mobile systems: the pi-calculus; citation_publication_date=1999; citation_id=CR38; citation_author=R Milner; citation_publisher=Cambridge University Press
Object Management Group (OMG) (2014) Business Process Model and Notation (BPMN). OMG Document Number formal/13-12-09. Version 2.0.2
(2017) Object Management Group (OMG): Case Management Model and Notation (CMMN). OMG Document Number formal/16-12-01.
https://www.omg.org/spec/CMMN/About-CMMN/
. Version 1.1
citation_journal_title=Knowl Inf Syst; citation_title=Verifying the manipulation of data objects according to business process and data models; citation_author=JM Pérez-Álvarez, MTG López, R Eshuis, M Montali, RM Gasca; citation_volume=62; citation_issue=7; citation_publication_date=2020; citation_pages=2653-2683; citation_doi=10.1007/s10115-019-01431-5; citation_id=CR41
Pesic M, Schonenberg H, van der Aalst W (2007) DECLARE: full support for loosely-structured processes. In: Proceedings of the 11th IEEE international enterprise distributed object computing conference, p 287. IEEE Computer Society, Washington, DC, USA.
http://portal.acm.org/citation.cfm?id=1317532.1318056
Pommereau F (2009) Algebras of coloured Petri nets and their applications to modelling and verification. Habilitation à diriger des recherches, Université de Paris-Est/Créteil.
https://hal.archives-ouvertes.fr/tel-02309973
citation_journal_title=Computing; citation_title=Batch activity: enhancing business process modeling and enactment with batch processing; citation_author=L Pufahl, M Weske; citation_volume=101; citation_issue=12; citation_publication_date=2019; citation_pages=1909-1933; citation_doi=10.1007/s00607-019-00717-4; citation_id=CR44
Reisig W (2011) Petri Nets. Springer, Berlin.
https://www.ebook.de/de/product/19303359/wolfgang_reisig_petri_nets.html
Sackmann S, Kuehnel S, Seyffarth T (2018) Using business process compliance approaches for compliance management with regard to digitization: evidence from a systematic literature review. In: International conference on business process management. Springer, pp 409–425
Santoro FM, Slaats T, Hildebrandt TT, Baião FA (2019) Dcr-kipn a hybrid modeling approach for knowledge-intensive processes. In: Conceptual modeling—38th international conference, ER 2019, Salvador, Brazil, November 4–7, 2019, Proceedings, pp 153–161.
https://doi.org/10.1007/978-3-030-33223-5_13
citation_title=Lola a low level analyser; citation_inbook_title=Application and theory of Petri Nets 2000; citation_publication_date=2000; citation_pages=465-474; citation_id=CR48; citation_author=K Schmidt; citation_publisher=Springer
Semmelrodt F, Knuplesch D, Reichert M (2014) Modeling the resource perspective of business process compliance rules with the extended compliance rule graph. In: Enterprise, business-process and information systems modeling—15th international conference, BPMDS 2014, 19th international conference, EMMSAD 2014, Held at CAiSE 2014, Thessaloniki, Greece, June 16–17, 2014. Proceedings, pp 48–63.
https://doi.org/10.1007/978-3-662-43745-2_4
Slaats T, Mukkamala RR, Hildebrandt T, Marquard M (2013) Exformatics declarative case management workflows as DCR graphs. In: Business process management. Springer, pp 339–354
Solomakhin D, Montali M, Tessaris S, De Masellis R (2013) Verification of artifact-centric systems: decidability and modeling issues. In: Service-oriented computing—11th international conference, ICSOC 2013, Berlin, Germany, December 2–5, 2013, Proceedings, pp 252–266.
https://doi.org/10.1007/978-3-642-45005-1_18
Sporleder T (2016) Fragment-based case management: specification and translational semantics. Master’s thesis, Hasso Plattner Institute, University of Potsdam, Germany
Swenson KD (2012) Case management: contrasting production vs. adaptive. How knowledge workers get things done, pp 109–116
Tosatto SC, Governatori G, van Beest N (2019) Checking regulatory compliance: will we live to see it? In: Business process management—17th international conference, BPM 2019, Vienna, Austria, September 1–6, 2019, Proceedings, pp 119–138.
https://doi.org/10.1007/978-3-030-26619-6_10
European Commission for Translation, D.G.: Translation tools and workflow
Weske M (2019) Business process management—concepts, languages, architectures, 3rd edn. Springer, Berlin.
https://doi.org/10.1007/978-3-662-59432-2
