Introducing a Mashup-Based Approach for Design-Time Compliance Checking in Business Processes

Business process compliance tries to ensure the business processes used in an organization are designed and executed according to the rules that govern the company. However, the nature of rules (expressed in natural language) and the large amount of elements that can be involved in them make their materialization and automated checking quite difficult. That is why the existing support for compliance checking is generally restricted to specific kinds of rules (e.g. rules affecting the control flow of the process). In this paper, we introduce compliance mashups, and show how a mashup-based approach can help solve the problem of rule specification and checking at design time. Some advantages of such an approach are that: (i) any kind of rule can be specified, which implies that each user can specify a rule according to his/her interpretation of the rule; (ii) building the compliance mashup is transparent to the formalism(s) used to implement it, so different techniques can be used together; and (iv) mashup components or parts of them can be re-used. As an example we use this approach to build mashups to specify and check rules related to human resource management in business processes at design time.

[1]  Agnes Koschmider,et al.  A Quality Model for Mashups , 2011, ICWE.

[2]  Fabio Casati,et al.  Understanding Mashup Development , 2008, IEEE Internet Computing.

[3]  Jian Yu,et al.  Pattern Based Property Specification and Verification for Service Composition , 2006, WISE.

[4]  Wil M. P. van der Aalst,et al.  Conformance checking of processes based on monitoring real behavior , 2008, Inf. Syst..

[5]  Aditya K. Ghose,et al.  Auditing Business Process Compliance , 2007, ICSOC.

[6]  Sherif Sakr,et al.  A framework for querying graph-based business process models , 2010, WWW '10.

[7]  Mathias Weske,et al.  Efficient Compliance Checking Using BPMN-Q and Temporal Logic , 2008, BPM.

[8]  Christoph Meinel,et al.  Verification of Business Process Entailment Constraints Using SPIN , 2009, ESSoS.

[9]  Wil M. P. van der Aalst,et al.  The Application of Petri Nets to Workflow Management , 1998, J. Circuits Syst. Comput..

[10]  Esteban Zimányi,et al.  Defining ETL worfklows using BPMN and BPEL , 2009, DOLAP.

[11]  Guido Governatori,et al.  The Journey to Business Process Compliance , 2009, Handbook of Research on Business Process Modeling.

[12]  Marwane El Kharbili,et al.  Business Process Compliance Checking: Current State and Future Challenges , 2008, MobIS.

[13]  Fabio Casati,et al.  On the Design of Compliance Governance Dashboards for Effective Compliance and Audit Management , 2009, ICSOC/ServiceWave Workshops.

[14]  Fabio Casati,et al.  Rapid development of spreadsheet-based web mashups , 2009, WWW '09.

[15]  Ahmed Awad,et al.  Automatic Generation of a Data-Centered View of Business Processes , 2011, CAiSE.

[16]  Ying Liu,et al.  A static compliance-checking framework for business process models , 2007, IBM Syst. J..

[17]  Fabio Casati,et al.  Aiding Compliance Governance in Service-Based Business Processes , 2012 .

[18]  Antonio Ruiz Cortés,et al.  Hints on How to Face Business Process Compliance , 2010 .

[19]  Mark Strembeck,et al.  Modeling process-related RBAC models with extended UML activity models , 2011, Inf. Softw. Technol..

[20]  Mark Strembeck,et al.  Detecting and Resolving Conflicts of Mutual-Exclusion and Binding Constraints in a Business Process Context , 2011, OTM Conferences.

[21]  Mathias Weske,et al.  Business Process Management: Concepts, Languages, Architectures , 2007 .

[22]  Cristina Cabanillas Macías,et al.  Summary of "Defining and Analysing Resource Assignments in Business Processes with RAL" , 2012 .

[23]  Guido Governatori,et al.  Approximate Compliance Checking for Annotated Process Models , 2008 .

[24]  Mathias Weske,et al.  Visually specifying compliance rules and explaining their violations for business processes , 2011, J. Vis. Lang. Comput..

[25]  Carole A. Goble,et al.  Taverna: a tool for building and running workflows of services , 2006, Nucleic Acids Res..

[26]  Luciano Baresi,et al.  Mashups with Mashlight , 2010, ICSOC.

[27]  Boudewijn F. van Dongen,et al.  ProM: The Process Mining Toolkit , 2009, BPM.

[28]  Manuel Resinas,et al.  Exploring Features of a Full-Coverage Integrated Solution for Business Process Compliance , 2011, CAiSE Workshops.