A static compliance-checking framework for business process models

IBM Systems Journal

Volumn 46, Issue 2, 2007, Pages 335-361

  Liu, Ying ^a   Müller, Samuel ^b   Xu, Ke ^c  

^a IBM CHINA RESEARCH LAB   (China)

^b IBM RESEARCH ZURICH   (Switzerland)

^c TSINGHUA UNIVERSITY   (China)

Author keywords

[No Author keywords available]

Indexed keywords

ADMINISTRATIVE DATA PROCESSING; FINITE AUTOMATA; MODEL CHECKING; REGULATORY COMPLIANCE; SPECIFICATION LANGUAGES; TEMPORAL LOGIC; VERIFICATION;

BUSINESS OPERATIONS; BUSINESS PROCESS MANAGEMENT SYSTEMS; BUSINESS PROCESS MODELS;

INDUSTRIAL MANAGEMENT;

EID: 34247861351     PISSN: 00188670     EISSN: None     Source Type: Journal    
DOI: 10.1147/sj.462.0335     Document Type: Article

References (61)

1. F. Leymann and D. Roller, Production Workflow: Concepts and Techniques, Prentice Hall PTR, Upper Saddle River, NJ (2000).
2. M. Havey, Essential Business Process Modeling, O'Reilly & Associates, Sebastopol, CA (2005).
3. Gramm-Leach-Bliley Act of 1999 (GLBA), Public Law 106-102 (113 Statute 1338), United States Senate Committee on Banking, Housing, and Urban Affairs (1999).
4. Sarbanes-Oxley Act of 2002, Public Law 107-204 (116 Statute 745), United States Senate and House of Representatives in Congress (2002).
5. USA Patriot Act of 2001, Public Law 107-56, HR 3162 RDS, United States Senate and House of Representatives in Congress (2001).
6. International Convergence of Capital Measurement and Capital Standards (Basel II), Basel Committee on Banking Supervision (2004), http://www.federalreserve.gov/boarddocs/press/bcreg/2004/20040626/ attachment.pdf.
7. The Money Laundering Regulations, Statutory Instrument 2003 No. 3075, Act of Parliament, http://www.opsi.gov.uk/si/si2003/20033075.htm.
8. Law of the People's Republic of China on the People's Bank of China, the 8th National People's Congress (2003), http://www.pbc. gov.cn/english//detail.asp?col=6800&ID=22.
9. Control Objectives for Information and Related Technology (COBIT), Version 4.0, IT Governance Institute (2005), http://www.itgi.org.
10. IT Infrastructure Library (ITIL), Office of Government Commerce (2006), http://www.itil.co.uk.
11. C. Abrams, J. von Känel, S. Müller, B. Pfitzmann, and S. Ruschka-Taylor, "Optimized Enterprise Risk Management," IBM Systems Journal 46, No. 2, 219-234 (2007, this issue).
12. C. Giblin, A. Y. Liu, S. Müller, B. Pfitzmann, and X. Zhou, "Regulations Expressed as Logical Models (REALM)," Proceedings of the 18th Annual Conference on Legal Knowledge and Information Systems, Brussels, Belgium (2005), pp. 37-48.
13. Rules for Anti-Money Laundering by Financial Institutions, The People's Bank of China (2003), http://www.pbc.gov.cn/english/ detail.asp?col=6800&ID=31.
14. T. Andrews, F. Cubera, H. Dholakia, Y. Goland, J. Klein, F. Leymann, K. Liu, et al., Business Process Execution Language for Web Services, Version 1.1, BEA Systems, International Business Machines Corporation, Microsoft Corporation, SAP AG, Siebel Systems (2003), ftp:// www6.software.ibm.com/software/developer/library/ ws-bpel.pdf.
15. K. Xu, Y. Liu, and C. Wu, "BPSL Modeler-Visual Notation Language for Intuitive Business Property Reasoning," Proceedings of the 5th International Workshop on Graph Transformation and Visual Modeling Techniques, Vienna, Austria (2006), pp. 205-214.
16. R. Milner, The Polyadic Pi-Calculus: A Tutorial, Technical Report CS-LFCS-91-180, School of Informatics, Laboratory for Foundations of Computer Science, University of Edinburgh, Edinburgh, Scotland EH8 9YL (1991).
17. A. Pnueli, "The Temporal Logic of Programs," Proceedings of the 18th IEEE Symposium on Foundations of Computer Science, Providence, RI (1977), pp. 46-57.
18. E. M. Clarke, Jr., O. Grumberg, and D. A. Peled, Model Checking, MIT Press, Cambridge, MA (2000).
19. F. Leymann, Web Services Flow Language (WSFL 1.0), IBM Corporation (2001), http://xml.coverpages.org/WSFL-Guide-200110.pdf.
20. S. Thatte, XLANG: Web Services for Business Process Design, Microsoft Corporation (2001).
21. WebSphere Business Integration Modeler, IBM Corporation (2006), http:// www-306.ibm.com/software/integration/wbimodeler/library/.
22. K. Mantell, From UML to BPEL, IBM Corporation (2005), http:// www-128.ibm.com/developerworks/webservices/library/ws-uml2bpel/.
23. M. B. Dwyer, G. S. Avrunin, and J. C. Corbett, "Property Specification Patterns for Finite-State Verification," Proceedings of the 2nd Workshop on Formal Methods in Software Practice, Clearwater Beach, FL (1998), pp. 7-15.
24. M. Y. Vardi, "Branching vs. Linear Time: Final Showdown," Proceedings of the 7th International Conference on Tools and Algorithms for the Construction and Analysis of Systems, Genova, Italy (2001), pp. 1-22.
25. K. Xu, Y. Liu, and G. G. Pu, Formalization, Verification and Restructuring of BPEL Models with Pi Calculus and Model Checking, Research Report, RC-23962, IBM Thomas J. Watson Research Center, Yorktown Heights, NY 10598 (2006).
26. B. Jacobs and F. Piessens, "A Pi-Calculus Semantics of Java: The Full Definition," Technical Report CW 355, Department of Computer Science, Katholieke Universiteit Leuven, Leuven B-3001, Belgium (2003).
27. G.-L. Ferrari, S. Gnesi, U. Montanari, and M. Pistore, "A Model-Checking Verification Environment for Mobile Processes," ACM Transactions on Software Engineering and Methodology 12, No. 4, 440-473 (2003).
28. M. Pistore, History Dependent Automata, Ph.D. thesis, University of Pisa, Pisa, Italy (1999).
29. D. Sangiorgi and D. Walker, The Pi Calculus: A Theory of Mobile Processes, Cambridge University Press, New York, NY (2001).
30. A. Cimatti, E. M. Clarke, E. Giunchiglia, F. Giunchiglia, M. Pistore, M. Roveri, R. Sebastiani, and A. Tacchella, "NuSMV 2: An OpenSource Tool for Symbolic Model Checking," Proceedings of the 14th International Conference on Computer-Aided Verification, Copenhagen, Denmark (2002), pp. 359-364.
31. I. Beer, S. Ben-David, C. Eisner, D. Geist, L. Gluhovsky, T. Heyman, A. Landver, et al., "RuleBase: Model Checking at IBM," Proceedings of the International Conference on Computer Aided Verification, Haifa, Israel (1997), pp. 480-483.
32. WebSphere Studio Application Developer Integration Edition, IBM Corporation (2006), http://www-306.ibm.com/software/integration/wsadie/ support/.
33. W. M. P. van der Aalst, A. H. M. ter Hofstede, B. Kiepuszewski, and A. P. Barros, "Workflow Patterns," Distributed and Parallel Databases 14, No. 1, pp. 5-51 (2003).
34. K. Xu, Y. Liu, and C. Wu, "Guided Reasoning of Complex E-Business Process with Business Bug Patterns," Proceedings of the IEEE International Conference on e-Business Engineering, Shanghai, China (2006), pp. 195-202.
35. D. Geist, "The PSL/Sugar Specification Language: A Language for All Seasons," Proceedings of The Correct Hardware Design and Verification Methods Conference, L'Aquila, Italy (2003), pp. 21-24.
36. C. H. Yang and D. L. Dill, "Validation with Guided Search of the State Space," Proceedings of the 35th Annual Conference on Design Automation, San Francisco, CA (1998), pp. 559-604.
37. F. van Breugel and M. Koshkina, Models and Verification of BPEL, Technical Report, York University, Toronto, M3J 1P3, Canada (2006), http://www.cse.yorku.ca/~franck/research/drafts/tutorial.pdf.
38. W. M. P. van der Aalst, "Pi Calculus Versus Petri Nets: Let Us Eat 'Humble Pie' Rather Than Further Inflate the 'Pi Hype'," BPTrends 3, No. 5, 1-11 (2005).
39. Issue 42: Need for Formalism, OASIS Web Services Business Process Execution Language (WSBPEL) Technical Committee, http:// www.oasis-open.org/archives/wsbpel/200307/msg00177.html.
40. H. Smith, "Business Process Management - The Third Wave: Business Process Modeling Language (BPML) and Its Pi-Calculus Foundations," Information and Software Technology 45, No. 15, 1065-1069 (2003).
41. V. S. W. Lam and J. Padget, "Formalization of UML Statechart Diagrams in the Pi-Calculus," Proceedings of the 13th Australian Software Engineering Conference, Canberra, Australia (2001), pp. 213-223.
42. V. S. W. Lam and J. Padget, "Analyzing Equivalences of UML Statechart Diagrams by Structural Congruence and Open Bisimulations," Proceedings of the IEEE Symposia on Human Centric Computing Languages and Environments, Auckland, New Zealand (2003), pp. 137-144.
43. Y. Dong and Z. Shensheng, "Using /spl Pi/-Calculus to Formalize UML Activity Diagram for Business Process Modeling," Proceedings of the 10th IEEE International Conference and Workshop on the Engineering of Computer-Based Systems, Huntsville, AL (2003), pp. 47-54.
44. K. Xu, Y. Liu, J. Zhu, and C. Wu, "Pi Calculus Based Bi-transformation of State-Driven Model and Flow-Driven Model," International Journal of Business Process Integration and Management 2 (In Press 2006).
45. F. Puhlmann and M. Weske, "Using the Pi-Calculus for Formalizing Workflow Patterns," Proceedings of the International Conference on Business Process Management, Nancy, France (2005), pp. 153-168.
46. O. Nierstrasz and T. D. Meijler, "Requirements for a Composition Language," Proceedings of the ECOOP'94 Workshop on Models and Languages for Coordination of Parallelism and Distribution, Object-Based Models and Languages for Concurrent Systems, Bologna, Italy (1994), pp. 147-161.
47. M. Lumpe, F. Achermann, and O. Nierstrasz, "A Formal Language for Composition," in Foundations of Component-Based Systems, G. T. Leavens and M. Sitaraman, Editors, Cambridge University Press, New York (2000), pp. 69-90.
48. C. Pahl, "A Formal Composition and Interaction Model for a Web Component Platform," Electronic Notes in Theoretical Computer Science 66, No. 4, 1-15 (2002).
49. R. Alur, T. A. Henzinger, and O. Kupferman, "Alternating-Time Temporal Logic," Proceedings of the 38th Annual IEEE Symposium on Foundations of Computer Science, Miami Beach, FL (1998), pp. 100-109.
50. X. Fu, T. Bultan, and J. Su, "WSAT: A Tool for Formal Analysis of Web Services," Proceedings of the 2004 ACM SIGSOFT International Symposium on Software Testing and Analysis, Boston, MA (2004), pp. 510-514.
51. G. J. Holzmann, The SPIN Model Checker: Primer and Reference Manual, Addison-Wesley Professional, Boston, MA (2003).
52. M. Kovács and L. Gönczy, "Simulation and Formal Analysis of Workflow Models," Proceedings of the 5th International Workshop on Graph Transformation and Visual Modeling Techniques, Vienna, Austria (2006), pp. 215-224.
53. H. Foster, S. Uchitel, J. Magee, and J. Kramer, "LTSA-WS: A Tool for Model-Based Verification of Web Service Compositions and Choreography," Proceedings of the 28th International Conference on Software Engineering, Shanghai, China (2006), pp. 771-774.
54. C. Ouyang, H. M. W. Verbeek, W. M. P. van der Aalst, S. Breutel, M. Dumas, and A. H. M. ter Hofstede, "WofBPEL: A Tool for Automated Analysis of BPEL Processes," Proceedings of the 3rd International Conference on Service Oriented Computing, Amsterdam, The Netherlands (2005), pp. 484-489.
55. N. Lohmann, P. Massuthe, C. Stahl, and D. Weinberg, "Analyzing Interacting BPEL Processes," Proceedings of the 4th International Conference on Business Process Management, Vienna, Austria (2006), pp. 17-32.
56. J. Koehler, G. Tirenni, and S. Kumaran, "From Business Process Model to Consistent Implementation: A Case for Formal Verification Methods," Proceedings of the 6th IEEE International Enterprise Distributed Object Computing Conference, Lausanne, Switzerland (2002), pp. 96-106.
57. H. M. W. Verbeek, B. F. van Dongen, J. Mendling, and W. M. P. van der Aalst, "Interoperability in the ProM Framework," Proceedings of the CAiSE '06 Workshops and Doctoral Consortium, Luxembourg, Luxembourg (2006), pp. 619-630.
58. A. Del Bimbo, L. Rella, and E. Vicario, "Visual Specification of Branching Time Temporal Logic," Proceedings of the 11th IEEE International Symposium on Visual Languages, Darmstadt, Germany (1995), pp. 61-68.
59. M. Brambilla, A. Deutsch, L. Sui, and V. Vianu, "The Role of Visual Tools in a Web Application Design and Verification Framework: A Visual Notation for LTL Formulae," Proceedings of the 5th International Conference on Web Engineering, Sydney, Australia (2005), pp. 557-568.
60. A. C. Rao, A. Cau, and H. Zedan, "Visualization of Interval Temporal Logic," Proceedings of the 5th Joint Conference on Information Sciences, Kaohsiung, Taiwan, ROC (2000), pp. 687-690.
61. W. M. P. van der Aalst and M. Pesic, "DecSerFlow: Towards a Truly Declarative Service Flow Language," Proceedings of the 3rd International Workshop on Web Services and Formal Methods, Invited Talks, Vienna, Austria (2006), pp. 1-23.