基于标注的业务过程合规性验证方法  

Annotation-based compliance checking for business processes

作　　者：龚平[1] 冯在文[2] 

机构地区：[1]福建师范大学数学与计算机科学学院,福州350007 [2]软件工程国家重点实验室(武汉大学),武汉430072

出　　处：《计算机应用》2014年第7期2115-2123,共9页journal of Computer Applications

基　　金：国家自然科学基金资助项目(61100017);福建省自然基金资助项目(2012J05112)

摘　　要：当前,企业的业务活动受到越来越多的来自政府法律法规、行业标准及自身内控制度的规范约束。如何确保支撑企业业务活动的过程感知系统是合规的已成为信息系统(IS)研究领域的热点问题。确保过程模型的合规性是实现过程感知系统的合规性的重要前提。针对过程设计阶段过程模型的合规性,扩展前期关于语义标注过程模型的可执行性分析的工作,提出了基于标注的合规性验证方法。方法包括:合规性规则模式的标注表达式生成和基于合规性标注的过程模型的可执行性分析方法。合规性标注表达式描述了规则所关联的活动及其相应的合规性约束,对合规性验证的调试及运行时合规性检测评估能起到有效的支持作用;合规性标注的过程模型的可执行分析方法是利用满足性求解器对合规性信息标注后的过程模型是否可执行进行求解。通过银行开户的流程案例,证明了上述方法的有效性。At present, enterprise＇s business are more and more circumscribed by the laws, regulations, standards and internal control system. How to enforce enterprises process-aware information system compliant has already become an important issue in Information System （IS） research. Ensure compliance of the process model is the important premise to realize process perception system compliance. In view of the compliance of process model at the process design stage, by extending previous work on executabilihy checking for the semantically annotated process model, an annotation-based compliance checking was proposed, which mainly included techniques for generating annotation expressions for the compliance rule patterns and analyzing compliance annotated process model. Compliance annotation expressions specify the involved activities and constraints, which are the essential information for compliance debugging and run-time detection and evaluation. By using Satisfiability （SAT） solver, the compliance annotated process model can be efficiently checked and debugged. The proposed method is validated through the case of opening account in the bank setting.

关 键 词：业务过程管理 合规性验证 标注表达式 过程模型 满足性求解 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]