Skip to main content

Maintaining Compliance in Customizable Process Models

  • Conference paper
On the Move to Meaningful Internet Systems: OTM 2009 (OTM 2009)

Part of the book series: Lecture Notes in Computer Science ((LNISA,volume 5870))

Abstract

Compliance of business processes has gained importance during the last years. The growing number of internal and external regulations that companies need to obey has led to this state. This paper presents a practical concept of ensuring compliance during design time of customizable business processes.

We introduce the concept of a business process template that implicitly contains compliance constraints as well as points of variability. We further present an algorithm that ensures that these constraints cannot be violated. We also show how these algorithms can be used to check whether a customization of this process template is valid regarding these compliance constraints. So the designer of a business process, in contrast to the template designer, does not have to worry about compliance of the eventual process.

In a final step we show how these general concepts can be applied to WS-BPEL.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 84.99
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 109.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. Goedertier, S., Vanthienen, J.: Designing Compliant Business Processes from Obligations and Permissions. In: Eder, J., Dustdar, S. (eds.) BPD 2006. LNCS, vol. 4103, pp. 5–14. Springer, Heidelberg (2006)

    Chapter  Google Scholar 

  2. Governatori, G., Milosevic, Z.: A Formal Analysis of a Business Contract Language. Int. J. Cooperative Inf. Syst. 15(4), 659–685 (2006)

    Article  Google Scholar 

  3. Kharbili, M.E., Stein, S., Markovic, I., Pulvermüller, E.: Towards a Framework for Semantic Business Process Compliance Management. In: GRCIS 2008 (June 2008)

    Google Scholar 

  4. Kopp, O., Mietzner, R., Leymann, F.: Abstract Syntax of WS-BPEL 2.0. Technical report, University of Stuttgart, IAAS, Germany (2008)

    Google Scholar 

  5. Lazovik, A., Ludwig, H.: Managing process customizability and customization: Model, language and process. In: Benatallah, B., Casati, F., Georgakopoulos, D., Bartolini, C., Sadiq, W., Godart, C. (eds.) WISE 2007. LNCS, vol. 4831, pp. 373–384. Springer, Heidelberg (2007)

    Chapter  Google Scholar 

  6. Ly, L.T., Rinderle, S., Dadam, P.: Integration and Verification of Semantic Constraints in Adaptive Process Management Systems. Data Knowl. Eng. 64(1), 3–23 (2008)

    Article  Google Scholar 

  7. Mietzner, R.: Using Variability Descriptors to Describe Customizable SaaS Application Templates. Technical Report Computer Science 2008/01, University of Stuttgart, Faculty of Computer Science, Electrical Engineering, and Information Technology, Germany, University of Stuttgart, Institute of Architecture of Application Systems (January 2008)

    Google Scholar 

  8. Mietzner, R., Leymann, F.: Generation of BPEL Customization Processes for SaaS Applications from Variability Descriptors. In: IEEE SCC, pp. 359–366. IEEE Computer Society Press, Los Alamitos (2008)

    Google Scholar 

  9. OASIS. Web Services Business Process Execution Language Version 2.0 - Oasis Standard (2007)

    Google Scholar 

  10. Reichert, M., Rinderle-Ma, S., Dadam, P.: Flexibility in Process-Aware Information Systems. T. Petri Nets and Other Models of Concurrency 2, 115–135 (2009)

    Article  Google Scholar 

  11. Rosemann, M., van der Aalst, W.M.P.: A Configurable Reference Modelling Language. Inf. Syst. 32(1), 1–23 (2007)

    Article  Google Scholar 

  12. Sadiq, W., Governatori, G., Namiri, K.: Modeling control objectives for business process compliance. In: Alonso, G., Dadam, P., Rosemann, M. (eds.) BPM 2007. LNCS, vol. 4714, pp. 149–164. Springer, Heidelberg (2007)

    Chapter  Google Scholar 

  13. Sun, C.-A., Aiello, M.: Towards Variable Service Compositions Using VxBPEL. In: Mei, H. (ed.) ICSR 2008. LNCS, vol. 5030, pp. 257–261. Springer, Heidelberg (2008)

    Chapter  Google Scholar 

  14. Turner, M., Budgen, D., Brereton, P.: Turning Software Into a Service. Computer 36(10), 38–44 (2003)

    Article  Google Scholar 

  15. United States Code. Sarbanes-Oxley Act of 2002, PL 107-204, 116 Stat 745. Codified in Sections 11, 15, 18, 28, and 29 USC (July 2002)

    Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2009 Springer-Verlag Berlin Heidelberg

About this paper

Cite this paper

Schleicher, D., Anstett, T., Leymann, F., Mietzner, R. (2009). Maintaining Compliance in Customizable Process Models. In: Meersman, R., Dillon, T., Herrero, P. (eds) On the Move to Meaningful Internet Systems: OTM 2009. OTM 2009. Lecture Notes in Computer Science, vol 5870. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-05148-7_7

Download citation

  • DOI: https://doi.org/10.1007/978-3-642-05148-7_7

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-642-05147-0

  • Online ISBN: 978-3-642-05148-7

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics