On-the-Fly Auditing of Business Processes
- 376 Downloads
Information systems supporting business processes are usually very complex. If we have to ensure that certain business rules are enforced in a business process, it is often easier to design a separate system, called a monitor, that collects the events of the business processes and verifies whether the rules are satisfied or not. This requires a business rule language (BRL) that allows to verify business rules over finite histories. We introduce such a BRL and show that it can express many common types of business rules. We introduce two interesting properties of BRL formulas: the future stability and the past stability. The monitor should be able to verify the business rules over the complete history, which is increasing over time. Therefore we consider abstractions of the history. Actually we generate from a set of business rules a labeled transition system (with countable state space) that can be executed by the monitor if each relevant event of the business process triggers a step in the labeled transition system. As long as the monitor is able to execute a step, the business rules are not violated. We show that for a sublanguage of BRL, we can transform the labeled transition system into a colored Petri net such that verification becomes independent of the history length.
KeywordsBusiness Process Label Transition System Business Rule Variable Binding Authorization Rule
Unable to display preview. Download preview PDF.
- 1.Romney, M.B., Steinbart, P.J.: Accounting Information Systems. 11 edn. Pearson International Editions (2009)Google Scholar
- 3.McCarthy, W.E.: The REA accounting model: A generalized framework for accounting systems in a shared data environment. The Accounting Review 57(3), 554–578 (1982)Google Scholar
- 4.Berg, D.: Turning Sarbanes-Oxley projects into strategic business processes. Sarbanes-Oxley Compliance Journal (2004)Google Scholar
- 5.IFRS Foundation: The International Accounting Standards Board Web Site (2010), http://www.ifrs.org/Home.htm
- 9.van der Aalst, W.M.P., van Hee, K.M.: Workflow Management: Models, Methods and Systems. MIT Press, Cambridge (2002)Google Scholar
- 14.Ross, S.: Introduction to Probability Models. Academic Press, London (2007)Google Scholar