首页 > 最新文献

Enterp. Model. Inf. Syst. Archit. Int. J. Concept. Model.最新文献

英文 中文
Catchword: Blockchains and Enterprise Modeling 关键词:区块链和企业建模
Pub Date : 2020-12-12 DOI: 10.18417/EMISA.15.16
Hans-Georg Fill, P. Fettke, S. Rinderle-Ma
In this catchword article we describe the current technological opportunities that are available through blockchain technologies and outline how the field of enterprise modeling can contribute to these developments as well as benefit itself from them. For this purpose, we discuss the technical foundations of blockchains and derive a framework for relating both sides. Finally, it is reported about recent approaches that already engage in these opportunities.
在这篇热门文章中,我们描述了当前通过区块链技术提供的技术机会,并概述了企业建模领域如何为这些发展做出贡献,并从中受益。为此,我们讨论了区块链的技术基础,并推导了一个将双方联系起来的框架。最后,报告了最近已经参与这些机会的方法。
{"title":"Catchword: Blockchains and Enterprise Modeling","authors":"Hans-Georg Fill, P. Fettke, S. Rinderle-Ma","doi":"10.18417/EMISA.15.16","DOIUrl":"https://doi.org/10.18417/EMISA.15.16","url":null,"abstract":"In this catchword article we describe the current technological opportunities that are available through blockchain technologies and outline how the field of enterprise modeling can contribute to these developments as well as benefit itself from them. For this purpose, we discuss the technical foundations of blockchains and derive a framework for relating both sides. Finally, it is reported about recent approaches that already engage in these opportunities.","PeriodicalId":186216,"journal":{"name":"Enterp. Model. Inf. Syst. Archit. Int. J. Concept. Model.","volume":"5 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-12-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126905470","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 4
Balancing Patient Care and Paperwork Automatic Task Enactment and Comprehensive Documentation in Treatment Processes 平衡病人护理和文书工作,自动任务制定和综合文件治疗过程
Pub Date : 2020-12-08 DOI: 10.18417/EMISA.15.11
Florian Stertz, Juergen Mangler, S. Rinderle-Ma
Effort and quality of care documentation are among the most pressing challenges in the nursing domain due to demographic development and compliance demands. Hence approaches for decreasing the effort of documentation while increasing its quality are required. This work introduces the idea of automatic task completion and documentation which is achieved through a process-aware solution where physical objects utilized during care tasks are equipped with NFC tags. Nine use cases from the care domain are identified with domain experts and implemented through a proof-of-concept prototype. The time reduction of employing this technology is assessed by domain experts within the typical routines in a nursing home. The interviews indicate an average decrease in documentation time per shift of more than 60%. Inherently also documentation quality is increased as automatic documentation prevents forgetting to document certain steps or other errors. On top, this work fosters two ways for comprehensive documentation, i.e., log-based documentation for analysis and monitoring tasks and paper-based documentation as typically expected by nurses. The logs are automatically created and stored by the underlying process engine. It is shown how paper-based documentation can be automatically created based on process logs. Overall, this work provides the basis for automatic, comprehensive, and continuous documentation of care tasks based on NFC technology.
由于人口发展和依从性要求,护理文件的努力和质量是护理领域最紧迫的挑战之一。因此,减少文档工作的同时提高文档质量的方法是必需的。这项工作介绍了自动任务完成和文档的概念,这是通过一个过程感知的解决方案来实现的,在护理任务中使用的物理对象配备了NFC标签。来自护理领域的9个用例由领域专家确定,并通过概念验证原型实现。领域专家在养老院的典型例程中评估了使用该技术的时间减少。访谈表明,每班的文件时间平均减少了60%以上。由于自动文档可以防止忘记记录某些步骤或其他错误,因此文档质量也得到了提高。最重要的是,这项工作促进了两种全面记录的方式,即用于分析和监测任务的基于日志的记录,以及护士通常期望的基于纸张的记录。日志由底层流程引擎自动创建和存储。它展示了如何基于流程日志自动创建基于纸张的文档。总的来说,这项工作为基于NFC技术的自动、全面和连续的护理任务记录提供了基础。
{"title":"Balancing Patient Care and Paperwork Automatic Task Enactment and Comprehensive Documentation in Treatment Processes","authors":"Florian Stertz, Juergen Mangler, S. Rinderle-Ma","doi":"10.18417/EMISA.15.11","DOIUrl":"https://doi.org/10.18417/EMISA.15.11","url":null,"abstract":"Effort and quality of care documentation are among the most pressing challenges in the nursing domain due to demographic development and compliance demands. Hence approaches for decreasing the effort of documentation while increasing its quality are required. This work introduces the idea of automatic task completion and documentation which is achieved through a process-aware solution where physical objects utilized during care tasks are equipped with NFC tags. Nine use cases from the care domain are identified with domain experts and implemented through a proof-of-concept prototype. The time reduction of employing this technology is assessed by domain experts within the typical routines in a nursing home. The interviews indicate an average decrease in documentation time per shift of more than 60%. Inherently also documentation quality is increased as automatic documentation prevents forgetting to document certain steps or other errors. On top, this work fosters two ways for comprehensive documentation, i.e., log-based documentation for analysis and monitoring tasks and paper-based documentation as typically expected by nurses. The logs are automatically created and stored by the underlying process engine. It is shown how paper-based documentation can be automatically created based on process logs. Overall, this work provides the basis for automatic, comprehensive, and continuous documentation of care tasks based on NFC technology.","PeriodicalId":186216,"journal":{"name":"Enterp. Model. Inf. Syst. Archit. Int. J. Concept. Model.","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-12-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130711113","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 2
Decentralized Business Process Control using Blockchain An experience report from two applications: Food Supply Chain and Car Registration 来自食品供应链和汽车登记两个应用的经验报告
Pub Date : 2020-12-08 DOI: 10.18417/EMISA.15.15
S. Guerreiro, Diogo Silva, Tiago Rosado, André Vasconcelos, M. Correia, P. Sousa
Many applications supported by blockchain technology are emerging in the industry. Blockchain can be used to enforce the correctness of business process execution and, consequently, increasing the trust among the stakeholders involved in complex business processes. Since few experiences in the area have been reported, more are needed to better understand the benefits and pitfalls of blockchain-based solutions for decentralized business process control. This paper is an experience report of two projects that enforce decentralized business process control using blockchain - a food supply chain and a car registration - using a Design Science Research Methodology approach. Each application follows a different business process design - DEMO and BPMN - leading to different implementations based on Hyperledger Fabric. The major lessons learned are related to the appropriateness of DEMO and BPMN as business process modelling languages in the context of blockchain applications.
业界出现了许多区块链技术支持的应用。区块链可用于加强业务流程执行的正确性,从而增加涉及复杂业务流程的涉众之间的信任。由于该领域的经验很少,因此需要更多的经验来更好地了解基于区块链的去中心化业务流程控制解决方案的好处和缺陷。本文是两个项目的经验报告,这两个项目使用区块链(食品供应链和汽车登记)执行分散的业务流程控制,使用设计科学研究方法。每个应用程序遵循不同的业务流程设计——DEMO和BPMN——导致基于Hyperledger Fabric的不同实现。学到的主要经验教训与DEMO和BPMN作为区块链应用程序上下文中的业务流程建模语言的适当性有关。
{"title":"Decentralized Business Process Control using Blockchain An experience report from two applications: Food Supply Chain and Car Registration","authors":"S. Guerreiro, Diogo Silva, Tiago Rosado, André Vasconcelos, M. Correia, P. Sousa","doi":"10.18417/EMISA.15.15","DOIUrl":"https://doi.org/10.18417/EMISA.15.15","url":null,"abstract":"Many applications supported by blockchain technology are emerging in the industry. Blockchain can be used to enforce the correctness of business process execution and, consequently, increasing the trust among the stakeholders involved in complex business processes. Since few experiences in the area have been reported, more are needed to better understand the benefits and pitfalls of blockchain-based solutions for decentralized business process control. This paper is an experience report of two projects that enforce decentralized business process control using blockchain - a food supply chain and a car registration - using a Design Science Research Methodology approach. Each application follows a different business process design - DEMO and BPMN - leading to different implementations based on Hyperledger Fabric. The major lessons learned are related to the appropriateness of DEMO and BPMN as business process modelling languages in the context of blockchain applications.","PeriodicalId":186216,"journal":{"name":"Enterp. Model. Inf. Syst. Archit. Int. J. Concept. Model.","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-12-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129283314","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
Blockchain Technologies in Enterprise Modeling and Enterprise Information Systems 企业建模和企业信息系统中的区块链技术
Pub Date : 2020-12-07 DOI: 10.18417/EMISA.15.12
Hans-Georg Fill, P. Fettke, S. Rinderle-Ma
This paper serves as an editorial to the corresponding special issue on Blockchain Technologies in Enterprise Modeling and Enterprise Information Systems.
本文是《区块链技术在企业建模和企业信息系统中的应用》专刊的社论。
{"title":"Blockchain Technologies in Enterprise Modeling and Enterprise Information Systems","authors":"Hans-Georg Fill, P. Fettke, S. Rinderle-Ma","doi":"10.18417/EMISA.15.12","DOIUrl":"https://doi.org/10.18417/EMISA.15.12","url":null,"abstract":"This paper serves as an editorial to the corresponding special issue on Blockchain Technologies in Enterprise Modeling and Enterprise Information Systems.","PeriodicalId":186216,"journal":{"name":"Enterp. Model. Inf. Syst. Archit. Int. J. Concept. Model.","volume":"98 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-12-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132932158","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
Process Modeling in Decentralized Organizations Utilizing Blockchain Consensus 利用区块链共识的去中心化组织流程建模
Pub Date : 2020-12-07 DOI: 10.18417/EMISA.15.13
Felix Härer
Blockchain technologies allow for multiple organizations, individuals, and software to become part of a decentralized network where they can reach consensus on the state of the system including all data stored. Due to the ability of reaching consensus even among untrusted actors, the idea of decentralized organizations has been proposed, where both the system components as well as their coordination are distributed. Given such a system of distributed actors, the problem of decentralized coordination for following common goals and planning becomes apparent. This paper addresses the decentralized coordination problem by means of a blockchain-based approach that uses conceptual modeling to reach consensus in decentralized organizations. With a unified view on the processes and instances of distributed actors, the aim is a decentralized planning and execution through models. For this purpose, an existing approach for decentralized process modeling and instance tracking is applied and extended with the possibility for actors to form consensus on an organizational level through blockchain transactions.
区块链技术允许多个组织、个人和软件成为去中心化网络的一部分,在那里他们可以就系统状态(包括存储的所有数据)达成共识。由于即使在不受信任的参与者之间也能达成共识,因此提出了分散组织的想法,其中系统组件及其协调都是分布式的。考虑到这样一个分布式参与者的系统,为遵循共同目标和计划而分散协调的问题就变得很明显了。本文通过基于区块链的方法解决了去中心化协调问题,该方法使用概念建模在去中心化组织中达成共识。通过对分布式参与者的过程和实例的统一视图,目标是通过模型进行分散的计划和执行。为此,应用和扩展了分散流程建模和实例跟踪的现有方法,使参与者有可能通过区块链交易在组织层面上形成共识。
{"title":"Process Modeling in Decentralized Organizations Utilizing Blockchain Consensus","authors":"Felix Härer","doi":"10.18417/EMISA.15.13","DOIUrl":"https://doi.org/10.18417/EMISA.15.13","url":null,"abstract":"Blockchain technologies allow for multiple organizations, individuals, and software to become part of a decentralized network where they can reach consensus on the state of the system including all data stored. Due to the ability of reaching consensus even among untrusted actors, the idea of decentralized organizations has been proposed, where both the system components as well as their coordination are distributed. Given such a system of distributed actors, the problem of decentralized coordination for following common goals and planning becomes apparent. This paper addresses the decentralized coordination problem by means of a blockchain-based approach that uses conceptual modeling to reach consensus in decentralized organizations. With a unified view on the processes and instances of distributed actors, the aim is a decentralized planning and execution through models. For this purpose, an existing approach for decentralized process modeling and instance tracking is applied and extended with the possibility for actors to form consensus on an organizational level through blockchain transactions.","PeriodicalId":186216,"journal":{"name":"Enterp. Model. Inf. Syst. Archit. Int. J. Concept. Model.","volume":"39 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-12-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116419555","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 4
Towards Privacy Preservation and Data Protection in Information System Design. An introduction to the special issue 论信息系统设计中的隐私保护与数据保护。特刊简介
Pub Date : 2020-11-26 DOI: 10.18417/EMISA.15.7
A. Koschmider, Judith Michael, N. Baracaldo
This paper serves as an editorial to the corresponding special issue setting out solutions and future directions of privacy preservation and data protection in information system design.
本文作为相应专题的社论,阐述了信息系统设计中隐私保护和数据保护的解决方案和未来发展方向。
{"title":"Towards Privacy Preservation and Data Protection in Information System Design. An introduction to the special issue","authors":"A. Koschmider, Judith Michael, N. Baracaldo","doi":"10.18417/EMISA.15.7","DOIUrl":"https://doi.org/10.18417/EMISA.15.7","url":null,"abstract":"This paper serves as an editorial to the corresponding special issue setting out solutions and future directions of privacy preservation and data protection in information system design.","PeriodicalId":186216,"journal":{"name":"Enterp. Model. Inf. Syst. Archit. Int. J. Concept. Model.","volume":"23 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-11-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115474451","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Trust and Privacy in Process Analytics 过程分析中的信任和隐私
Pub Date : 2020-11-26 DOI: 10.18417/EMISA.15.8
F. Mannhardt, A. Koschmider, Lars Biermann, Jana Lange, Florian Tschorsch, M. Wynn
This paper summarizes the panel discussion at the 1st Workshop on Trust and Privacy in Process Analytics (TPPA) co-located with the 2nd International Conference on Process Mining. The panel discussed to what extend trust and privacy is embedded in applications of process mining and took place on 5th October 2020. The virtual session was chaired by Felix Mannhardt and Agnes Koschmider and the invited panelists were Moe Wynn, Jana Lange, Lars Biermann and Florian Tschorsch. The major challenges that this panel identified related to privacy-preserving process mining are to include (user-centric) privacy filters, understanding the privacy-utility trade-off and to link privacy-preserving techniques with dataset quality.
本文总结了第一次过程分析中的信任和隐私研讨会(TPPA)与第二届国际过程挖掘会议的小组讨论。小组讨论了信任和隐私嵌入到流程挖掘应用中的程度,并于2020年10月5日举行。虚拟会议由Felix Mannhardt和Agnes Koschmider主持,受邀的小组成员有Moe Wynn、Jana Lange、Lars Biermann和Florian Tschorsch。该小组确定的与隐私保护过程挖掘相关的主要挑战是包括(以用户为中心的)隐私过滤器,理解隐私与效用之间的权衡,以及将隐私保护技术与数据集质量联系起来。
{"title":"Trust and Privacy in Process Analytics","authors":"F. Mannhardt, A. Koschmider, Lars Biermann, Jana Lange, Florian Tschorsch, M. Wynn","doi":"10.18417/EMISA.15.8","DOIUrl":"https://doi.org/10.18417/EMISA.15.8","url":null,"abstract":"This paper summarizes the panel discussion at the 1st Workshop on Trust and Privacy in Process Analytics (TPPA) co-located with the 2nd International Conference on Process Mining. The panel discussed to what extend trust and privacy is embedded in applications of process mining and took place on 5th October 2020. The virtual session was chaired by Felix Mannhardt and Agnes Koschmider and the invited panelists were Moe Wynn, Jana Lange, Lars Biermann and Florian Tschorsch. The major challenges that this panel identified related to privacy-preserving process mining are to include (user-centric) privacy filters, understanding the privacy-utility trade-off and to link privacy-preserving techniques with dataset quality.","PeriodicalId":186216,"journal":{"name":"Enterp. Model. Inf. Syst. Archit. Int. J. Concept. Model.","volume":"84 10 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-11-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116257492","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 2
Personal Data Protection Inside and Out. Integrating Data Protection Requirements in the Data Lifecycle 内外的个人资料保护。整合数据生命周期中的数据保护需求
Pub Date : 2020-11-26 DOI: 10.18417/EMISA.15.9
Clément Labadie, Christine Legner
Personal data is increasingly positioned as a valuable asset. While individuals generate and expose ever-expanding volumes of personal information online, certain tech companies have built their business models on the personal data they gather. In this context, lawmakers are revising data protection regulations in order to provide individuals with enhanced rights and set new rules regarding the way corporations collect, manage, and share personal information. We argue that recent data protection regulatory frameworks such as the European Union’s General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA) are fundamentally about data management. Yet, there have been no attempts to analyze the regulations in terms of their implications on the data life cycle. In this paper, we systematically analyze the GDPR and the CCPA, and identify their implications on the data life cycle. To synthesize our findings, we propose a semi-formal notation of the resulting changes on the personal data life cycle, in the form of a process and data model governed by business rules, consolidated in a reference personal data life cycle model for data protection. To the best of our knowledge, this study represents one of the first attempts to provide a data-centric view on data protection regulatory requirements.
个人数据越来越被定位为一种有价值的资产。当个人在网上生成和暴露越来越多的个人信息时,某些科技公司已经在他们收集的个人数据上建立了他们的商业模式。在这种情况下,议员们正在修改数据保护条例,赋予个人更大的权利,并对企业收集、管理、共享个人信息的方式制定新的规定。我们认为,最近的数据保护监管框架,如欧盟的《通用数据保护条例》(GDPR)或《加州消费者隐私法》(CCPA),根本上是关于数据管理的。然而,还没有人试图分析这些法规对数据生命周期的影响。在本文中,我们系统地分析了GDPR和CCPA,并确定了它们对数据生命周期的影响。为了综合我们的发现,我们提出了个人数据生命周期变化的半形式化表示法,其形式是由业务规则控制的流程和数据模型,并将其整合到数据保护的参考个人数据生命周期模型中。据我们所知,这项研究是第一次尝试提供以数据为中心的数据保护监管要求的观点。
{"title":"Personal Data Protection Inside and Out. Integrating Data Protection Requirements in the Data Lifecycle","authors":"Clément Labadie, Christine Legner","doi":"10.18417/EMISA.15.9","DOIUrl":"https://doi.org/10.18417/EMISA.15.9","url":null,"abstract":"Personal data is increasingly positioned as a valuable asset. While individuals generate and expose ever-expanding volumes of personal information online, certain tech companies have built their business models on the personal data they gather. In this context, lawmakers are revising data protection regulations in order to provide individuals with enhanced rights and set new rules regarding the way corporations collect, manage, and share personal information. We argue that recent data protection regulatory frameworks such as the European Union’s General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA) are fundamentally about data management. Yet, there have been no attempts to analyze the regulations in terms of their implications on the data life cycle. In this paper, we systematically analyze the GDPR and the CCPA, and identify their implications on the data life cycle. To synthesize our findings, we propose a semi-formal notation of the resulting changes on the personal data life cycle, in the form of a process and data model governed by business rules, consolidated in a reference personal data life cycle model for data protection. To the best of our knowledge, this study represents one of the first attempts to provide a data-centric view on data protection regulatory requirements.","PeriodicalId":186216,"journal":{"name":"Enterp. Model. Inf. Syst. Archit. Int. J. Concept. Model.","volume":"60 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-11-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132314378","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
DPMF: A Modeling Framework for Data Protection by Design DPMF:设计数据保护的建模框架
Pub Date : 2020-11-26 DOI: 10.18417/EMISA.15.10
Laurens Sion, Pierre Dewitte, D. Landuyt, Kim Wuyts, P. Valcke, W. Joosen
Building software-intensive systems that respect the fundamental rights to privacy and data protection requires explicitly addressing data protection issues at the early development stages. Data Protection by Design (DPbD)—as coined by Article 25(1) of the General Data Protection Regulation (GDPR)—therefore calls for an iterative approach based on (i) the notion of risk to data subjects, (ii) a close collaboration between the involved stakeholders and (iii) accountable decision-making. In practice, however, the legal reasoning behind DPbD is often conducted on the basis of informal system descriptions that lack systematicity and reproducibility. This affects the quality of Data Protection Impact Assessments (DPIA)—i.e. the concrete manifestation of DPbD at the organizational level. This is a major stumbling block when it comes to conducting a comprehensive and durable assessment of the risks that takes both the legal and technical complexities into account. In this article, we present DPMF, a data protection modeling framework that allows for a comprehensive and accurate description of the data processing operations in terms of the key concepts used in the GDPR. The proposed modeling approach supports the automation of a number of legal reasonings and compliance assessments (e.g., purpose compatibility) that are commonly addressed in a DPIA exercise and this support is strongly rooted upon the system description models. The DPMF is supported in a prototype modeling tool and its practical applicability is validated in the context of a realistic e-health system for a number of complementary development scenarios.
构建尊重隐私权和数据保护基本权利的软件密集型系统需要在早期开发阶段明确解决数据保护问题。因此,《通用数据保护条例》(GDPR)第25(1)条所创造的数据保护设计(DPbD)要求基于(i)数据主体风险的概念,(ii)相关利益相关者之间的密切合作以及(iii)负责任的决策的迭代方法。然而,在实践中,DPbD背后的法律推理往往是在缺乏系统性和可重复性的非正式系统描述的基础上进行的。这会影响数据保护影响评估(DPIA)的质量。DPbD在组织层面的具体表现。当涉及到对风险进行全面和持久的评估,同时考虑到法律和技术的复杂性时,这是一个主要的绊脚石。在本文中,我们介绍了DPMF,这是一个数据保护建模框架,可以根据GDPR中使用的关键概念全面准确地描述数据处理操作。建议的建模方法支持在DPIA实践中通常处理的许多法律推理和遵从性评估(例如,目的兼容性)的自动化,并且这种支持强烈地植根于系统描述模型。DPMF在原型建模工具中得到支持,其实际适用性在许多互补开发方案的现实电子卫生系统中得到验证。
{"title":"DPMF: A Modeling Framework for Data Protection by Design","authors":"Laurens Sion, Pierre Dewitte, D. Landuyt, Kim Wuyts, P. Valcke, W. Joosen","doi":"10.18417/EMISA.15.10","DOIUrl":"https://doi.org/10.18417/EMISA.15.10","url":null,"abstract":"Building software-intensive systems that respect the fundamental rights to privacy and data protection requires explicitly addressing data protection issues at the early development stages. Data Protection by Design (DPbD)—as coined by Article 25(1) of the General Data Protection Regulation (GDPR)—therefore calls for an iterative approach based on (i) the notion of risk to data subjects, (ii) a close collaboration between the involved stakeholders and (iii) accountable decision-making. \u0000In practice, however, the legal reasoning behind DPbD is often conducted on the basis of informal system descriptions that lack systematicity and reproducibility. This affects the quality of Data Protection Impact Assessments (DPIA)—i.e. the concrete manifestation of DPbD at the organizational level. This is a major stumbling block when it comes to conducting a comprehensive and durable assessment of the risks that takes both the legal and technical complexities into account. In this article, we present DPMF, a data protection modeling framework that allows for a comprehensive and accurate description of the data processing operations in terms of the key concepts used in the GDPR. \u0000The proposed modeling approach supports the automation of a number of legal reasonings and compliance assessments (e.g., purpose compatibility) that are commonly addressed in a DPIA exercise and this support is strongly rooted upon the system description models. The DPMF is supported in a prototype modeling tool and its practical applicability is validated in the context of a realistic e-health system for a number of complementary development scenarios.","PeriodicalId":186216,"journal":{"name":"Enterp. Model. Inf. Syst. Archit. Int. J. Concept. Model.","volume":"15 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-11-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130231144","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
Informatics as a Science 信息学作为一门科学
Pub Date : 2020-11-23 DOI: 10.18417/EMISA.15.6
W. Reisig
This contribution addresses the quest for a framework for a comprehensive science of informatics as a formal theory of discrete dynamic systems, in analogy to the model of natural sciences. A variety of examples show that this endeavor is promising indeed, and that (detached) parts of it exist already. In the long run, informatics may evolve as a self-contained science, more comprehensive than nowadays Computer Science, by complementing its strong technological aspects with a consistent theoretical, mathematical basis, on an equal footing with natural sciences.
这一贡献解决了作为离散动态系统的正式理论的信息学综合科学的框架的探索,类似于自然科学的模型。各种各样的例子表明,这种努力确实是有希望的,而且它的(独立的)部分已经存在。从长远来看,信息学可能会发展成为一门独立的科学,比现在的计算机科学更全面,通过与自然科学平等的基础上,以一致的理论和数学基础补充其强大的技术方面。
{"title":"Informatics as a Science","authors":"W. Reisig","doi":"10.18417/EMISA.15.6","DOIUrl":"https://doi.org/10.18417/EMISA.15.6","url":null,"abstract":"This contribution addresses the quest for a framework for a comprehensive science of informatics as a formal theory of discrete dynamic systems, in analogy to the model of natural sciences. A variety of examples show that this endeavor is promising indeed, and that (detached) parts of it exist already. In the long run, informatics may evolve as a self-contained science, more comprehensive than nowadays Computer Science, by complementing its strong technological aspects with a consistent theoretical, mathematical basis, on an equal footing with natural sciences.","PeriodicalId":186216,"journal":{"name":"Enterp. Model. Inf. Syst. Archit. Int. J. Concept. Model.","volume":"31 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-11-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121786434","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
期刊
Enterp. Model. Inf. Syst. Archit. Int. J. Concept. Model.
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1