Copyright Information
The documents distributed by this server have been provided by the contributing authors as a means to ensure timely dissemination of
scholarly and technical work on a noncommercial basis. Copyright and all rights therein are maintained by the authors or by other
copyright holders, notwithstanding that they have offered their works here electronically. It is understood that all persons copying
this information will adhere to the terms and constraints invoked by each author's copyright. These works may not be reposted without
the explicit permission of the copyright holder.
Sensoria Bibliography Site Goal-Equivalent Secure Business Process Re-engineering for E-Health
Hugo A. López, Fabio Massacci, Nicola Zannone
abstract:
The introduction of IT technologies in e-Health often re- quires to re-engineer the business process that is used to deliver care. Obviously the new and the re-engineered process are observationally dif- ferent and thus we cannot use existing model-based techniques to argue that they are somehow ``equivalent''. In this paper we propose a notion of equivalence over secure business processes that is based on the notion of Goal-equivalence: -- start from the old secure BP; -- reconstruct from that BP the functional and security requirements at organizational level that the old BP was supposed to meet (in- cluding the trust relations that existed among the members of the organization); -- compare the re-engineered BP with the requirements and see if they are equally met or possibly improved. In order to do this we present a reasoning method for passing from SI*, a modeling language that captures the functional, security and trust organizational structure of the system-to-be, to Business processes spec- ifications and vice versa. Both translation processes are complementary, in the sense that SI* models can have multiple business process con- cretizations, and different Business Models can be equivalent in terms of the goals they achieve. An e-health case study is the running example that motivates and guides the process.
