Abstract:Abstract A current research problem in the area of business process management deals with the specification and checking of constraints on resources (e.g., users, agents, autonomous systems, etc.) allowed to be committed for the execution of specific tasks. Indeed, in many real-world situations, role assignments are not enough to assign tasks to the suitable resources. It could be the case that further requirements need to be specified and satisfied. As an example, one would like to avoid that employees that are relatives are assigned to a set of critical tasks in the same process in order to prevent fraud. The formal specification of a business process and its related access control constraints is obtained through a decoration of a classic business process with roles, users, and constraints on their commitment. As a result, such a process specifies a set of tasks that need to be executed by authorized users with respect to some partial order in a way that all authorization constraints are satisfied. Controllability refers in this case to the capability of executing the process satisfying all these constraints, even when some process components, e.g., gateway conditions, can only be observed, but not decided, by the process engine responsible of the execution. In this paper, we propose conditional constraint networks with decisions (CCNDs) as a model to encode business processes that involve access control and conditional branches that may be both controllable and uncontrollable. We define weak, strong, and dynamic controllability of CCNDs as two-player games, classify their computational complexity, and discuss strategy synthesis algorithms. We provide an encoding from the business processes we consider here into CCNDs to exploit off-the-shelf their strategy synthesis algorithms. We introduce $$\textsc {Zeta}$$ Z E T A , a tool for checking controllability of CCNDs, synthesizing execution strategies, and executing controllable CCNDs, by also supporting user interactivity. We use $$\textsc {Zeta}$$ Z E T A to compare with the previous research, provide a new experimental evaluation for CCNDs, and discuss limitations.

Controlling uncertainty: A review of human behavior in complex dynamic environments.

Dynamics of cognitive control: Theoretical bases, paradigms, and a view for the future

Dynamic decision making: Human control of complex systems

Control-theoretic results on dynamic decision making

Metacognitive monitoring and control in distributed cognition

Cognitive Risk Control for Physical Systems

Behavioral Economics for Human-in-the-loop Control Systems Design: Overconfidence and the hot hand fallacy

An Overview of Uncertain Control Co-Design Formulations

Confidence control for efficient behaviour in dynamic environments

The variable nature of cognitive control: a dual mechanisms framework

Rethinking Safe Control in the Presence of Self-Seeking Humans

A Delusion of Control: Loss of Agency in Modern Complex Systems

Resource Controllability of Business Processes Under Conditional Uncertainty

Control adjustment costs limit goal flexibility: Empirical evidence and a computational account

An Expanded Framework for Situation Control

Control for Smart Systems: Applications, Trends, and Future Challenges

Control Limited Perceptual Decision Making

Adaptive Safety-critical Control with Uncertainty Estimation for Human-robot Collaboration

Decision-Theoretic Control of Problem Solving: Principles and Architecture

A real-time interactive decision-making and control framework for complex cyber-physical-human systems

Distractor-specific control adaptation in multidimensional environments