Abstract: Collaborative business processes that have two conflicting management goals,privacy protection and data accountability can simplify business logic and improve collaboration efficiency when it comes to cross-organizational business goals.Collaborators usually use a trusted third-party platform.The centralized collaboration mechanism has not eliminated the risks of privacy leakage and regulatory failure.Thus,researchers have turned to a decentralized approachin recent years,which is called blockchain.These methods use anonymous identities and public datasets,which may cause the risk of data leakage.Therefore,a new collaborative business process monitoring method based on hybrid blockchain was proposed,which had taken into account privacy protection and data accountability of collaborative business processes at the same time.The public blockchain ensured the data privacy and accountability from the perspective of external users and the consortium blockhain provided the privacy protection and data accountability mechanism for internal collaborators.When the process instance was executed,the three rounds with two-way data transfer mechanism were used to isolate the tasks for data privacy,and data was synchronized among collaborators to allow them to monitor each other.The proposed method was compared with other existing methods through simulation experiments on multiple public business process datasets.The experimental results showed that the hybrid blockchain method could achieve both privacy protection and data accountability,and was feasible in terms of execution efficiency.

Key words: collaborative business process, blockchain, privacy protection, data accountability

摘要： 协作业务流程可以在执行跨组织的业务目标时简化业务逻辑,提升协作效率。它有两个重要的管理目标:隐私保护和数据监管。协作者们通常会利用可信的第三方平台。然而这种中心化的协作会存在监管失效和隐私泄露的风险。因此,目前的研究转向了利用去中心化方式的区块链技术实现流程监管。目前的方法基于匿名身份和公开的数据,会造成数据泄露的风险。为此,提出一个基于混合链的协作业务流程管理新方法,在监管业务流程数据的基础上,设计了对流程数据的针对性隐私保护方案。公有链部分确保流程实例对外部用户的隐私性和可监管性,联盟链部分提供了对内部协作者的隐私保护和数据监管。当流程实例在联盟链上执行时,利用三次遍历全体协作者的双向传递机制隔离协作任务。通过在多个公开的业务流程数据上的仿真实验,对比了混合链方法与其他基于区块链的方法。实验结果表明,混合链方法能够保护隐私数据和监管流程数据,在执行效率上具备可用性。

关键词: 协作业务流程, 区块链, 隐私保护, 数据监管