Discrete Dynamics in Nature and Society

Volume 2014 (2014), Article ID 825313, 14 pages

http://dx.doi.org/10.1155/2014/825313

## Confusion Analysis and Detection for Workflow Nets

School of Electro-Mechanical Engineering, Xidian University, Xi’an 710071, China

Received 11 January 2014; Revised 29 March 2014; Accepted 30 March 2014; Published 7 May 2014

Academic Editor: Victor S. Kozyakin

Copyright © 2014 Xiao-liang Chen et al. This is an open access article distributed under the Creative Commons Attribution License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.

#### Abstract

Option processes often occur in a business procedure with respect to resource competition. In a business procedure modeled with a workflow net (WF-net), all decision behavior and option operations for business tasks are modeled and performed by the conflicts in corresponding WF-net. Concurrency in WF-nets is applied to keep a high-performance operation of business procedures. However, the firing of concurrent transitions in a WF-net may lead to the disappearance of conflicts in the WF-net. The phenomenon is usually called confusions that produces difficulties for the resolution of conflicts. This paper investigates confusion detection problems in WF-nets. First, confusions are formalized as a class of marked subnets with special conflicting and concurrent features. Second, a detection approach based on the characteristics of confusion subnets and the integer linear programming (ILP) is developed, which is not required to compute the reachability graph of a WF-net. Examples of the confusion detection in WF-nets are presented. Finally, the impact of confusions on the properties of WF-nets is specified.

#### 1. Introduction

The workflow net (WF-net) [1, 2] of a business procedure is constructed to depict the logical relations among business tasks and to detect the potential faults in the procedure. Multithreaded tasks and option processes in a business procedure are usually implemented by concurrent and conflicting operations that can promote exact and efficient execution of the procedure. In its WF-net model, concurrent structures and conflicts are constructed to model and analyze multithreaded tasks and option processes, respectively.

However, WF-nets suffer from a class of faults that are called confusions such that the disappearance of conflicts occur, which implies that the conflicting transitions in a conflict become disabled before the resolution of the conflict in a WF-net. Confusions are caused by the interlacements between concurrent and conflicting processes, which generate nondeterministic occurrence of conflicts and produce difficulties for the resolution of conflicts.

The subnet shown in Figure 1(a) is a confusion that may occur in WF-nets, which includes two concurrent transitions and at the shown marking and a structural conflict between transitions and . The confusion may lead to the disappearance of the conflict between and , which is undesired. The defect is illustrated in the example. If the two concurrent transitions and fire, the marking shown in Figure 1(d) can be reached. In this process, different sequential transition firing sequences ( and ) with respect to the concurrent firing of and implicate completely different conflict behavior. Suppose that there are two observers who observe the firing of the sequences and , respectively. Their observation for system behavior can be described as follows.(1) fires first, which results in a conflict between and . Then, the conflict is resolved in favor of and fires ().(2) fires first, which does not conflict with other transitions. Then, fires ().

There occurs the conflict between and and the conflict can be resolved by firing transition in observation 1. However, observation 2 shows that no conflict occurs except sequentially firing and . Hence, the confusion leads to the fact that the occurrence of the conflict between and is nondeterministic owing to the concurrent firing between and . The conflict behavior described in observation 1 will not occur; that is, the disappearance of the conflict occurs, when the system fires the sequence .

In a real-world workflow system, the construction of conflicts and concurrency usually attempts to reach a kind of balance between the resource utilization and the fulfillment of the performance requirements. Such balance can be achieved through the timing constraints reported in [3] and the bottlenecks of performance a workflow mentioned in [4]. However, the meaningful balance can only be presented between independent conflicts and concurrency; that is, the conflicts and concurrency contain different transitions in a WF-net, since their behavior will not be mutually interfered. Conversely, if there are dependent conflicts and concurrency in a WF-net, that is, confusions, conflicts can only be considered rather than the balance between conflicts and concurrency. The reason can be presented by considering the different importance of conflicts and concurrency in a workflow procedure.

The significance of conflicts lies in the fact that they perform all option processes that are usually considered as the procedure interfaces to its external environment, for example, switches and decisions of humans. The interfaces should be determined such that the external environment can intervene a target result. Hence, the occurrence of conflicts should be observable and unambiguous in the evolution of a workflow procedure.

Concurrency in a workflow procedure only facilitates the implement of performance requirements to obtain a desired running period, which does not contribute to the logical judgments and the correctness of the procedure. Assuming that the tasks in a procedure are not performed concurrently, researchers can still get an execution result except a higher execution performance. However, if there are no conflicts, the behavior of the procedure may not be completed or the procedure performing a desired work cannot be constructed.

As aforementioned, a policy is required to determine whether a WF-net will be such an ambiguous conflict owing to concurrency. Hence, this paper aims at dealing with the formal description of confusions and providing a policy to decide whether a WF-net is confusion-free and where may appear confusions in the WF-net.

Petri nets (PNs) [5–7] as a formalism to describe the behavior of discrete event systems have drew much attention from different areas, for example, workflow management [2, 8, 9], web services [10, 11], and flexible manufacturing systems (FMSa) [12, 13]. Confusion problems and their defects were first investigated in PNs by Rozenberg et al. in [14, 15]. Their work considers the defects of PNs with confusions and mentions that it is not always possible to avoid confusion in a PN system although conflict behavior in the system with confusions is difficult to analyze. This is due to the fact that the intermediate states, for example, the markings shown in Figures 1(b) and 1(c), determined by different sequential transition sequences, for example, and , of concurrent transitions, are different from each other.

If one requires to determine whether a conflict occurs in a PN with confusions, all possible sequential transition sequences generated by concurrent transitions in the PN have to be analyzed. However, the number of these sequences grows quickly with the increase of concurrent transitions. On the other hand, a confusion cannot be analyzed by using a reachability graph since independent concurrency (no concurrent transitions belonging to conflicting transitions) and concurrency in confusions cannot be differentiated in the reachability graph of a PN.

Some studies are devoted to the analysis of the confusions in PNs, where the phenomenon of confusions is extensively reported by many PN applications such as workflow nets (WF-nets) [2, 8, 9], occurrence nets [16, 17], safe nets [18–20], generalized (unsafe) nets [19], and generalized stochastic PNs (GSPNs) [21, 22].

The study on occurrence nets focuses on the PNs whose behavior can be interpreted by branching unfolding semantics [23]. In PNs, the behavior such as sequences, concurrency, conflicts, trails, choices, and alternatives can be described and analyzed by decomposing an occurrence net into substructures given by the node relations associated with the behavior. However, confusions cannot be described by the existing branching semantics. Hence, Smith and Haar consider the independence of events in occurrence nets and the indirect influences among concurrent events in [16, 17]. Furthermore, interference structural conflict clusters are developed in [17] in order to describe confusions. The clusters belong to a kind of the substructures of occurrence nets. In the work of Smith and Haar, confusion detection problems are not considered.

In [18, 19], a confusion detection approach based on trace theory is proposed. Furthermore, communicating sequential process (CSP) model checker is used to verify the detected confusions. However, the precondition of the confusion detection is that a PN is converted into an interleaving process algebra CSP. The transformation can produce additional costs and is infeasible for an arbitrary PN. A feasible offline confusion detection policy is reported in [20], which requires computing the reachability graph of a PN and cannot be used in complex systems owing to state space explosions.

Confusions in GSPNs are discussed in [21, 22]. The marking graph of a GSPN is not a stochastic process if the GSPN contains confusions, which implies that continuous-time Markov chains (CTMCs) cannot be used to analyze the GSPNs with confusions. Generally, a classical analytical approach for GSPNs is to assume that the subnets of immediate transitions are confusion-free in order that the analysis can proceed. However, the assumption does not intrinsically solve the problem of confusions since they really exist in GSPNs.

A PN which models the control-flow dimension of a workflow is a WF-net. Both dynamic behavior and control of a case in a workflow can be specified in its WF-net [1, 24]. van der Aalst and Hee deal with the existence of confusions in WF-nets and show the defects of WF-nets with confusions [2, 8, 9]. First, a WF-net is said to be correct with a singleton token in its source place if the WF-net holds for the properties “soundness” and “well-structured,” which is reported in [9]. If a WF-net is sound, an arbitrary reachable marking generated by the WF-net can terminate properly. A well-structured WF-net has a number of nice properties. For example, the soundness of a WF-net can be verified in polynomial time and a sound well-structured WF-net is safe. However, the existence of confusions in WF-nets leads to nondeterministic conflicting processes. Hence, it is not amenable to say that a sound or a well-structured WF-net is correct since the properties “soundness” and “well-structured” in WF-nets cannot avoid confusions. Furthermore, confusions can affect the property “well-structured” of a WF-net under the acyclic (no directed cycle in the structure of a WF-net) restrictions. To be more specific,(1)a sound and well-structured WF-net with cycles may cause confusions; this fact will be illustrated by giving an example in this paper;(2)if an acyclic sound WF-net contains a confusion, it is certainly not well structured; the conclusion will be specified in this work.

Second, in a workflow management system (WFMS), four important building blocks (AND-split, AND-join, OR-split, and OR-join) are introduced to specify the functions of the WFMS, where OR-splits are said to be case variables and modeled with conflicts in the corresponding WF-system, which lead to different routings of a case (transition sequences). According to the requirements of WFMSs and the work of van der Aalst in [9], the routings of a case should be independent of the order in which tasks are executed; that is, the choice between conflicting transitions cannot be influenced by the order in which a nonconflicting transition fires. It is shown that the behavior of confusions should not occur in a WF-system modeling a WFMS.

Third, in WF-net, only free choice is usually allowed due to the existence of confusions since the structures of confusions are nonfree choice. However, as discussed in [2], there are nonfree choice WF-nets that correspond to sensible workflows. They can be applied if confusion detection problems are solved.

Fault detection and control in PNs is an important and computationally difficult problem owing to resource sharing, state space explosions, and complex conflicting and concurrent behavior. For example, some excellent deadlock detection and prevention methods of FMSs are proposed in PNs [25–31]. WF-nets belong to a subclass of PNs and the occurrence of confusions in a WF-net is undesired. Hence, this paper is intended to investigate the confusion problems in a WF-net. The main contributions include the following three aspects.(1)The formalization of confusions is presented by defining a special class of subnets.(2)The impact of confusions on the properties of WF-nets is discussed.(3)A confusion detection policy is proposed without considering the reachability graph of WF-nets, which can return whether and where may occur a confusion in WF-nets.If a sound or well-structured WF-net is reported to be confusion-free according to the proposed detection policy, the WF-net can be used in any real-world workflow procedure. Correspondingly, once the proposed policy finds a confusion in WF-nets, researchers or engineers will be able to give up the use of such WF-nets or design a method to ensure the occurrence of conflicts before using them.

This paper is organized as follows. Section 2 introduces basic concepts of PNs and WF-nets. Section 3 formulates two classes of confusions and specifies their behavior by some examples. Section 4 presents algorithms for confusion detection. The proposed algorithms are applied to some examples and a real-world case. Section 5 deals with the impact of confusions on the properties of WF-nets. Conclusions and future work are presented in Section 6.

#### 2. Basics of Petri Nets and Workflow Nets

This section provides the basics of PNs and WF-nets, where the definitions and the properties of PNs presented in this paper come from [6] and the details of WF-nets can be found in [9].

A PN is a four-tuple , where and are finite, nonempty, and disjoint sets. is the set of places and is the set of transitions. is called a flow relation of the net, represented by arcs with arrows from places to transitions or from transitions to places. is a mapping that assigns a weight to an arc: if , and otherwise, where and is a set of nonnegative integers. A net is self-loop-free (pure) if , . is called an ordinary net, denoted as , if .

Let be a node in a net , , , . The preset of is defined as , while the postset of is defined as . Let be a set of nodes with . We have , and . The structure of a self-loop-free PN can be represented by its incidence matrix ; that is, a integer matrix with .

A marking of is a mapping from to . denotes the number of tokens contained in place . is marked at marking if . is called a net system or a marked net and is called an initial marking of . A marking can be denoted by that is presented as multiset or formal sum notations. For example, a marking in a net with four places can be denoted by .

A transition is enabled at marking if , , which is denoted as . If is enabled, it can fire. Its firing yields another marking such that , which is denoted by . Marking is said to be reachable from if there exists a transition sequence and markings , and such that . This is denoted by . The set of markings reachable from in defines the reachability set of , denoted as .

A transition in a PN system is live at if , holds. The system is live if , is live at . A PN is safe if , . Generally, safe PNs are used to depict and analyze business processes, logistic systems, and workflow management systems. In a safe PN, a transition is enabled at marking if , , and , .

A -vector is a column vector indexed by , where is the set of integers. is a -invariant if and , where the bold** 0** denotes a column vector whose every entry equals 0. Let be a -invariant of . Then ; holds. is called the support of . is called a minimal -invariant if is not a superset of the support of any other one and its components are mutually prime.

Let be a PN and be two nodes in , where . A string is called a path of if , . is called a directed path if , . is called elementary path if for any two nodes and in .

*Definition 1 (see [9]). *A PN is said to be a workflow net (WF-net) if and only if (1) has a source place and a sink place such that and .(2)For any node , belongs to a directed path from to . is said to be a workflow system (WF-system) if is the initial marking that contains only a singleton token in place in the system.

In this paper, “WF-net” and “WF-system” are used to distinguish an arbitrary net structure and the structure at initial marking , that is, , respectively. WF-nets are a subclass of PNs. Hence, any analytical methods involved in PNs can be applied to WF-nets. In this paper, safe WF-system is considered only.

*Definition 2 (see [9]). *A PN is said to be the extended WF-net from a WF-net if an extra transition exists such that , , and . is called an extended WF-system if () is a WF-system and is extended from .

The description of a business procedure in a WF-system is shown in Table 1.

The life cycle of a business procedure is depicted by the logical relations among transitions in a WF-net. Marked source place and sink place in a WF-system are used to identify the beginning and the termination of a business procedure. A task in a business procedure contains three status:* idle*,* ready*, and* finished*, which implies that a transition in corresponding WF-system is disabled, enabled, and fires, respectively.

A WF-system cannot allow the retention of tokens in other places if is marked, which is ensured by condition (2) in Definition 1. Figures 2(a) and 2(b) show a WF-system at initial marking and its extended WF-system , respectively.

*Definition 3 (see [9]). *A WF-system with , is said to be sound if (1)* *, , , where and .(2)* *, .(3), , holds.

Condition (1) in Definition 3 guarantees that the marking in a sound WF-system can be reached by firing an existing transition sequence at an arbitrary reachable marking, which implies that any case in a business procedure can be terminated eventually. Condition (2) in Definition 3 ensures that marking is the only terminal marking. The fact that no dead transitions exist in the extended WF-system of () is ensured by condition (3) in Definition 3.

A WF-system is sound if and only if the extended WF-system of is live and bounded. For example, the WF-system shown in Figure 2(a) is sound since its extended WF-system shown in Figure 2(b) is live and bounded.

*Definition 4 (see [9]). *A PN is said to be well handled if for any pair of nodes and such that one of the nodes is a place and the other is a transition and for any pair of elementary paths and from to ; the formula holds, where and denote the set of all nodes in path and , respectively. A WF-net is well structured if the extended from is well handled.

The WF-system shown in Figure 2(a) is not well structured and the WF-system shown in Figure 2(c) is well structured. A well-structured WF-net has a number of nice properties. For example, the soundness of a WF-system can be verified in polynomial time and a sound well-structured WF-system is safe. A reasonable WF-system usually holds for soundness and well structure.

#### 3. Conflicts, Concurrency, and Confusions

This section formalizes confusions in a PN system to a class of marked subnets with respect to special conflicting and concurrent characteristics. The formalization allows us to obtain a confusion detection policy in WF-systems.

*Definition 5 (see [32]). *A structural conflict in a net is a pair , where is called the structural conflicting place and is the set of output transitions of with . The elements in are called structural conflicting transitions.

*Definition 6 (see [32]). *An effective conflict in a marked net , denoted by , is associated with a structural conflict and a marking such that , is true, and , where is the set of enabled transitions in at marking .

The cardinality of , that is, , is said to be the size of effective conflict . An effective conflict is said to be complete (resp., incomplete) if (resp., ). Figures 3(a) and 3(b) show a structural conflict and an effective conflict associated with , respectively, where and . The effective conflict is incomplete since .

*Definition 7. *(1) Transitions and are said to be concurrent at marking in a marked net () if , , and .

(2) Let be a transition set. It is said to be a set of concurrent transitions at marking if , ; transitions and are concurrent at marking .

(3) The concurrent degree of a set of concurrent transitions, denoted by , is defined as .

(4) Let be a set of concurrent transitions in a marked net () with . It is said to be -max-concurrent in () if there does not exist a set of concurrent transitions with in () such that . A transition in is said to be -max-concurrent if is -max-concurrent in ().

(5) Let be the set of concurrent transition sets in (); that is, ; is a set of concurrent transitions in (). is said to be -max-concurrent if ; is -max-concurrent in ().

Figure 3(c) shows a marked PN that contains totally seven sets , , , , , , and of concurrent transitions at marking . Two sets and with are 3-max-concurrent since there does not exists a set of concurrent transitions from to , whose cardinality is greater than three. Suppose that and are two sets of concurrent transition sets. Then, is 3-max-concurrent and is not 3-max-concurrent since the concurrent degrees of and in are less than three.

*Definition 8. *A marked PN is said to be a marked subnet of a PN system if , , , and is a natural projection of marking on place set . is said to be valid (resp., invalid), denoted by (resp., ), if , (resp., , ).

*Definition 9. *A confusion, denoted by ,, or abbreviated to , is a marked subnet in a net system such that(1)there exists a structural conflict with and ;(2)there exists a nonempty set that is composed of all 2-max-concurrent transition sets at the submarking in ;(3), such that and ;(4)there exist two reachable markings and in such that and are true.A confusion is said to be a conflict-increasing confusion (CIC) if . It is said to be a conflict-decreasing confusion (CDC) if .

Confusions are tackled as the marked subnets in a PN system, which are distinguished into CICs and CDCs. Two requirements on confusions are imposed by Conditions (1) and (2) in Definition 9, respectively. If a marked subnet is a confusion, it necessarily contains a structural conflict and all the sets of concurrent transitions in are 2-max-concurrent at marking .

Condition (3) in Definition 9 implies the behavior characteristics of confusions. For a structural conflict in a confusion, there exists at least a transition not belonging to in the confusion. Firing changes the size of effective conflicts associated with . Condition (4) in Definition 9 ensures that the behavior described in Condition (3) can actually occur in the original net system. Finally, confusions are classified into CICs and CDCs according to the relations of the size change of effective conflicts in Definition 9.

If a marked subnet of a PN system satisfies Definition 9, the disappearance of complete effective conflicts will occur in the marked subnet. The limitation of the 2-max-concurrency can limit the size of a subnet at a marking such that the marked subnet is exactly a CIC or a CDC. In other words, the behavior of a confusion defined in Definition 9 with the limitation of 2-max-concurrency can only be one of the two results, that is, increasing or decreasing the size of effective conflicts. Examples 1 and 2 are given to show the structures and behavior of CICs and CDCs defined in Definition 9, respectively.

*Example 1. *The marked subnet shown in Figure 4(a) is a CIC , where , , , , and . The confusion holds for Conditions (1) and (2) in Definition 9. contains a structural conflict and two 2-max-concurrent transition sets and exist in the confusion such that is true.

The partial reachability graph of the confusion is shown in Figures 4(b) and 4(c), which are obtained by concurrently firing transitions in and , respectively, where two transition firing sequences and (resp., and ) can be observed from the initial marking to the terminal marking (resp., ) in Figure 4(b) (resp., Figure 4(c)) and any marking in Figure 4 is represented with the size of the effective conflict ; that is, .

According to Condition (3) in Definition 9, () is a CIC since firing the nonconflicting transition in (resp., ) can expand the size of the effective conflicts associated with from to , where is incomplete and is complete.

The fact whether the complete effective conflict occurs according to the concurrent firing of transitions in and is nondeterministic. If and fire, the complete effective conflict with size at marking can occur. If and fire, the processes and do not expand the size of the effective conflicts associated with such that a complete effective conflict occurs, where , , , , and .

The complete is expected to occur since all the structural conflicting transitions in are enabled such that the options can be done among transitions . In this case, we can say that the disappearance of the effective conflict occurs if the CIC fires the transition sequences and .

*Example 2. *The marked subnet shown in Figure 5(a) is a CDC that consists of two structural conflicts and at the initial marking . Only in the confusion is considered due to the symmetry. In other words, the confusion is analyzed, where , , , , , , , , and .

The confusion is a CDC since firing transition in and or firing another transition in and reduces the size of the effective conflict such that the options cannot be done in the complete effective conflict .

The partial reachability graph obtained by concurrently firing transitions and in is shown in Figure 5(b). Two transition firing sequences and can be obtained. The complete effective conflict with can be found at the initial marking . Hence, the options on conflicting transitions from to should be done for the effective conflict . However, an unfortunate transition can concurrently fire such that the size is reduced from to , which leads to disabled conflicting transitions and before the options among conflicting transitions are executed, where . In this case, we can say that the disappearance of the effective conflict occurs if the confusion fires transition sequence .

The concurrent firing of the transitions in other sets , , and can be analyzed by the similar procedures of the analysis for transitions and in . Specifically, the disappearance of the effective conflict occurs if the confusion fires transition sequence , , or .

#### 4. Detection of Confusions in WF-Systems

Conflicts and concurrency are used to control the option processes and to keep a high-performance operation of a WF-system. However, confusions may lead to the incomplete and nondeterministic conflicting behavior.

This section deals with the detection problem of confusions in WF-systems. A confusion is tied to a special structure and a marking. Hence, the detection method is divided into two steps. First, the structure of a confusion () in a WF-system is detected. Then, whether there exists a marking such that the confusion occurs is decided by a method of integer linear programming (ILP), which does not require computing the reachability graph of the WF-system.

*Property 1. *If is a CIC subnet in a WF-net , then , such that is true. If is a CDC subnet in a WF-net , then , such that is true.

Property 1 depicts the structural characteristics of a CIC and a CDC described in Definition 9. Algorithm 1 is developed to capture all confusion subnets in a WF-net according to Property 1. Let in Algorithm 1 denote the conflicting transition set containing .

In a WF-system, the captured confusion subnets cannot perfectly describe the phenomenon of confusions since they are not related to markings. It does not mean that a confusion necessarily exists if there is a confusion subnet in a WF-system. Hence, we need to decide whether there exists a marking such that confusion occurs.

Theorem 10. *Let () be a sound WF-system. Let , and denote all the minimal -invariants computed by . Then () is covered by , and and ; is true.*

*Proof. *According to Definition 1, we have ; belongs to an elementary directed path from to in . Any elementary directed path in a WF-system () can deduce a minimal -invariant. Hence, () is covered by , and if there are total minimal -invariants. A -invariant holds for . Hence, we have .

Algorithm 2 is proposed according to Theorem 10, which is referred to find the places that may lead to the disappearance of an effective conflict in a confusion if they are marked. Then, an ILP is developed to decide whether a marking exists such that all these places are marked. If the result of the ILP equals the number of the places, an existing confusion in a WF-system can be finally determined.

Let be a WF-system and and denote the sets of its CIC and CDC subnets obtained by Algorithm 1, respectively. Suppose that is a CIC subnet in , where is the transition set of a structural conflict in , is a set containing all nonconflicting transitions in , and is a transition set with respect to in . If there exists a marking with , that is, , is marked at , we can decide that () is a CIC that can occur in the WF-system . Similarly, for a CDC subnet in a WF-system (), if there exists a marking with , we can decide that () is a CDC in the WF-system . The decision processes are formulated in Algorithm 2.

Two WF-systems () and () are used to illustrate the proposed detection policy of confusions, which are shown in Figures 6(a) and 6(b), respectively. The WF-system () is sound and another WF-system () is sound and well structured, where anyone of them contains a CIC.

If Algorithm 1 is applied in WF-net , the CIC subnet shown in Figure 6(c) can be obtained, where , , , and is true. Hence, the sets , , and in can be computed; that is,(1)* *;(2)* *;(3)* *.

Algorithm 2 is applied to decide whether there exists a reachable marking in such that is a CIC. First, the supports of three minimal -invariants , that is, , , and , are obtained by computing . Then, the ILP depicted in line 8 of Algorithm 2 can be implemented and returns a value . It implies that there exists a marking in WF-system such that places and in are marked. In other words, a confusion with is detected, which will occur in the WF-system (). Similarly, in WF-system (), the confusion () shown in Figure 6(d) can be detected by the procedures of Algorithms 1 and 2. These examples show that the detection method developed in this paper can effectively detect confusions in WF-systems.

The WF-system () shown in Figure 7(a) depicts a real-world case of complaint processes, which is reported in [9]. There are four structural conflicts , , , and , which implement the logical judgments of WF-system () such that a complaint case can be complete. According to the study in this paper, the prerequisite of implementing reasonable logical judgment is that the WF-system () is confusion-free. Hence, Algorithms 1 and 2 are considered in (). First, the confusion subnet shown in Figure 7(b) can be detected by Algorithm 1. However, a confusion with respect to will not occur in the WF-system () since the ILP in Algorithm 2 returns the value . It is shown that no reachable marking exists in the WF-system such that all the places , , and in are marked. Finally, a conclusion that the complaint process will not cause a confusion and its WF-system is confusion-free is obtained. The WF-system can be correctly used to model and analyze complaint cases without considering the disappearance of any conflict.

#### 5. Impact of Confusions on the Properties of WF-Systems

The algorithms developed in Section 4 show a policy to detect confusions in a WF-system. In the following, the impact of confusions on the properties of WF-systems is specified.

*Property 2. *A sound and well-structured WF-net with cycles may contain confusions.

*Proof. *The example shown in Figure 6(b) that is a sound and well-structured with a cycle. According to Algorithms 1 and 2, a CIC shown in Figure 6(d) can be obtained. Hence, a sound and well-structured WF-net with cycles may contain confusions.

*Property 3. *An acyclic sound WF-system is not well structured if contains a confusion with .

*Proof. *There are two cases only for confusion subnet .*Case (1).* If is a CIC subnet, there must be three differentiable transitions , , and holding for , , and . According to Definitions 1 and 3, and , there must be some places and a transition modeling an AND-split such that two different elementary paths and in exist, where , , and . Otherwise, if , holding for and . In other words, there is a dead transition between and in the extended WF-system (), which violates the sound property. Hence, transition necessarily exists.

is sound and transition splits a token into multiple tokens. Hence, there must be some transitions and places with modeling an AND-join such that the tokens in different places can converge to . We can deduce that there exist two different elementary paths and in . Otherwise, if , we can conclude that . In other words, there are tokens in the places belonging to at the terminal state in , which also violates the sound property. According to and , we have two different elementary paths and owing to . However, cannot deduce . According to Definition 4, is not well structured.*Case (2).* If is a CDC subnet, there must be three differentiable transitions , , and holding for , , and . WF-system is sound. Hence, there exists a marking with respect to holding for and . Otherwise, if does not exist, transition will be dead owing to . According to Definition 1, and , there must be some places and a transition modeling an AND-split and also exist some transitions and places with modeling an AND-join to product two different elementary paths and , where , , and . Similarly, and are also two different elementary paths. According to Definition 4, is not well structured.

According to Property 3, confusions can affect the property “well-structured” of an acyclic sound WF-system. As an example, the acyclic sound WF-system shown in Figure 6(a) is not well structured owing to the existence of a CIC.

#### 6. Conclusions and Future Work

Confusion detection problems in WF-systems are tackled in this paper. First, the work explores CICs and CDCs in a WF-system by formalizing them as a class of marked subnets with respect to the limitation of conflicts and concurrency. The disappearance of conflicts in a confusion can be described in such marked subnets, which motivates us to develop confusion detection methods proposed in this paper.

Second, a policy is developed to capture confusions, in which a detection algorithm is proposed to find confusion subnets in a WF-system and a decision algorithm based on ILP is proposed to decide whether the found subnets will eventually cause confusions at a reachable marking. The policy avoids computing the reachability graph of a WF-system. Two examples and a real-world case of WF-systems reported by van der Aalst [9] are used to illustrate the detection of confusions. The results show that the detection method is feasible and efficient.

Third, the impact of confusions on the properties of WF-systems is specified. A conclusion is obtained; that is, if an acyclic WF-system contains a confusion, it is certainly not well structured. Future work attempts to find the avoidance policy of confusions in WF-systems by using timing constraints in [3] or supervisory control in [6].

#### Conflict of Interests

The first author and any of the coauthors do not have any conflict of interests regarding this paper.

#### Acknowledgment

This work was supported in part by the National Natural Science Foundation of China under Grant no. 61374068, the Fundamental Research Funds for the Central Universities under Grant no. JB-ZR1130, and the National Natural Science Foundation of China under Grant no. 61304051.

#### References

- W. Tan and M. C. Zhou,
*Business and Scientific Workflows: A Service-Oriented Approach*, Wiley-IEEE Press, 2013. - W. M. P. van der Aalst, “Verification of workflow nets,” in
*Application and Theory of Petri Nets*, P. Azma and G. Balbo, Eds., vol. 1248 of*Lecture Notes in Computer Science*, pp. 407–426, Springer, Berlin, Germany, 1997. View at Publisher · View at Google Scholar · View at MathSciNet - J. Q. Li, Y. S. Fan, and M. C. Zhou, “Timing constraint workflow nets for workflow analysis,”
*IEEE Transactions on Systems, Man, and Cybernetics A: Systems and Humans*, vol. 33, no. 2, pp. 179–193, 2003. View at Publisher · View at Google Scholar · View at Scopus - J. Q. Li, Y. S. Fan, and M. C. Zhou, “Performance modeling and analysis of workflow,”
*IEEE Transactions on Systems, Man, and Cybernetics A: Systems and Humans*, vol. 34, no. 2, pp. 229–242, 2004. View at Publisher · View at Google Scholar · View at Scopus - T. Murata, “Petri nets: properties, analysis and applications,”
*Proceedings of the IEEE*, vol. 77, no. 4, pp. 541–580, 1989. View at Publisher · View at Google Scholar · View at Scopus - Z. W. Li and M. C. Zhou,
*Deadlock Resolution in Automated Manufacturing Systems: A Novel Petri Net Approach*, Springer, London, UK, 2009. - Z. W. Li, N. Q. Wu, and M. C. Zhou, “Deadlock control of automated manufacturing systems based on Petri nets—a literature review,”
*IEEE Transactions on Systems, Man and Cybernetics C: Applications and Reviews*, vol. 42, no. 4, pp. 437–462, 2012. View at Publisher · View at Google Scholar · View at Scopus - M. W. P. van der Aalst and K. Hee,
*Workflow Management: Models, Methods, and Systems*, The MIT Press, Cambridge, UK, 2004. - M. W. P. van der Aalst, “Workflow verification: finding control-flow errors using Petri-net-based tech niques,” in
*Business Process Management: Models, Techniques, and Empirical Studies*, W. van der Aalst, J. Desel, and A. Oberweis, Eds., vol. 1806 of*Lecture Notes in Computer Science*, pp. 19–128, Springer, Berlin, Germany, 2000. View at Google Scholar - P. C. Xiong, Y. S. Fan, and M. C. Zhou, “A Petri net approach to analysis and composition of web services,”
*IEEE Transactions on Systems, Man, and Cybernetics A: Systems and Humans*, vol. 40, no. 2, pp. 376–387, 2010. View at Publisher · View at Google Scholar · View at Scopus - X. T. Li, Y. S. Fan, Q. Z. Sheng, Z. Maamar, and H. W. Zhu, “A Petri net approach to analyzing behavioral compatibility and similarity of web services,”
*IEEE Transactions on Systems, Man, and Cybernetics A: Systems and Humans*, vol. 41, no. 3, pp. 510–521, 2011. View at Publisher · View at Google Scholar · View at Scopus - Y. F. Chen and Z. W. Li, “Design of a maximally permissive liveness-enforcing supervisor with a compressed supervisory structure for flexible manufacturing systems,”
*Automatica*, vol. 47, no. 5, pp. 1028–1034, 2011. View at Publisher · View at Google Scholar · View at MathSciNet - Z. W. Li and M. C. Zhou, “Two-stage method for synthesizing liveness-enforcing supervisors for flexible manufacturing systems using Petri nets,”
*IEEE Transactions on Industrial Informatics*, vol. 2, no. 4, pp. 313–325, 2006. View at Publisher · View at Google Scholar · View at Scopus - G. Rozenberg and P. S. Thiagarajan, “Petri nets: basic notions, structure, behaviour,” in
*Current Trends in Concurrency: Overviews and Tutorials*, J. de Bakker, W. de Roever, and G. Rozenberg, Eds., vol. 224 of*Lecture Notes in Computer Science*, pp. 585–668, Springer, Berlin, Germany, 1986. View at Publisher · View at Google Scholar · View at MathSciNet - G. Rozenberg and J. Engelfriet, “Elementary net systems,” in
*Lectures on Petri Nets I: Basic Models*, W. Reisig and G. Rozenberg, Eds., vol. 1491 of*Lecture Notes in Computer Science*, pp. 12–121, Springer, Berlin, Germany, 1998. View at Google Scholar - E. Smith, “On the border of causality: contact and confusion,”
*Theoretical Computer Science*, vol. 153, no. 1-2, pp. 245–270, 1996. View at Publisher · View at Google Scholar · View at MathSciNet - S. Haar, “Clusters, confusion and unfoldings,”
*Fundamenta Informaticae*, vol. 47, no. 3-4, pp. 259–270, 2001. View at Google Scholar · View at MathSciNet - C. Bolton, “Adding conflict and confusion to CSP,” in
*Proceedings of the International Symposium of Formal Methods Europe (FM '05)*, J. Fitzgerald, J. Hayes, and A. Tarlecki, Eds., vol. 3582 of*Lecture Notes in Computer Science*, pp. 205–220, Springer, July 2005. View at Scopus - C. Bolton, “Capturing conflict and confusion in CSP,” in
*Proceedings of the 6th International Conference on Integrated Formal Methods*, J. Davies and J. Gibbons, Eds., vol. 4591 of*Lecture Notes in Computer Science*, pp. 413–438, Springer, 2007. - X.-L. Chen, Z.-W. Li, A. M. Al-Ahmari, A. M. El-Tamimi, and E. S. Abouel Nasr, “Confusion diagnosis and control of descrete event systems using synchronized Petri nets,”
*Asian Journal of Control*, vol. 15, no. 6, pp. 1736–1751, 2013. View at Publisher · View at Google Scholar · View at MathSciNet - J. Katoen, “GSPNs revisited: simple semantics and new analysis algorithms,” in
*Proceedings of the International Conference on Application of Concurrency to System Design*, pp. 6–11, Hamburg, Germany, 2012. - M. Marsan, G. Balbo, G. Conte, S. Donatelli, and G. Franceschinis,
*Modelling with Generalized Stochastic Petri Nets*, John Wiley & Sons, New York, NY, USA, 1995. - S. Haar, “Occurrence net logics,”
*Fundamenta Informaticae*, vol. 43, no. 1–4, pp. 105–127, 2000. View at Google Scholar · View at MathSciNet - Y. Y. Du, C. J. Jiang, M. C. Zhou, and Y. Fu, “Modeling and monitoring of E-commerce workflows,”
*Information Sciences*, vol. 179, no. 7, pp. 995–1006, 2009. View at Publisher · View at Google Scholar · View at MathSciNet - Y. F. Chen, Z. W. Li, M. Khalgui, and O. Mosbahi, “Design of a maximally permissive liveness-enforcing Petri net supervisor for flexible manufacturing systems,”
*IEEE Transactions on Automation Science and Engineering*, vol. 8, no. 2, pp. 374–393, 2011. View at Publisher · View at Google Scholar · View at Scopus - Z. W. Li and M. C. Zhou, “Elementary siphons of Petri nets and their application to deadlock prevention in flexible manufacturing systems,”
*IEEE Transactions on Systems, Man, and Cybernetics A: Systems and Humans*, vol. 34, no. 1, pp. 38–51, 2004. View at Publisher · View at Google Scholar · View at Scopus - Z. W. Li and M. C. Zhou, “Control of elementary and dependent siphons in Petri nets and their application,”
*IEEE Transactions on Systems, Man, and Cybernetics A: Systems and Humans*, vol. 38, no. 1, pp. 133–148, 2008. View at Publisher · View at Google Scholar · View at Scopus - Z. W. Li, M. C. Zhou, and N. Q. Wu, “A survey and comparison of Petri net-based deadlock prevention policies for flexible manufacturing systems,”
*IEEE Transactions on Systems, Man and Cybernetics C: Applications and Reviews*, vol. 38, no. 2, pp. 173–188, 2008. View at Publisher · View at Google Scholar · View at Scopus - Z. W. Li, M. C. Zhou, and M. D. Jeng, “A maximally permissive deadlock prevention policy for FMS based on Petri net siphon control and the theory of regions,”
*IEEE Transactions on Automation Science and Engineering*, vol. 5, no. 1, pp. 182–188, 2008. View at Publisher · View at Google Scholar · View at Scopus - Z. W. Li and M. Zhao, “On controllability of dependent siphons for deadlock prevention in generalized Petri nets,”
*IEEE Transactions on Systems, Man, and Cybernetics A: Systems and Humans*, vol. 38, no. 2, pp. 369–384, 2008. View at Publisher · View at Google Scholar · View at Scopus - Z. W. Li, G. Y. Liu, H.-M. Hanisch, and M. C. Zhou, “Deadlock prevention based on structure reuse of Petri net supervisors for flexible manufacturing systems,”
*IEEE Transactions on Systems, Man, and Cybernetics A: Systems and Humans*, vol. 42, no. 1, pp. 178–191, 2012. View at Publisher · View at Google Scholar · View at Scopus - R. David and H. Alla,
*Discrete, Continuous, and Hybrid Petri Nets*, Springer, Berlin, Germany, 2005. View at MathSciNet