JP5155747B2 - Business impact analysis monitoring system when a system failure occurs - Google Patents

Description

  The present invention performs business impact analysis when a system failure occurs in a business system that is systematized by modeling a business process using BPM, and displays the impact range and the degree of impact on the business. The present invention relates to a monitor system.

The movement to visualize the company's business is progressing mainly by large companies. As a method for visualizing business, BPM (Business Process Modeling), which models business as a flow of business processes, has attracted attention. The business processes to be modeled by BPM include not only IT-related areas but also human-related areas where humans process, but when modeling, be aware of IT. Instead, describe the business process flow diagram from the user's perspective.
When describing a business process flowchart from the user's perspective, BPMN (Business Process Modeling Notation) or UML (Unified
Expressed using an activity diagram of Modeling Language. In the next stage of modeling, the IT domain will be refined to the granularity of the service based on the SOA (Service Oriented Architecture) concept, and work in a process execution description language such as BPEL (Business Process Execution Language) Convert to process flow and execute. Because there is a difference between the business process flow diagram created from the user's perspective and the systemized business process flow diagram, it is not easy to see the system movements based on the systemized business process flow diagram from the user perspective. There is a disadvantage of not.

  FIG. 7 is an example showing a flowchart of a business process created from the user's viewpoint using BPMN. Business personnel are composed of an operator 101, a business system 102, and another department system 103. When the business system 102 is constructed, the business system 102 performs a business process in cooperation with the operator 101 and other department systems 103 while exchanging messages. Among these, the operator 101 is a process performed by a human and is a non-systemized area. The other department system 103 is a black-boxed system area that has already been constructed and is operating and cannot be renewed. The messages 121, 122, 123, and 124 indicate messages that are exchanged asynchronously between business parties. Message waiting 111, 115, 118, 119 is a process of waiting for each message as an asynchronous event. The business process includes a confirmation response 112, initial processing 113, processing request 114, business processing 116, confirmation request 117, processing request 120, and processing result notification 121.

FIG. 8 shows an example in which a BPEL is used to systematize a user-view business process flowchart described in BPMN in FIG. The range to be systemized is only the business system 102. The business system 102 is expanded to a service granularity and is converted into a business system process flowchart 201. 7 differs from FIG. 8 in that the business process 116 in FIG. 7 is different from the condition determination 205, service B in FIG.
206, service C 207, and service D 208. In general, the flow chart of business processes created from the user's perspective and the flow chart of business processes created when systematizing are different in granularity and include non-systemization elements such as other systems and internal systems that cannot understand internal processing. .

  For emergency situations such as the occurrence of a system failure, in addition to quickly identifying the cause of the system failure, the impact of the system failure on the business can be found on the business process flowchart created from the user's perspective. This will help you choose the best measure to mitigate business damage. In general, for a system failure that occurs in an IT-enabled area, regardless of whether the cause of the failure is a software failure or a hardware failure, analyzing the impact of the failure on the business area This is called impact analysis. In order to perform business impact analysis, IT resources are associated with business processes from the user's perspective, and the reverse mapping from the systemized business process flowchart to the business process flowchart created from the user perspective is performed. Furthermore, on the business process flowchart created from the user's perspective, the scope of other business processes affected by the business process in which the system failure has occurred is identified, and the degree of influence on the identified business process is obtained and displayed.

  A method is known in which linkage / dependency relationships between IT resources are defined in advance, and when the system failure occurs, the influence range of the system failure is analyzed from the definition of linkage / dependency relationships between IT resources (for example, Patent Document 1).

Also, in BAM (Business Activity Monitoring), a method for solving a difference between a business process flowchart created from a user's viewpoint and a systemized business process flowchart by mapping is known.
JP 2005-258501 A

  By the way, in the business impact analysis, the analysis result should be displayed with respect to the business process flowchart created from the user's viewpoint. For this purpose, it is necessary to associate IT resources with business processes from the user's viewpoint, and to map in a reverse direction from the systemized business process flowchart to the business process flowchart created from the user's viewpoint.

  FIG. 9 is a diagram showing problems of a conventional business impact analysis result notification destination. Due to the difference between FIG. 7 and FIG. 8, there is a difference between the business process flowchart 301 created from the user viewpoint by BPM and the systemized business process flowchart 302. The system monitoring mechanism 306 monitors the execution log of the process executed by the process execution engine 303, and when a system failure pattern is found, notifies the business impact analysis mechanism 308 of the business impact analysis result caused by the system failure. However, there is a problem in that it cannot be displayed on the flow chart 301 of the business process created from the user's viewpoint, although it can be displayed on the flow chart 302 of the systemized business process.

Also, when displaying the business impact analysis results, when identifying and displaying the other business processes affected by the business process in which a system failure has occurred and determining the degree of influence on that business process, arrays, links, trees, etc. With the simple data structure, there is a problem that an appropriate analysis result corresponding to a complicated business rule cannot be displayed.

In view of the above situation, the present invention can display a business impact analysis result caused by a system failure when the system failure occurs, on a flow chart of a business process created from the viewpoint of the user. The purpose is to provide a business impact analysis monitoring system.
In addition, the present invention can be applied to other business processes in which a system failure occurs dynamically according to the pattern of the generated system failure on the flow chart of the business process created from the user's viewpoint when a system failure occurs. The purpose is to identify the scope of a business process and obtain and display the degree of influence on the identified business process.

In order to solve the above problems, the present invention provides the following configurations.
The invention according to claim 1 is a business impact analysis monitor system at the time of system failure occurrence using a computer, which performs a business impact analysis at the time of system failure occurrence and displays an impact range and degree of influence on business.
The computer assigns a unique process identifier to a business process in the business process flowchart created from the user's perspective, and creates a process activity information entry;
Means for registering the created process activity information in the process mapping information storage means included in the computer in addition to the process activity information array;
Means for acquiring, from the process mapping information storage means, process activity information corresponding to a business process to be detailed using a process identifier as a key;
It means for determining whether rewritten there is a sub-process which is developed for the refinement of the process,
If there is expanded subprocess includes means for adding a sub-process information to the sub-process information sequence, and registers to said process mapping information storing means,
When the system monitoring mechanism provided in the computer finds a system failure, the sub-process information of the business process in which the system failure has occurred is obtained from the process execution log stored in the process execution log storage means provided in the computer. Means,
Means for determining whether there is an entry of a process activity information array in the process mapping information storage means;
If there is an entry, means for acquiring process activity information one entry at a time from the process activity information array in the process mapping information storage means;
Means for determining whether there is an entry in the sub-process information array pointed to from the acquired process activity information;
If there is an entry, means for obtaining subprocess information one entry at a time from the subprocess information array;
Means for determining whether the acquired sub-process information matches the sub-process information of the business process in which the system failure has occurred;
If the acquired subprocess information matches the subprocess information of the business process in which the system failure has occurred, the business process having the process activity information including the entry of the acquired subprocess information is identified as the business process in which the system failure has occurred. And a means for displaying information on the business process correlated with the identified business process on the business process flow chart created from the user's viewpoint using the business impact analysis result display mechanism. It provides a business impact analysis monitor system when a system failure occurs.

The invention according to claim 2 is characterized in that the computer determines whether there is another business process correlated with the business process with respect to the business process in the flowchart of the business process created from the user's viewpoint;
If there are other business processes, a correlation rule between the business processes is described using a rule description language, added to the process correlation rule array, and then registered in a process correlation rule storage unit included in the computer; ,
Means for acquiring process activity information of a business process in which a system failure has occurred, from the process mapping information storage means when the system monitoring mechanism finds a system failure;
Means for referring to the process correlation rule storage means to determine whether there is an entry in the process correlation rule array pointed to by the acquired process activity information;
Means for acquiring process correlation rules one entry at a time from the process correlation rule array stored in the process correlation rule storage means if there are entries;
The acquired process correlation rule is executed by the rule engine, and the business process correlated with the business process in which the system failure has occurred and the business impact level,
A means of accumulating a set of business impact and business impact of system failure that have the correlation
2. The apparatus according to claim 1, further comprising means for displaying a set of the accumulated business process and business influence level on a flow chart of the business process created from a user's viewpoint using a business impact analysis result display mechanism. It provides a business impact analysis monitoring system when a system failure occurs.

According to the business impact analysis monitor system when a system failure occurs according to the present invention,
When a system failure occurs, the business impact analysis result caused by the system failure can be displayed on the business process flowchart created from the user's perspective.
Also, when a system failure occurs, on the business process flowchart created from the user's perspective, specify the range of other business processes that are affected by the business process in which the system failure has occurred, and obtain the degree of impact on the identified business process. Can be displayed.

Hereinafter, embodiments of the present invention will be described with reference to the drawings showing examples.
FIG. 1 is a diagram showing a schematic configuration of a business impact analysis monitor system according to an embodiment of the present invention. This configuration is based on the premise that BPM takes a top-down approach, systematizes the results of business modeling, and automatically executes the systemized process. When it occurs, it is possible to display the business impact analysis result from the user's viewpoint with respect to the result of the business modeling.

As shown in FIG. 1, the business impact analysis monitor system according to the present embodiment is configured using a computer, and includes a modeling support mechanism 401, a BPEL support mechanism 402, a process execution mechanism 403, and a process execution log output mechanism 404. The system monitoring mechanism 405, the business impact analysis mechanism 406, the business impact analysis result display mechanism 407, the repository editing mechanism 408, the rule engine 409, the process execution log storage means 410, and the repository mechanism 411.
The repository mechanism 411 includes a process mapping information storage unit 412 and a process correlation rule storage unit 413.
The mechanism and means are provided in a computer or realized by reading a computer program required by a CPU installed in the computer.
The BPEL support mechanism 402 is an example of a case where a BPEL-compatible process execution mechanism 403 is used. When a process execution mechanism that executes a process flow described other than BPEL is used, the BPEL support mechanism 402 becomes an editor for the process flow.

In FIG. 1, a mechanism having an interface related to a user is a modeling support mechanism 401, a BPEL support mechanism 402, a business impact analysis result display mechanism 407, and a repository editing mechanism 408.
For example, the modeling support mechanism 401 takes the form of an editor that can edit a business flow diagram using a graphic representing a business process, and supports creation of a result of modeling from the user viewpoint as a business process flow diagram. The format of the business process flowchart created from the user's viewpoint includes a BPMN diagram and a UML activity diagram.

  The modeling support mechanism 401 registers, in the process mapping information storage unit 412 in the repository mechanism 411, a unique process identifier assigned to each business process in the business process flowchart generated from the user's viewpoint. The modeling support mechanism 401 stores, in the process correlation rule storage unit 413 in the repository mechanism 411, a rule that describes the correlation between each business process in the flowchart of the business process created from the user's viewpoint and the other business process. sign up. Normally, static relationship expressions such as trees and graphs are used to describe the correlation of business processes. In the present invention, rules are described as rules using a rule description language and centrally managed by the repository mechanism 411. The point is different.

The flow chart of the business process created from the user's viewpoint created by the modeling support mechanism 401 is output in a process description language such as XPDL (XML-Based Process Definition Language) and is input to the BPEL support mechanism 402 so that the systemization can be performed. Convert to the original business process flowchart. However, since the business process flow diagram created from the user's perspective is created without considering systematization, it can be linked to business processes existing in other departmental systems and existing systems, and It is necessary to rewrite in detail so that it becomes a flow chart of a business process having a service granularity that can be executed by the process execution mechanism 403, such as the addition of a non-functional process required for systemization. The BPEL support mechanism 402 registers an operation for refining the business process flow in the process mapping information storage unit 412 in the repository mechanism 411 and outputs the completed executable business process flow in BPEL. The existence of the process mapping information storage unit 412 maintains the correspondence between the business process flowchart created from the user's point of view and the systematized business process flowchart capable of automatic execution.
When the process execution mechanism 403 executes the BPEL flow output by the BPEL support mechanism 402, the execution log output mechanism 404 associated with the process execution mechanism 403 indicates the execution status of the service corresponding to each process of the BPEL flow. It accumulates in the process execution log storage means 410. Of the services called from the BPEL flow, when the other department system or the existing system is reused as a business process, or the process execution log of a human business process, the corresponding execution log output mechanism 404 is prepared, and the execution status Are stored in the process execution log storage means 410.

  An object of the present invention is to display an impact range of a system failure as a business impact analysis result on a business process flowchart created from the user's viewpoint when a system failure occurs. In order to realize the object, a process mapping information storage unit 412 and a process correlation rule storage unit 413 are installed in the repository mechanism 411 of FIG.

FIG. 2 shows an example of the data structure of the process mapping information storage unit 412 and the process correlation rule storage unit 413 in the repository mechanism 411.
Process activity information 501 is created for each business process in the business process flowchart created from the user's perspective. In order to grasp the business that is affected by the system failure, the process activity information 501 corresponding to each business process is used as a basic unit. The process activity information 501 is distinguished from other process activity information by a unique process identifier 511. Further, the process activity information 501 has a process correlation rule array 504 including process correlation rules 515 that are rules describing the correlation between the business process and other business processes. If the business process has no correlation with other business processes, the process correlation rule array 504 is empty. Further, the process activity information 501 has a sub-process information array 503 including sub-process information 514 for identifying the sub-process when the process is detailed as a sub-process or the like at the time of systemization.

FIG. 3 is a flowchart in the case of adding a business process in the process of creating a business process flowchart created from the user's viewpoint using the modeling support mechanism 401. In FIG. 3, in a part 611 of a business process flowchart generated from the user's viewpoint, a business process 614 is added to the next step of the business process 613. The flow in this case is as follows.
A unique process identifier is assigned to the business process 614 to create an entry of process activity information. (Step 601)
It is determined whether there is another business process that has a correlation with the business process 614. (Step 602)
If there is another business process correlated with the business process 614 in step 602, a correlation rule between the business processes is described using a rule description language such as RuleML and added to the process correlation rule array 504. After that, it registers in the process correlation rule storage means 413 and returns to step 602. (Step 603)
If there is no other business process correlated with the business process 614 in step 602, the process activity information 502 is added to the process activity information array 501 and then registered in the process mapping information storage unit 412. Then, the process ends. (Step 604)

FIG. 4 is a flowchart when the work flow diagram is detailed when the work flow diagram created from the user viewpoint is systematized using the BPEL support mechanism 402. The BPEL support mechanism 402 also has a general BPEL editor function, and outputs a systemized business process flowchart in BPEL.
In FIG. 4, the flow in the case where the business process 712 in the flow diagram 711 created from the user's viewpoint is detailed upon systemization and converted into the systemized business process flow diagram 713 is as follows. Become.
The process activity information 502 corresponding to the business process to be detailed is acquired from the process mapping information storage unit 412 using the process identifier as a key. (Step 701)
Determine whether there are subprocesses to be expanded by refining the process. (Step 702)
If there is a subprocess to be expanded in step 702, the subprocess information 514 is added to the subprocess information array 503, registered in the process mapping information storage means 412, and the process returns to step 702. (Step 703)
If there is no other sub-process to be expanded in step 702, the process mapping information storage unit 412 is updated with the process activity information 502, and the process ends. (Step 704)

  FIG. 5 is a flowchart for identifying a business process directly affected by a system failure. In FIG. 5, the process including the sub-process information output by the execution log output mechanism 404 in the process in which the process execution mechanism 403 automatically executes the flow diagram 416 of the business process systemized by the BPEL support mechanism 402 in FIG. 1. When the system monitoring mechanism 405 periodically monitors the execution log storage unit 410 and detects a failure pattern in the process execution log storage unit 410 by pattern matching or the like, the failure is detected when the business impact analysis unit 406 is notified. The flow of processing for identifying the business process that is directly affected is as follows.

When the system monitoring mechanism 405 finds a system failure, the subprocess information of the business process in which the system failure has occurred is obtained from the process execution log stored in the process execution log storage unit 410. (Step 801)
It is determined whether or not there is an entry for the process activity information array in the process mapping information storage unit 412. (Step 802)
If there is an entry in the process activity information array, one entry of process activity information 502 is acquired from the process activity information array 501 in the process mapping information storage unit 412. (Step 803)
It is determined whether there is an entry in the sub-process information array pointed to from the process activity information 502 acquired in step 803, and if not, the process returns to step 802. (Step 804)
If there is an entry in the subprocess information array, one entry of subprocess information 514 is acquired from the subprocess information array 503 pointed to by the process activity information 502. (Step 805)
It is checked whether the sub-process information 514 acquired in step 805 matches the sub-process information of the business process in which the system failure has occurred acquired in step 801. If not, the process returns to step 804. (Step 806)
If they match, all the business processes having a correlation with respect to the reference source business process of the sub-process information are listed, displayed on the business impact analysis result display mechanism 407, and the process returns to step 804. (Step 807)

FIG. 6 is a flowchart in the case where the influence range of the system failure is displayed on the flow chart of the business process created from the user viewpoint, and details step 807 in FIG. 5. In FIG. 6, the flow of processing for displaying the range of business processes affected by the system failure from the business process in which the system failure has occurred on the business process flow diagram created from the viewpoint of the user specified in FIG. become that way.
The process activity information 502 of the business process in which the system failure has occurred is acquired from the process mapping information storage unit 412. (Step 901)
If there is an entry in the process correlation rule array pointed to by the process activity information 502, the process correlation rule storage unit 413 is checked to see if there is an entry. (Step 902)
If there is an entry, one process correlation rule is acquired from the process correlation rule array 504 stored in the process correlation rule storage unit 413. (Step 903)
The process correlation rule 515 acquired in step 903 is executed by the rule engine 409, and the business process correlated with the business process in which the system failure has occurred and the business influence degree are obtained. (Step 904)
A set of business processes having a correlation obtained at step 904 and a business impact level of a system failure is accumulated. If there are a plurality of sets, all the sets are accumulated, and the process returns to step 902. (Step 905)
If there is no other entry in the process correlation rule array in step 902, the business process and business impact level pair accumulated in step 905 is used for the business process created from the user's viewpoint using the business impact analysis result display mechanism 407. Display on the flow chart. (Step 906)

It is explanatory drawing which shows roughly the business impact analysis monitor system at the time of system failure generation | occurrence | production by this invention. It is a figure which shows an example of the data structure of the repository by this invention. It is a flowchart in the case of adding a process to the flowchart of the business process created from a user viewpoint by this invention. It is a flowchart in the case of detailing a process at the time of preparation of the flowchart at the time of systematization by this invention. It is a flowchart in the case of identifying the business process which a system failure directly influences by this invention. It is a flowchart in the case of displaying on the flowchart of the business process produced from the user viewpoint by the influence range of a system failure by this invention. It is a figure which shows an example of the flowchart of the business process produced from a user viewpoint using BPMN. It is a figure which shows an example of the flowchart of the business process systemized using BPEL. It is a figure which shows the problem of the conventional business impact analysis result notification destination.

Explanation of symbols

405 System monitoring mechanism 409 Rule engine 410 Process execution log storage unit 412 Process mapping information storage unit 413 Process correlation rule storage unit 501 Process activity information array 502 Process activity information 503 Sub process information array 504 Process correlation rule array 514 Sub process information 515 Process Association rules

Claims (2)

A business impact analysis monitor system when a system failure occurs using a computer, which analyzes the business impact at the time of the system failure and displays the impact range and degree of impact on the business,
The computer assigns a unique process identifier to a business process in the business process flowchart created from the user's perspective, and creates a process activity information entry;
Means for registering the created process activity information in the process mapping information storage means included in the computer in addition to the process activity information array;
Means for acquiring, from the process mapping information storage means, process activity information corresponding to a business process to be detailed using a process identifier as a key;
It means for determining whether rewritten there is a sub-process which is developed for the refinement of the process,
If there is expanded subprocess includes means for adding a sub-process information to the sub-process information sequence, and registers to said process mapping information storing means,
When the system monitoring mechanism provided in the computer finds a system failure, the sub-process information of the business process in which the system failure has occurred is obtained from the process execution log stored in the process execution log storage means provided in the computer. Means,
Means for determining whether there is an entry of a process activity information array in the process mapping information storage means;
If there is an entry, means for acquiring process activity information one entry at a time from the process activity information array in the process mapping information storage means;
Means for determining whether there is an entry in the sub-process information array pointed to from the acquired process activity information;
If there is an entry, means for obtaining subprocess information one entry at a time from the subprocess information array;
Means for determining whether the acquired sub-process information matches the sub-process information of the business process in which the system failure has occurred;
If the acquired subprocess information matches the subprocess information of the business process in which the system failure has occurred, the business process having the process activity information including the entry of the acquired subprocess information is identified as the business process in which the system failure has occurred. And a means for displaying information on the business process correlated with the identified business process on the business process flow chart created from the user's viewpoint using the business impact analysis result display mechanism. Business impact analysis monitoring system when a system failure occurs. Means for determining whether there is another business process correlated with the business process with respect to the business process in the flowchart of the business process created from the user's viewpoint;
If there are other business processes, a correlation rule between the business processes is described using a rule description language, added to the process correlation rule array, and then registered in a process correlation rule storage unit included in the computer; ,
Means for acquiring process activity information of a business process in which a system failure has occurred, from the process mapping information storage means when the system monitoring mechanism finds a system failure;
Means for referring to the process correlation rule storage means to determine whether there is an entry in the process correlation rule array pointed to by the acquired process activity information;
Means for acquiring process correlation rules one entry at a time from the process correlation rule array stored in the process correlation rule storage means if there are entries;
The acquired process correlation rule is executed by the rule engine, and the business process correlated with the business process in which the system failure has occurred and the business impact level,
A means of accumulating a set of business impact and business impact of system failure that have the correlation
2. The apparatus according to claim 1, further comprising means for displaying a set of the accumulated business process and business influence level on a flow chart of the business process created from a user's viewpoint using a business impact analysis result display mechanism. Business impact analysis monitoring system when a system failure occurs.

Images