<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta />
    <article-meta>
      <title-group>
        <article-title>A Systematic Approach to De ne Requirements and Engineer the Ontology for Semantically Merging Data Sets for Personal-Centric Healthcare Systems</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <string-name>Aleksandr Kormiltsyn</string-name>
          <email>alexandrkormiltsyn@gmail.com</email>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <aff id="aff0">
          <label>0</label>
          <institution>Department of Software Systems, Tallinn University of Technology</institution>
          ,
          <addr-line>Akadeemia tee 15A, 12816, Tallinn</addr-line>
          ,
          <country country="EE">Estonia</country>
        </aff>
      </contrib-group>
      <fpage>91</fpage>
      <lpage>99</lpage>
      <abstract>
        <p>A fundamental paradigm shift to patient-centric health services is needed to meet the challenges such as increasing healthcare costs, ageing population, and unhealthy lifestyles. Designing patient-centric services is challenging because of medical- and health data heterogeneity and lack of standardization for Personal Health Records (PHR). Further, designing patient-centric systems, especially in healthcare is a challenge as they are in uenced by emotions when users are in uenced by emotions triggered by privacy issues. In this study, we focus on the engineering method to design a patient-centric system that considers medicaldata heterogeneity and emotional security issues. We plan to develop a methodology for designing a patient-centric system with a multi-agent system (MAS) approach where agents operate with smart contracts. An emotional security framework is integrated into the design of such systems. Multi-faceted validation and veri cation are used to evaluate the engineered method. A framework for Evaluation in Design Science Research (FEDS) is used to de ne the evaluation activities and tools.</p>
      </abstract>
      <kwd-group>
        <kwd>eHealth</kwd>
        <kwd>Patient-centric systems</kwd>
        <kwd>Smart contracts</kwd>
        <kwd>Emotional security</kwd>
        <kwd>Multi-agent systems</kwd>
        <kwd>Ontology</kwd>
      </kwd-group>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>-</title>
      <p>
        Health information technology has the potential to improve medical quality,
patient safety, educational resources and patient-physician communication while
decreasing costs [
        <xref ref-type="bibr" rid="ref7">7</xref>
        ]. The development of central systems such as Smart Open
Services for European Patients (epSOS)1 and the Estonian Health Information
System (EHIS)2 increases interoperability on national- and international levels.
Still, the available data is often fragmented and the secondary use is limited
[
        <xref ref-type="bibr" rid="ref11">11</xref>
        ]. The term 'secondary use' can be de ned as the use of data collected for one
purpose to study a new problem. Secondary uses of data could include quality
      </p>
    </sec>
    <sec id="sec-2">
      <title>1 http://www.epsos.eu 2 http://www.e-tervis.ee</title>
      <p>
        measurement, public health surveillance, and patient access to data about their
illness [
        <xref ref-type="bibr" rid="ref6">6</xref>
        ]. The fragmentation stems from decentralized and disintermediated
data sets.
      </p>
      <p>The main purpose of Personal Health Records (PHR) is that a patient is the
author and owner of his/her medical data that can be shared with other
individuals, including healthcare professionals, or automated clinical decision-support
services. The growing amount of personal data available increases the role of
patient-centric systems in healthcare. In contrast, Electronic Health Records
(EHR) are created and owned by healthcare providers.</p>
      <p>The complexity of data analysis, processing and security increases together
with the number of di erent healthcare systems. Another problem is that the
data is created by healthcare professionals and based on disease episodes that
are only a part of the patients' health-related data and history. For example,
several patients with chronic conditions measure their blood pressure, or blood
glucose regularly while these data sets are not stored in the context of EHR and
thus, limiting their future use.</p>
      <p>Design and development of patient-centric systems are challenging because
users are in uenced by emotions triggered by privacy issues. As users are not
forced to use such software, these issues lead to adoption failure, e.g., individuals
do not trust to share their sensitive medical data with an application that does
not provide transparency of personal data usage.</p>
      <p>The importance for a healthcare domain is related to the possibility of sharing
PHR between di erent stakeholders. Individuals could manage their own data
and share it with healthcare providers and other stakeholders such as medical
researchers, health insurance providers, and automated Clinical Decision
Support Systems (CDSS). Additional medical data available to healthcare provider
enables the provision of personalized guidelines to a patient. Personalized
guidelines help patients to understand how to achieve their goals. On the other hand,
the availability of CDSS reduces the number of people requiring direct contact
with a doctor and increases the accessibility of medical services to people who
really need it. Further, researchers gain access to personal medical data.</p>
      <p>In this research, we focus on the PHR usage in the healthcare processes
and involvement of patients as main responsible stakeholders by engineering a
method for designing decentralized patient-centric systems. The main proposed
method's concepts are: the number of healthcare processes is not limited; trust,
transparency and in uence of patient's emotions during medical data sharing
are essential for the usage of such a system; medical data heterogeneity is
unavoidable.</p>
      <p>To enable these main concepts we use di erent techniques: Multi Agent
Systems (MAS) to support an unlimited number of healthcare processes, smart
contracts are used by both human and non-human agents to enable trust and
transparency while sharing PHR, embedding emotional security framework in
the MAS design phase to avoid negative emotions while using such a system.
The ontology is used to describe medical data integration processes between
di erent agents.</p>
      <p>The remainder of the paper is structured as follows. Section 2 presents related
work and Section 3 describes the problem statement as well as our contributions.
Next, Section 4 presents the design-science research method research actions in
details and Section 5 references the conference paper as initial results used as a
basis for the current research. Section 6 provides the evaluation plan for designed
methodology, Section 7 concludes the paper together with providing directions
for future research. In a nal Section 8 acknowledgements to supervisors are
presented.
2</p>
      <sec id="sec-2-1">
        <title>State of the Art</title>
        <p>
          Literature review [
          <xref ref-type="bibr" rid="ref22 ref3 ref5">3, 5, 22</xref>
          ] shows that researchers provide solutions for
integration challenges based on data-heterogeneity reduction by developing a new
ontology or merging existing ones. This approach is e ective for decreasing the
heterogeneity of di erent EHR standards and a limited number of processes.
However, the amount of PHR data is rapidly growing with the development of,
e.g., IoT devices. The number of processes using PHR is not limited, as
patients visit di erent hospitals. Therefore, an e cient integration of PHR and
EHR requires a dynamic approach that focuses on the process rather than on
data standardization. Paying attention to data- ow processes is an important
part of EHR and PHR data integration as health data ows along processes
in distributed systems. Research [
          <xref ref-type="bibr" rid="ref2">2</xref>
          ] proposes smart contracts for logging the
patient-provider relationships that associate a medical record with viewing
permissions and data retrieval instructions for the execution on external databases.
        </p>
        <p>
          The role of emotions and associated quality goals that in uence the adoption
and e ective use of socio-technical systems is detailed in research [
          <xref ref-type="bibr" rid="ref15">15</xref>
          ]. In order to
design and develop a system, it is important to elicit requirements in the form of
functional, nonfunctional and emotional goals [
          <xref ref-type="bibr" rid="ref15">15</xref>
          ]. To do this, some research has
identi ed methodologies for segmenting the target users of a system as di erent
stakeholders have di erent goals and requirements [
          <xref ref-type="bibr" rid="ref21">21</xref>
          ]. Research [
          <xref ref-type="bibr" rid="ref21">21</xref>
          ]
hypothesizes that user segmentation is helpful in requirements engineering to direct
systems analysts and owners to segment potential users and select target users
as the rst stage of requirements engineering. In [
          <xref ref-type="bibr" rid="ref17">17</xref>
          ], the authors introduce a
straightforward notation for modeling emotional goals in agent-oriented
modeling. Further, little is known about software engineering methodology de ning
how best emotional requirements can be elicited from stakeholders. There is
no systematic methodology to help elicit such emotional requirements early on
before the systems are designed.
3
        </p>
      </sec>
      <sec id="sec-2-2">
        <title>Problem Statement and Contributions</title>
        <p>Healthcare services become more expensive and their accessibility to patients
decreases. Patient-centric healthcare systems enable PHR data collection and
processing by CDSS and often do not require physical contact between patient
and doctor. The PHR and EHR integration requires a solution for medical data
heterogeneity as PHR does not have common data standard. The processing of
integrated PHR and EHR needs to be transparent for patients so they adopt
the patient-centric system. In this paper, we ll two gaps: (1) the integration
process of PHR and EHR; (2) and embedding an emotional security framework
into the design of patient-centric systems. In the scope of integrated healthcare,
there are di erent main stakeholders: individuals, researchers that use medical
data, healthcare professionals, state organizational units as statistics and social
departments, and insurance companies.</p>
        <p>We develop a methodology for patient-centric systems design. The
methodology includes an emotional attachment framework to engage users and alleviate
the users from feeling a negative emotion such as distrust, lack of ownership
private and con dential data. Lack of transparency in health data processing
leads to negative feelings for an individual. Target users for this methodology
are IT architects and designers because there is no current methodology in IT
for designing patient-centric systems.</p>
        <p>Our planned contribution is a methodology for the design of dynamic PHR
and EHR integration processes. We plan to use intelligent agents in MAS and
smart contracts for sharing PHR. Intelligent agents are used for PHR collection
from personal devices and can provide feedback based on the collected data
analysis while blockchains provide transparency of PHR usage to the patient.
To eliminate emotional security risks, we expand traditional functional and
nonfunctional requirements of software system with emotional ones.</p>
        <p>The main research question is how to dynamically merge and process
integrated PHR and EHR in the cross-organizational processes of the patient-centric,
decentralized healthcare system? To answer this question, a number of challenges
(sub-questions) need to be addressed.</p>
        <p>The rst sub-question is how to collect and process PHR data in the
context of integrated healthcare to improve the quality of diagnostics and cures?
To answer this question, we focus on the dynamic integration of EHR and PHR
considered from a process-based point of view. After de ning the dynamic
integration process, we turn to the shared cross-organizational processes.</p>
        <p>The second sub-question is how to specify cross-organizational processes for
handling EHR and PHR in a dynamic and secure way in a distributed
patientcentric systems? The dynamic integration of EHR with PHR and the
embedded emotional security framework enables the e ective adoption and usage of
integrated data in a di erent number of e-services. Smart contracts used by
intelligent agents in multi-agent systems (MAS) eliminate trust issues between
stakeholders while providing a patient with PHR and EHR data security.</p>
        <p>
          As the security of personal data is a very sensitive and important topic, the
third research question is how to perform a privacy-aware analysis of integrated
PHR and EHR in the context of the cross-organizational process in a distributed
patient-centric system? The privacy aware protocol [
          <xref ref-type="bibr" rid="ref19">19</xref>
          ] that is used in
datadriven EHR systems for private data analysis is extended to support integrated
PHR and emotional security aspects. The protocol is based on the emotional
requirements to PHR data sharing as well as the ontology for the collection of
emotional goals and secured views proposed in [
          <xref ref-type="bibr" rid="ref19">19</xref>
          ].
4
        </p>
      </sec>
      <sec id="sec-2-3">
        <title>Research Methodology and Approach</title>
        <p>
          For this research, the design-science research method is considered. This method
is solution-oriented and requires the creation of an innovative, purposeful artifact
for a special problem domain [
          <xref ref-type="bibr" rid="ref24">24</xref>
          ]. First, we consider the dynamic integration
process for integrating the PHR with EHR. The proposed process is used as
a foundation for designing cross-organizational processes where medical data
is used by di erent human- and non-human agents. Finally, we de ne security
protocol based on the emotional aspects of information security.
        </p>
        <p>
          For designing dynamic integration processes, the requirements for PHR data
collection are de ned. The ontology for the PHR and EHR data integration and
the integration process ow are presented. The requirements are de ned with
the Agent-Oriented Modelling (AOM) approach as in [
          <xref ref-type="bibr" rid="ref14 ref23">23, 14</xref>
          ]. According to [
          <xref ref-type="bibr" rid="ref20">20</xref>
          ],
analyzing the problem of this socio-technical domain can be performed by
using a goal model. The objective of goal models is to serve as communication
media between technical- and non-technical stakeholders for generating
understandable domain knowledge. We use goal models in the context of
requirementsengineering processes.
        </p>
        <p>
          The processing of integrated EHR and PHR requires an ontology de nition
to reduce semantic- and syntactic heterogeneity. An ontology for the dynamic
integration process is designed using the Protege tool3 together with the Web
Ontology Language (OWL)4. OWL is used to describe taxonomies and classi
cation networks. An evaluation of the ontology is performed with the HermiT5
reasoner that is based on a novel hypertableau calculus [
          <xref ref-type="bibr" rid="ref18">18</xref>
          ] to provide much
more e cient reasoning than any previously known algorithm.
        </p>
        <p>
          We describe the PHR and EHR integration process with the Business Process
Model and Notation (BPMN) [
          <xref ref-type="bibr" rid="ref1">1</xref>
          ], a graphical representation for specifying
business process model. BPMN is suitable for reasoning about cross-organizational
integration processes including PHR- and EHR integration process. The
integration process is validated with the Signavio6 tool that checks BPMN diagrams
for existing con icts.
        </p>
        <p>
          For the evaluation of de ned integration process of PHR and EHR, we build a
formal Colored Petri Nets (CPN) model in order to detect and eliminate eventual
design aws, missing speci cations, security and privacy issues [
          <xref ref-type="bibr" rid="ref10 ref8">8, 10</xref>
          ]. A CPN
is a graphical oriented language for the design, speci cation, simulation as well
as the veri cation of systems and describes the states of a modeled system and
the events (transitions) that cause the system to change states [
          <xref ref-type="bibr" rid="ref13">13</xref>
          ]. We refer the
reader to [
          <xref ref-type="bibr" rid="ref9">9</xref>
          ] for more information about CPN.
        </p>
      </sec>
    </sec>
    <sec id="sec-3">
      <title>3 http://protege.stanford.edu 4 https://www.w3.org/2001/sw/wiki/OWL 5 http://www.hermit-reasoner.com/ 6 https://www.signavio.com/</title>
      <p>
        To de ne the cross-organizational processes where medical data is used by
different human- and non-human agents, rst intelligent BDI agents are described
as they o er a straightforward formalization of reasoning human agents with
intuitive concepts (beliefs, desires, and intentions) that closely match human
reasoning[
        <xref ref-type="bibr" rid="ref4">4</xref>
        ]. Next, best practices for designing decentralized healthcare systems
are proposed.
      </p>
      <p>We de ne best practices for designing decentralized healthcare systems by
integrating smart contracts in the communication layer between di erent
nonhuman agents involved in the cross-organization process. To describe non-human
BDI agents, ontology built for the integration process in the previous step is
extended using OWL and validate it with HermiT reasoner.</p>
      <p>
        Emotional requirements for PHR handling and sharing processes are included
in the early stages of the PHR and EHR data integration. The emotional
framework [
        <xref ref-type="bibr" rid="ref16">16</xref>
        ] is integrated into the AOM approach and extends the AOM goal model
with emotional goals in order to de ne the emotional requirements for PHR data
sharing. The ontology for the integration process is extended to cover the
collection of emotional aspects. We use BPMN to describe the security protocol and
blockchain as a technology enabling transparency in the cross-organizational
process.
      </p>
      <p>To meet our goal of designing the architecture of a patient-centric system,
three milestones are de ned. First, the design of collecting and processing the
PHR data, then the speci cation of a cross-organizational process followed by
design of a secure PHR sharing protocol based on the emotional requirements. To
de ne requirements for the PHR data collection, we use AOM. The ontology for
the PHR and EHR integration process is de ned using OWL and the integration
process is described with BPMN. The speci cation of a cross-organizational
process includes a de nition of non-human agents described with AOM and OWL.
The usage of smart contracts is considered in the context of the dynamic
integration process. Secure PHR sharing protocol for the PHR includes a de nition
of emotional requirements for PHR data sharing described with AOM and the
emotional framework, followed by the ontology for PHR emotional aspects
collection described with OWL. Finally, we design a security protocol for PHR
sharing using BPMN and blockchain technology.
5</p>
      <sec id="sec-3-1">
        <title>Preliminary or Intermediate Results</title>
        <p>
          In the workshop paper [
          <xref ref-type="bibr" rid="ref12">12</xref>
          ], we consider the dynamic integration of EHR and
PHR from the process based point of view. The process work ow emphasizes the
EHR and PHR context di erence while the system requirements are de ned with
an AOM goal model describing functional and quality goals. The ontology for
the integration process de ned in the workshop paper is a foundation describing
main concepts for the integration process. Finally, the BPMN representation of
the integration process shows di erent stages of PHR- and EHR data preparation
and -processing. All these ndings set the scope of our research and we use them
as a basis for future work.
        </p>
      </sec>
      <sec id="sec-3-2">
        <title>Evaluation Plan</title>
        <p>We use a combination of di erent approaches for the evaluation. First, CPN
is used to evaluate processes in the design phase to eliminate, or minimize the
security risks. Also, it is possible to consider concurrency con icts,
dependability issues and detect and eliminate eventual design aws as well as security
and privacy issues with CPN. For architecture design, we use a combination of
Requirements Bazaar for requirements gathering and also for the evaluation of
the architecture. The Architecture Tradeo Analysis Method (ATAM) is used
for evaluating and analyzing in a qualitative and empirical way the
architecture of a patient-centric system with the related functional, non-functional and
emotional requirements. ATAM is mostly applied for exploring the use of
bestpractice architectural styles, for exploring quality attributes of architectures and
for evaluating existing systems. ATAM also helps to modify an architecture, or
integration work with new systems. Also, we use the HermiT reasoner for
validating the ontology for the integration process and BPMN for reasoning about
cross-organizational integration processes. We also conduct user-centered
evaluations to capture user experiences with the design of the system to measure
their level of engagement and emotional aspects. This evaluation we conduct
using the emotional attachment framework as a practice lens to direct interviews
and usability testing activities.
7</p>
      </sec>
      <sec id="sec-3-3">
        <title>Conclusions</title>
        <p>In this paper, we describe current issues and challenges in electronic healthcare,
focusing on the need to create a systematic approach to designing a
decentralized patient-centric system that meets these challenges. We then de ne three
milestones to meet our goal of designing the architecture of such a system. To
solve the PHR heterogeneity issue in healthcare processes, rst, the design of
collecting and processing PHR is proposed. However, the patient involvement in
healthcare processes creates additional challenges for such processes and
therefore, we present the speci cation for cross-organizational processes working with
PHR. Shifting the paradigm to patient-centric increases the role of patient
emotions and privacy issues. Thus, we design the secure PHR sharing protocol that
enables transparency of the PHR usage to the patient and based on the patient's
emotional requirements.
8</p>
      </sec>
      <sec id="sec-3-4">
        <title>Acknowledgments</title>
        <p>The author would like to thank both supervisors Alex Norta from Tallinn
Technical University of Technology and Antonette Mendoza from the University of
Melbourne.</p>
      </sec>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          1.
          <string-name>
            <surname>Allweyer</surname>
            ,
            <given-names>T.</given-names>
          </string-name>
          :
          <article-title>BPMN 2.0: introduction to the standard for business process modeling</article-title>
          .
          <source>BoD{Books on Demand</source>
          (
          <year>2016</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          2.
          <string-name>
            <surname>Azaria</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Ekblaw</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Vieira</surname>
            ,
            <given-names>T.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Lippman</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          :
          <article-title>Medrec: Using blockchain for medical data access and permission management</article-title>
          .
          <source>In: Open and Big Data (OBD)</source>
          , International Conference on. pp.
          <volume>25</volume>
          {
          <fpage>30</fpage>
          .
          <string-name>
            <surname>IEEE</surname>
          </string-name>
          (
          <year>2016</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref3">
        <mixed-citation>
          3.
          <string-name>
            <surname>del Carmen</surname>
          </string-name>
          Legaz-Garc a, M.,
          <string-name>
            <surname>Mart</surname>
            nez-Costa,
            <given-names>C.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Menarguez-Tortosa</surname>
            ,
            <given-names>M.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Fernandez-Breis</surname>
            ,
            <given-names>J.T.</given-names>
          </string-name>
          :
          <article-title>A semantic web based framework for the interoperability and exploitation of clinical models and ehr data</article-title>
          .
          <source>Knowledge-Based Systems 105</source>
          ,
          <fpage>175</fpage>
          {
          <fpage>189</fpage>
          (
          <year>2016</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref4">
        <mixed-citation>
          4.
          <string-name>
            <surname>Casali</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Godo</surname>
            ,
            <given-names>L.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Sierra</surname>
            ,
            <given-names>C.</given-names>
          </string-name>
          :
          <article-title>A graded bdi agent model to represent and reason about preferences</article-title>
          .
          <source>Arti cial Intelligence</source>
          <volume>175</volume>
          (
          <issue>7-8</issue>
          ),
          <volume>1468</volume>
          {
          <fpage>1478</fpage>
          (
          <year>2011</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref5">
        <mixed-citation>
          5.
          <string-name>
            <surname>Dogac</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Laleci</surname>
            ,
            <given-names>G.B.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Kirbas</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Kabak</surname>
            ,
            <given-names>Y.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Sinir</surname>
            ,
            <given-names>S.S.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Yildiz</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Gurcan</surname>
            ,
            <given-names>Y.</given-names>
          </string-name>
          :
          <article-title>Artemis: Deploying semantically enriched web services in the healthcare domain</article-title>
          .
          <source>Information Systems</source>
          <volume>31</volume>
          (
          <issue>4</issue>
          ),
          <volume>321</volume>
          {
          <fpage>339</fpage>
          (
          <year>2006</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref6">
        <mixed-citation>
          6.
          <string-name>
            <surname>Hersh</surname>
            ,
            <given-names>W.R.</given-names>
          </string-name>
          :
          <article-title>Adding value to the electronic health record through secondary use of data for quality assurance, research, and surveillance</article-title>
          .
          <source>Clin Pharmacol Ther</source>
          <volume>81</volume>
          ,
          <issue>126</issue>
          {
          <fpage>128</fpage>
          (
          <year>2007</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref7">
        <mixed-citation>
          7.
          <string-name>
            <surname>Hoyt</surname>
            ,
            <given-names>R.E.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Yoshihashi</surname>
            ,
            <given-names>A.K.</given-names>
          </string-name>
          : Health Informatics:
          <article-title>Practical guide for healthcare and information technology professionals</article-title>
          .
          <source>Lulu</source>
          . com (
          <year>2014</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref8">
        <mixed-citation>
          8.
          <string-name>
            <surname>Jensen</surname>
            ,
            <given-names>K.</given-names>
          </string-name>
          :
          <article-title>Coloured petri nets</article-title>
          .
          <source>In: Discrete Event Systems: A New Challenge for Intelligent Control Systems</source>
          , IEE Colloquium on. pp.
          <volume>5</volume>
          {
          <issue>1</issue>
          .
          <string-name>
            <surname>IET</surname>
          </string-name>
          (
          <year>1993</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref9">
        <mixed-citation>
          9.
          <string-name>
            <surname>Jensen</surname>
            ,
            <given-names>K.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Kristensen</surname>
            ,
            <given-names>L.M.</given-names>
          </string-name>
          :
          <article-title>Coloured Petri nets: modelling and validation of concurrent systems</article-title>
          . Springer Science &amp; Business
          <string-name>
            <surname>Media</surname>
          </string-name>
          (
          <year>2009</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref10">
        <mixed-citation>
          10.
          <string-name>
            <surname>Jensen</surname>
            ,
            <given-names>K.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Kristensen</surname>
            ,
            <given-names>L.M.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Wells</surname>
            ,
            <given-names>L.</given-names>
          </string-name>
          :
          <article-title>Coloured petri nets and cpn tools for modelling and validation of concurrent systems</article-title>
          .
          <source>International Journal on Software Tools for Technology Transfer</source>
          <volume>9</volume>
          (
          <issue>3-4</issue>
          ),
          <volume>213</volume>
          (
          <year>2007</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref11">
        <mixed-citation>
          11. Kopcke,
          <string-name>
            <given-names>F.</given-names>
            ,
            <surname>Trinczek</surname>
          </string-name>
          ,
          <string-name>
            <given-names>B.</given-names>
            ,
            <surname>Majeed</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.W.</given-names>
            ,
            <surname>Schreiweis</surname>
          </string-name>
          ,
          <string-name>
            <given-names>B.</given-names>
            ,
            <surname>Wenk</surname>
          </string-name>
          ,
          <string-name>
            <given-names>J.</given-names>
            ,
            <surname>Leusch</surname>
          </string-name>
          ,
          <string-name>
            <given-names>T.</given-names>
            ,
            <surname>Ganslandt</surname>
          </string-name>
          ,
          <string-name>
            <given-names>T.</given-names>
            ,
            <surname>Ohmann</surname>
          </string-name>
          ,
          <string-name>
            <given-names>C.</given-names>
            ,
            <surname>Bergh</surname>
          </string-name>
          ,
          <string-name>
            <surname>B.</surname>
          </string-name>
          , Rohrig, R., et al.:
          <article-title>Evaluation of data completeness in the electronic health record for the purpose of patient recruitment into clinical trials: a retrospective analysis of element presence. BMC medical informatics and decision making 13(1</article-title>
          ),
          <volume>37</volume>
          (
          <year>2013</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref12">
        <mixed-citation>
          12.
          <string-name>
            <surname>Kormiltsyn</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Norta</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          :
          <article-title>Dynamically integrating electronic-with personal health records for ad-hoc healthcare quality improvements</article-title>
          .
          <source>In: International Conference on Digital Transformation and Global Society</source>
          . pp.
          <volume>385</volume>
          {
          <fpage>399</fpage>
          . Springer (
          <year>2017</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref13">
        <mixed-citation>
          13.
          <string-name>
            <surname>Leiding</surname>
            ,
            <given-names>B.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Norta</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          :
          <article-title>Mapping requirements speci cations into a formalized blockchain-enabled authentication protocol for secured personal identity assurance</article-title>
        </mixed-citation>
      </ref>
      <ref id="ref14">
        <mixed-citation>
          14.
          <string-name>
            <surname>Lister</surname>
            ,
            <given-names>K.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Sterling</surname>
            ,
            <given-names>L.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Taveter</surname>
            ,
            <given-names>K.</given-names>
          </string-name>
          :
          <article-title>Reconciling ontological di erences by assistant agents</article-title>
          .
          <source>In: Proceedings of the fth international joint conference on Autonomous agents and multiagent systems</source>
          . pp.
          <volume>943</volume>
          {
          <fpage>945</fpage>
          .
          <string-name>
            <surname>ACM</surname>
          </string-name>
          (
          <year>2006</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref15">
        <mixed-citation>
          15.
          <string-name>
            <surname>Mendoza</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Miller</surname>
            ,
            <given-names>T.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Pedell</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Sterling</surname>
            ,
            <given-names>L.</given-names>
          </string-name>
          , et al.:
          <article-title>The role of users emotions and associated quality goals on appropriation of systems: two case studies</article-title>
        </mixed-citation>
      </ref>
      <ref id="ref16">
        <mixed-citation>
          16.
          <string-name>
            <surname>Miller</surname>
            ,
            <given-names>T.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Pedell</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Lopez-Lorca</surname>
            ,
            <given-names>A.A.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Mendoza</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Sterling</surname>
            ,
            <given-names>L.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Keirnan</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          :
          <article-title>Emotion-led modelling for people-oriented requirements engineering: The case study of emergency systems</article-title>
          .
          <source>Journal of Systems and Software</source>
          <volume>105</volume>
          ,
          <issue>54</issue>
          {
          <fpage>71</fpage>
          (
          <year>2015</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref17">
        <mixed-citation>
          17.
          <string-name>
            <surname>Miller</surname>
            ,
            <given-names>T.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Pedell</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Mendoza</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Keirnan</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Sterling</surname>
            ,
            <given-names>L.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Lopez-Lorca</surname>
            ,
            <given-names>A.A.</given-names>
          </string-name>
          :
          <article-title>Emotionally-driven models for people-oriented requirements engineering: the case study of emergency systems</article-title>
          .
          <source>IEEE Transactions on Software Engineering</source>
          (
          <year>2014</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref18">
        <mixed-citation>
          18.
          <string-name>
            <surname>Motik</surname>
            ,
            <given-names>B.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Shearer</surname>
            ,
            <given-names>R.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Horrocks</surname>
            ,
            <given-names>I.</given-names>
          </string-name>
          :
          <article-title>Hypertableau Reasoning for Description Logics</article-title>
          .
          <source>Journal of Arti cial Intelligence Research</source>
          <volume>36</volume>
          ,
          <volume>165</volume>
          {
          <fpage>228</fpage>
          (
          <year>2009</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref19">
        <mixed-citation>
          19.
          <string-name>
            <surname>Nguyen</surname>
            ,
            <given-names>T.A.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Le-Khac</surname>
            ,
            <given-names>N.A.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Kechadi</surname>
          </string-name>
          , M.T.:
          <article-title>Privacy-aware data analysis middleware for data-driven ehr systems</article-title>
          .
          <source>In: International Conference on Future Data and Security Engineering</source>
          . pp.
          <volume>335</volume>
          {
          <fpage>350</fpage>
          . Springer (
          <year>2017</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref20">
        <mixed-citation>
          20.
          <string-name>
            <surname>Norta</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Mahunnah</surname>
            ,
            <given-names>M.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Tenso</surname>
            ,
            <given-names>T.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Taveter</surname>
            ,
            <given-names>K.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Narendra</surname>
            ,
            <given-names>N.C.</given-names>
          </string-name>
          :
          <article-title>An agentoriented method for designing large socio-technical service-ecosystems</article-title>
          .
          <source>In: 2014 IEEE World Congress on Services</source>
          . pp.
          <volume>242</volume>
          {
          <fpage>249</fpage>
          .
          <string-name>
            <surname>IEEE</surname>
          </string-name>
          (
          <year>2014</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref21">
        <mixed-citation>
          21.
          <string-name>
            <surname>Sherkat</surname>
            ,
            <given-names>M.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Miller</surname>
            ,
            <given-names>T.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Mendoza</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          :
          <article-title>Does it t me better? user segmentation in requirements engineering</article-title>
          .
          <source>In: Software Engineering Conference (APSEC)</source>
          ,
          <year>2016</year>
          23rd Asia-Paci c. pp.
          <volume>65</volume>
          {
          <fpage>72</fpage>
          .
          <string-name>
            <surname>IEEE</surname>
          </string-name>
          (
          <year>2016</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref22">
        <mixed-citation>
          22.
          <string-name>
            <surname>Sonsilphong</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          , Arch-int, N.,
          <string-name>
            <surname>Arch-int</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Pattarapongsin</surname>
            ,
            <given-names>C.</given-names>
          </string-name>
          :
          <article-title>A semantic interoperability approach to health-care data: Resolving data-level con icts</article-title>
          .
          <source>Expert Systems</source>
          <volume>33</volume>
          (
          <issue>6</issue>
          ),
          <volume>531</volume>
          {
          <fpage>547</fpage>
          (
          <year>2016</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref23">
        <mixed-citation>
          23.
          <string-name>
            <surname>Sterling</surname>
            ,
            <given-names>L.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Taveter</surname>
            ,
            <given-names>K.</given-names>
          </string-name>
          :
          <article-title>The art of agent-oriented modeling</article-title>
          . MIT Press (
          <year>2009</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref24">
        <mixed-citation>
          24.
          <string-name>
            <surname>Von</surname>
            <given-names>Alan</given-names>
          </string-name>
          ,
          <string-name>
            <given-names>R.H.</given-names>
            ,
            <surname>March</surname>
          </string-name>
          , S.T.,
          <string-name>
            <surname>Park</surname>
            ,
            <given-names>J.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Ram</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          :
          <article-title>Design science in information systems research</article-title>
          .
          <source>MIS quarterly 28(1)</source>
          ,
          <volume>75</volume>
          {
          <fpage>105</fpage>
          (
          <year>2004</year>
          )
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>