1. Intelligence and Security Informatics Collaborative Workflow Management for Interagency Crime Analysis J. Leon Zhao, Henry H. Bi, and Hsinchun Chen Department of MIS University of Arizona, Tucson, AZ 85721 {lzhao, hbi, hchen}@bpa.arizona.edu

2. 2 Zhao, Bi, & Chen, University of Arizona Outline Motivation Need for Collaborative Workflow in Crime Analysis Collaborative Workflow for Interagency Crime Analysis Interagency Crime Analysis Framework Event-Based Workflow and Event Management Language Summary

3. 3 Zhao, Bi, & Chen, University of Arizona Motivation DHS is the organizational means to strengthen collaboration among law enforcement agencies Presently, most crime analysis is data centric, and little support for collaboration Need to improve the information flow and access among law enforcement agencies Collaborative workflow is an emerging technology that can help interagency crime analysis

4. 4 Zhao, Bi, & Chen, University of Arizona Crime Analysis: A Field Study We have conducted a field study with a major police department. We interviewed patrol officers, crime analysts, and detectives over an one year period. We also collected sample documents and observed knowledge intensive law enforcement processes.

5. 5 Zhao, Bi, & Chen, University of Arizona Crime Analysis: Key Findings Law enforcement work is knowledge intensive. Police officers spend up to 40% time handling information. Many detection failures in police work are due to necessary information is not exchanged properly. Most existing police search systems are deployed by individual agencies at the regional, state, & national level.

6. 6 Zhao, Bi, & Chen, University of Arizona Crime Analysis: Knowledge Processes 1. Collecting crime data 2. Processing and storing crime data and documents 3. Searching, retrieving, and collecting additional information or crime analysis 4. Analyzing information to find clues 5. Using information to prosecute criminals

7. 7 Zhao, Bi, & Chen, University of Arizona Need for Collaborative Workflow Support Four types of deficiencies in crime analysis 1. Crime analysis is to search many data sources and then piece together scattered information. 2. Many of the crime analysis steps are non-automated. 3. Lots of forms need to be completed repeatedly. 4. Many cases may be implicitly related, but are hidden from crime analysts.

8. 8 Zhao, Bi, & Chen, University of Arizona A Model for Collaborative Workflow 1. Workflow identification 2. Workflow negotiation 3. Event-based workflow design Event definition Event dependency specification Deadline specification and verification 4. Workflow Initialization 5. Event-based workflow execution Event execution Event modification 6. Workflow termination Not supported by current workflow technology

9. 9 Zhao, Bi, & Chen, University of Arizona Unified Case Language System: To support for discovering similarities among crime cases Interagency Crime Analysis Framework Collaborative Workflow Management System : to manage event-based collaborative workflows National Crime Case Repository : to store crime cases that are in need of collaborators

10. 10 Zhao, Bi, & Chen, University of Arizona Interagency Crime Analysis System Agency 2 agent IS i info system i Interagency Crime Analysis Workflow System... Agency 1 Agency n IS 1 IS 2 ISn SOAP connection

11. 11 Zhao, Bi, & Chen, University of Arizona A Workflow Event Language A workflow event is an action item that must be completed by one or more agents on or before a specified time. We denote event e to be completed by agent a by time t as e ( a, t ). The event start time is unspecified beforehand. Time t of event e is the deadline. Agent a can also be a set of agents.

12. 12 Zhao, Bi, & Chen, University of Arizona Event Examples EventDescriptionAgentsDeadlinePrereq. E1Collect data from Tucson AgenciesJohn, Sarah5 pm 1/10None E2Collect data from CIATom5 pm 1/10None E3Collect data from FBIMike5 pm 1/10None E4Teleconference meetingAll agents2 pm 1/11E1, E2, E3 E5Compile meeting minutes & email to allJen7 pm 1/11E4 E6Review findings & prosecution actionsJohn, Mike5 pm 1/15E5 E7Prepare prosecution forms & email to allSarah11 am 1/17E6 E8Final teleconferenceAll agents5 pm 1/18E7

13. 13 Zhao, Bi, & Chen, University of Arizona Relationships between events The relationships between two events can be prerequisite, subsequent, and irrelevant. If event e 1 must be completed before event e 2, then e 1 is a prerequisite of e 2, we say e 1  e 2. Further, e 2 is a subsequent event of e 1. When multiple events e 1, e 2, e 3 are prerequisites of event e 4, it is written as { e 1, e 2, e 3 }  e 4.

14. 14 Zhao, Bi, & Chen, University of Arizona Event Dependency Example E1({John, Sarah}, ‘5 pm 1/10/03’) E2(Tom, ‘5 pm 1/10/03’) E3(Mike, ‘5 pm 1/10/03’) E4({John, Sarah, Tom, Mike, Jen}, ‘2 pm 1/11/03’) E5(Jen, ‘7 pm 1/11/03’) E6({John, Mike}, ‘5 pm 1/15/03’) E7(Sarah, ‘11 am 1/17/03’) E8({John, Sarah, Tom, Mike, Jen}, ‘5 pm 1/18/03’) The dependency constraints: {E1,E2,E3}  E4, E4  E5, E5  E6, E6  E7, E7  E8

15. 15 Zhao, Bi, & Chen, University of Arizona Contributions Studied the need in the field for collaborative workflow management in police knowledge work. Proposed a national crime case repository to enable discovery of collaborators on specific crime cases. Designed an interagency crime analysis framework and a workflow design and execution model. Proposed an event-based workflow method and the associated event manipulation language.

16. 16 Zhao, Bi, & Chen, University of Arizona Ongoing Work Develop the algorithms for the interagency crime analysis framework Implement the algorithms by integrating workflow with knowledge management Validate the value of collaborative workflow in a law enforcement environment