Privacy compliance verification in cryptographic protocols

To provide privacy protection, cryptographic primitives are frequently applied to communication protocols in an open environment (e.g. the Internet). We call these protocols privacy enhancing protocols (PEPs) which constitute a class of cryptographic protocols. Proof of the security properties, in terms of the privacy compliance, of PEPs is desirable before they can be deployed. However, the traditional provable security approach, though well-established for proving the security of cryptographic primitives, is not applicable to PEPs. We apply the formal language of Coloured Petri Nets (CPNs) to construct an executable specification of a representative PEP, namely the Private Information Escrow Bound to Multiple Conditions Protocol (PIEMCP). Formal semantics of the CPN specification allow us to reason about various privacy properties of PIEMCP using state space analysis techniques. This investigation provides insights into the modelling and analysis of PEPs in general, and demonstrates the benefit of applying a CPN-based formal approach to the privacy compliance verification of PEPs.

The GST Compliance Costs Of Nonprofit Organisations

On 2 December 1998, the Federal Government tabled their policy paper entitled Regulation Impact Statement for the Introduction of a Goods and Services Tax (RIS) in the House of Representatives. The Federal Government predicted that total gross GST compliance costs to Australian businesses in the first year of implementation would be approximately $1,912 million (or $1,195 per firm). Furthermore, it is estimated that the recurrent net compliance costs will be much lower at $131 per firm. Whilst the government made brief references to charitable organisations in their analysis, it stated that the compliance costs faced by nonprofits would, in substance, be no different to the compliance costs faced by businesses or government departments. This paper examines the RIS process in relation to nonprofit organisations in the context of recent taxation legislation affecting nonprofit organisations. It argues that the assumption that nonprofit compliance costs are similar to government and business costs is flawed and makes a case for the RIS process to be reformed to include more appropriate assessments of the impact of legislation on nonprofit enterprises.

Advance pricing arrangements : an Australian Tax Office success or a legislative failure?

Australia’s domestic income tax legislation and double tax agreements contain transfer pricing rules which are designed to counter the underpayment of tax by businesses engaged in international dealings between related parties. The current legislation and agreements require that related party transactions take place at a value which reflects an arm’s length price, that is, a price which would be charged between unrelated parties. For a host of reasons, it is increasingly difficult for multinational entities to demonstrate that they are transferring goods and services at a price which is reflective of the behaviour of independent parties, thereby making it difficult to demonstrate compliance with the relevant legislation. Further, where an Australian business undertakes cross-border related party transactions there is the risk of an audit by the Australian Tax Office (ATO). If a business wishes to avoid the risk of an audit, and any ensuing penalties, there is one option: an advance pricing arrangement (APA). An APA is an agreement whereby the future transfer pricing methodology to be used to determine the arm’s length price is agreed to by the taxpayer and the relevant tax authority or authorities. The ATO views the APA process as an important part of its international tax strategy and believes that there are complementary benefits provided to both the taxpayer and the ATO. The ATO promotes the APA process on the basis of creating greater certainty for all parties while reducing compliance costs and the risk of audit and penalty. While the ATO regards the APA system as a success, it may be argued that the implementation of such a system is simply a practical solution to an ongoing problem of an inherent failure in both the legislation and ATO interpretation and application of this legislation to provide certainty to the taxpayer. This paper investigates the use of APAs as a solution to the problem of transfer pricing and considers whether they are the success the ATO claims. It is argued that there is no doubt that APAs provide a valuable practical tool for multinational entities facing the challenges of the taxation of global trading under the current transfer pricing regime. It does not, however, provide a long term solution. Rather, the long term solution may be in the form of legislative amendment.

Business Process Data Compliance

Most approaches to business process compliance are restricted to the analysis of the structure of processes. It has been argued that full regulatory compliance requires information on not only the structure of processes but also on what the tasks in a process do. To this end Governatori and Sadiq[2007] proposed to extend business processes with semantic annotations. We propose a methodology to automatically extract one kind of such annotations; in particular the annotations related to the data schema and templates linked to the various tasks in a business process.

The Punitive Turn in Juvenile Justice: Cultures of Control and Rights of Compliance in Western Europe and the USA

Separate systems of justice for children and young people have always been beset by issues of contradiction and compromise. There is compelling evidence that such ambiguity is currently being `resolved' by a greater governmental resort to neo-conservative punitive and correctional interventions and a neo-liberal responsibilizing mentality in which the protection historically afforded to children is rapidly dissolving. This resurgent authoritarianism appears all the more anachronistic when it is set against the widely held commitment to act within the guidelines established by various children's rights conventions. Of note is the United Nations Convention on the Rights of the Child, frequently described as the most ratified human rights convention in the world, but lamentably also the most violated. Based on international research on juvenile custody rates and children's rights compliance in the USA and Western Europe, this article examines why and to what extent `American exceptionalism' might be permeating European nation states.

Automated support for versioning compliance checking between workflow management and product lifecycle management (in Chinese)

With the development of enterprise informatisation, Product Lifecycle Management (PLM) systems have been widely deployed and applied in enterprises. This paper analyzes the requirement that conducting version operations on business objects as specified in process models should be compliant with the versioning policies imposed by product lifecycles. This leads to the introduction of the concept of versioning compliance, and the approach of compliance checking that we proposed in our earlier work, which comprises both syntactical compatibility and behavioural compatibility checking. The paper then focuses on the tool implementation for providing automated support to the versioning compliance checking. An empirical evaluation of the tool was also performed with industrial partners using the well-known questionnaire-based method. The evaluation and feedback from practitioners further evidence the practical significance of this research question in the PLM field and demonstrate that the proposed solution with its automated tool support possesses a high application potential.

Effects of average speed enforcement on speed compliance and crashes : a review of the literature

Average speed enforcement is a relatively new approach gaining popularity throughout Europe and Australia. This paper reviews the evidence regarding the impact of this approach on vehicle speeds, crashes rates and a number of additional road safety and public health outcomes. The economic and practical viability of the approach as a road safety countermeasure is also explored. A literature review, with an international scope, of both published and grey literature was conducted. There is a growing body of evidence to suggest a number of road safety benefits associated with average speed enforcement, including high rates of compliance with speed limits, reductions in average and 85th percentile speeds and reduced speed variability between vehicles. Moreover, the approach has been demonstrated to be particularly effective in reducing excessive speeding behaviour. Reductions in crash rates have also been reported in association with average speed enforcement, particularly in relation to fatal and serious injury crashes. In addition, the approach has been shown to improve traffic flow, reduce vehicle emissions and has also been associated with high levels of public acceptance. Average speed enforcement offers a greater network-wide approach to managing speeds that reduces the impact of time and distance halo effects associated with other automated speed enforcement approaches. Although comparatively expensive it represents a highly reliable approach to speed enforcement that produces considerable returns on investment through reduced social and economic costs associated with crashes.

Request for production of documents – UCPR r 222 – manner of compliance

In John Kallinicos Accountants Pty Ltd v Dundrenan Pty Ltd [2009] QDC 141 Irwin DCJ considered the nature of a party’s obligation under r 222 of the Uniform Civil Procedure Rules 1999 (Qld) (UCPR) to produce documents referred to in the parties’ pleadings, particulars or affidavits. The decision examined whether the approach in Belela Pty Ltd v Menzies Excavation Pty Ltd [2005] 2 QdR 230 in relation to disclosure of documents under UCPR r 214 also applied to production of documents under r 222.

Normative requirements for business process compliance

Norms regulate the behaviour of their subjects and define what is legal and what is illegal. Norms typically describe the conditions under which they are applicable and the normative effects as a results of their applications. On the other hand, process models specify how a business operation or service is to be carried out to achieve a desired outcome. Norms can have significant impact on how business operations are conducted and they can apply to the whole or part of a business process. For example, they may impose conditions on the different aspects of a process (e.g., perform tasks in a specific sequence (control-flow), at a specific time or within a certain time frame (temporal aspect), by specific people (resources)). We propose a framework that provides the formal semantics of the normative requirements for determining whether a business process complies with a normative document (where a normative document can be understood in a very broad sense, ranging from internal policies to best practice policies, to statutory acts). We also present a classification of normal requirements based on the notion of different types of obligations and the effects of violating these obligations.

Securities market regulators’ use of the ‘please explain’ queries sanction and its power of compliance

The aim of this study is to investigate the compliance impact of price queries issued by a securities market operator to its participating firms. Market operators in Australia and New Zealand, such as the Australian Securities Exchange and the New Zealand Securities Exchange, have the regulatory power in their rules to issue queries to its market participants to explain unusual fluctuations in trading price or volume in the market. The operator will issue a price query where it believes that the market has not been fully informed as to price relevant information. Responsive regulation has informed much of the regulatory debate in securities laws in our region. We posit that price queries are one strategy that a market operator can use in communicating its enforcement expectations to its stakeholder. However, whilst responsive regulation informs regulatory choices, an alternate view seeks to explain why participants respond to these regulatory strategies, and we use disclosure behaviour after price queries to test compliance behaviour