CA2217873A1 - Automated enforcement of behavior in application program - Google Patents

Abstract

A model information control system ("MICS") is used in conjunction with a user-defined information model and one or more conventional information system program modules or "functions" to execute business applications. Following each execution of an action defined by the information model, an Expected Behavior Control System ("EBCS" 34) determines if the resulting behavior is consistent with expected behavior (38) and conforms the behavior to the expected behavior if necessary (32, 40). The EBCS may also change the behavior of an application processing system or application program by enforcing a new behavior for the application processing system or application program without modifying them. The MICS includes an event-action-state machine that manipulates the user-defined information model and the functions.

Description

CA 022l7873 l997-lO-09 AUTOMATED EMFORCEMENT OF BEHAVIOR IN APPLICATION PRO~;RAM

5 CROSS h-- _hLNCE TO RELATED APPLICATION
This application is a continuation-in-part of co-pending application U.S. Serial No. 08/370,510, filed January 9, 1995 which is a continuation-in-part of co-pending application U.S. Serial No.
08/01 6,430, filed February 1 1, 1 993 .

The present invention relates to computer systems and more particularly to information engineering technology for automated conformance and enforcement of behavior of processing actions of application processing systems.
BACKGROUND OF THE INVENTION
Information system developers are facing a much different competitive environment than in the recent past. Over the past several years, the emphasis has changed from data processing to management of information systems to decision support systems to strategic information systems. In order to keep up with changes in business, information developers must build systems which are flexible enough to adopt changes in business functions without at the same time incurring excessive maintenance and related costs.
Over the last twenty years or so, software development automation has progressed along three distinct and separate paths.
One path pursued increased programming efficiency by automating program coding activities. The result was the development of non-procedural interpretive languages such as fourth generation languages (4GL) and program generators. The second path sought to achieve design effectiveness by bringing structure and rigor to analysis and design. The second path resulted in the CA 022l7873 l997-lO-09 W Og6/32675 PCTrUS96/05026 development of structured methods of flowcharting programs or dividing programs into functional modules. More recently, automation of such structured methods has been achieved through computer aided software engineering ("CASE") graphic diagraming tools. The third path focused on reusability by taking a database approach to development using objects and data abstraction. This approach initially used a construct known as a data dictionary for accessing information about the data and the relationships among data elements. More recently, such techniques have comprised 10 object-oriented systems and have incorporated so-called information resources dictionaries for storing and accessing objects, programs and data.
Because each of these paths and approaches has merits, there have been attempts made to integrate all of the different tools of the three different paths under the umbrella of information engineering.
For example, there is an evolving ANSI standard for repository technology, and IBM has set forth "AD/Cycle," which defines methods to manage all information resources including application specification, programming tools, software programs, software program codes and data.
These approaches, however, do not resolve the problem of application program maintenance. Maintenance and other related support of computer software applications is often expensive, time consuming and unreliable. In order to eliminate maintenance cost, essentially one needs to eliminate application programs themselves.
This would have the attendant benefit of reducing the information engineering application development cycle of specification, design, implementation and execution. Neither the three application CA 022l7873 l997-lO-09 W O 96/32675 PCTrUS96/05026 development paths nor the integrated approaches described above adequately address the maintenance problem or how to solve it.
Another problem with prior art information processing systems relates to the detection of errors in the actions initiated by the application programs run by an application processing system. Prior art techniques focus on the fault arising from an action performing data processing operations and methods for correcting the fault or of continuing system operation despite the fault. However, in many application processing systems, the application program fault is not necessarily resident with the application program. These application programs performing the actions are well tested and implemented.
The problem is that the application programs are not providing the expected behavior because an action which is supposed to occur is not occurring or some action occurs which is not supposed to occur.
These type of problems normally remain undetected until the application program breaks down or until poor performance is revealed due to unnecessary processing of actions. In a traditional system, the user must trace the processing flow and observe each action within the processing flow to analyze the performance of the system or to identify errors. Thus, it would be advantageous and very useful to have a system which conforms expected behavior or enforces specific behavior of each action of the application processing system and eliminates incorrect or unnecessary processing to optimize system performance.
BRIEF SUMMARY OF THE INVENTION
The present invention overcomes the foregoing and other problems with a method and apparatus for automated conformance and enforcement of the expected behavior in an application processing system. An expected behavior control system ("EBCS") CA 022l7873 l997-lO-09 is integrated with an application processing system including at least one application program having actions defined therein. With respect to the EBCS, the terms "action," "rules," "expression" and "function" are synonymous unless otherwise specified. The EBCS
includes an expected behavior function for detecting if an executed action by the control program produces with an expected behavior.
Additionally, the EBCS may conform or enforce selected behavior to modify the process flow of an application processing system method without modifying the application programs. When an expected o behavior is achieved, the application processing system executes the next action defined by the application program. If an unexpected behavior is detected, a correction action function executes at least one corrective action in order to conform or enforce the behavior of the system to achieve an expected behavior.
The foregoing outlines some of the more pertinent aspects of the present invention. These aspects should be construed to be merely illustrative of some of the more prominent features and applications of the invention. Many other beneficial results can be attained by applying the disclosed invention in a different manner or modifying the invention as will be described. Accordingly, other aspects and a fuller understanding of the invention may be achieved by referring to the following detailed description of the preferred embodiment .

CA 022l7873 l997-lO-09 W 096/32675 PCTrUS96/05026 BRIEF DESCRIPTION OF THE DRAWINGS
For a more complete understanding of the present invention and the advantages thereof, reference should be made to the following Detailed Description taken in connection with the accompanying drawings in which:
FIGURE 1 is a block diagram of a model information control system;
FIGURE 2 is a detailed state diagram of a control system engine of the model information control system of FIGURE 1; and FIGURE 3 is a diagram illustrating an application processing system including an expected behavior control system.

DETAILED DESCRIPTION
Referring now to FIGURE 1, a block diagram is shown of the preferred embodiment of the model information control system (MICS) 10 of the present invention. The MICS 10 includes at least one information model 12 which is created using a text editor and specific semantic rules defined for a target computer system upon which the MICS executes. Several information models are shown in detail below. The target computer system typically comprises a 486-based computer running a UNIX, DOS or OS/2 operating system of the like, although other target systems are useful as well. The MICS also includes a control system engine (CSE) 14 which is preferably a finite state control action machine that cycles through states of operation as will be described in more detail below. The control system engine 14 performs several actions. It activates an object from a set of objects defined in the information model 12.
The control system engine 14 also activates an action from a set of W O 96132675 PCTrUS96105026 actions 16 associated with the object. This is achieved using an associating action flag as will be described.
The control system engine 14 also activates "instants" of the object based on activation constraints of the attributes of the object, and the CSE processes each instant through a function set associated with the action. An "instant" of an object refers to a given condition or state of the values of the object's attributes. An "active" instant of an object exists where the object's attributes have values assigned or instantiated previously by retrieving the values o from the database. An "empty" instant is a condition where the values of the object's attributes have yet to assigned or instantiated.
Data used by the control system engine is stored in a database (DB) 20 and the engine interacts with the DB 20 through a database interface 22. The user 24 of the MICS interfaces to the rest of the system through a presentation interface 26. Although not shown in detail, it should be appreciated that one or more functions and/or the database may be accessed locally or remotely.
The information model consists of at least one attribute and one control flag or at least one object and a dictionary of attributes.
The object generally will include a set of attributes that constitutes a "subset" of the attributes in the dictionary, a number of control flags, and one or more rules or expressions. The control flags, in conjunction with the expressions, facilitate the CSE's use of the object. Preferably, control flags are divided into four distinct types, namely (1 ) attribute type flags, (2) object type flags that control storage and retrieval of the object's instant(s), (3) action type flags that facilitate activation and processing of instant(s) through one or more functions, and (4) function control flags used with attributes to provide control of attributes specific to the function, e.g., .

W 096132675 PCTrUS96105026 presentation function control flags that can be passed to a user interface function to control the presentation and/or interactions between the user interface function and the various 1/0 devices of the system (such as the presentation display and report printer).
s The attribute type control flags specify how to control the behavior of the attributes such as "storage" classes and "existence"
classes. The "storage" classes flags identifies the storage values such as "picture", "video", "voice", "real," "integer," "scientific,"
"boolean," "ASCII," "data," "time" and the like. So, for example, the attribute PATIENT NAME has two attribute control flags: "TYPE = C, LEN = 30." The first flag indicates that the data is the ASCII
character format. The LEN=30 indicates the length of the ASCII
data storage class.
The attribute "existence" classes of flags control the rules for creating attributes. For example, ATYPE and "select" attribute constraint expressions specify the conditions on how to create one or more attributes. For example the attribute "09:00 A.M." in the Appointment Calendar Information Model has the control flag "ATYPE = T" which specifies the attribute name is of type time, and the attribute "select" constraint defines how to create another attribute which is explained in detail later.
The object type control flags include "primitive," "transient,"
"atomic," "view," "synonym," "link," "table" and "group." This list is exemplary and other object type flags can be defined and used to categorize and associate one object with one or more other objects.
A primitive object type flag indicates that the object's instant(s) are to remain in the MICS in the system for some time. A transient - object type flag indicates that the object's instants need only be retained in the system for the duration of processing of particular CA 022l7873 l997-lO-09 W O 96/32675 PCTrUS96/05026 actions. An atomic object type flag means that the object's instant is derived by abstraction from some other (primitive) instant of the object. An instant identified by a transient object type flag is also retained in the system. A view object type flag indicates that the primary object is a view of some other object. A "synonym" object type flag follows an identification of a primary object and indicates that the attributes of the primary object should be substituted with the attributes of the object identified in a "using of" flag. Thus, if an object A is followed by the flag "using of X," the attributes of object 10 X would be used by object A.
A "group" object type control flag indicates that a set of instants must be processed in a group by a selected action. Each object may also have an associated link object. For example, if object A is an atomic view of a primitive object B, then object B is said to be the associated link object of object A. Or, if the instant of object C can exist if and only if there is a corresponding instant of an another object D, then object D is said to be an associated link object of object C.
As noted above, the action type flags in the object identify the action which facilitates activation and processing of instant(s) by the CSE. An action consists of four control flags, namely "action identifier," "instant type," "action class," "instant propagation type,"
and optionally one or more "function." An action identifier flag is the flag by which the particular action is known external to the system.
The instant type flag indicates the type of instant (active or empty).
The action class flag identifies which class of actions the particular action belongs. An instant propagation type flag indicates how to propagate the change of instant for a primitive or atomic object of W 096132675 PCTnUS96/05026 the instant. The functions if defined may be required to be executed to process the instant.
The functions are included in the MICS system using a compiler and link/editor or other conventional means. Such functions may be "off-the-shelf" modules or actually written into the MICS if desired. However, once the function set is defined, it is not necessary to maintain the function set code in any traditional sense.
As noted above, when the object is defined in the information model, it will typically include presentation control function flags that 10 control presentation of the object's attributes by external interfaces.
In particular, each attribute therein may include one or more of the presentation control flags which can be passed to the user interface function to control the presentation and/or interactions between the user interface function and the various 1/0 devices of the system (such as the presentation display and report printer). Representative sample of presentation control flags are FPROT, MFILL, RJUST, FHIDE, DPROT, RSKIP, CENTER, GROUP, COMMON, UNIQUE, WSKIP and PHIDE. An FPROT presentation control flag provides a field protection action that prevents the user from instantiating the particular attribute of the object. An MFILL flag indicates that the attribute is one that the user must instantiate. The RJUST, LJUST, or CENTER flags inform the presentation interface to right justify, left justify, or center value of the attribute to the presentation display.
An FHIDE flag prevents the value of the from being displayed. A
DPROT flag protects the value of the attribute overwritten to DPROT
from being erased. A COMMON flag indicates that the attribute is shared by multiple users and may require specific action for active - instants before execution of any propagation expression. A UNIQUE
flag indicates the instances of the object are organized by the value CA 022l7873 l997-lO-09 W O 96/32675 PCTrUSg6/05026 of the attribute and indicates to create the index attribute of the object. This is explained later in the Appointment Calendar Information Model example. An RSKIP flag tells the presentation interface to skip the attribute when a report is printed, and an WSKIP
flag tells the interface to skip the attribute when a window is created on the display. PHIDE flag hides the name of the attribute. GROUP
flag indicates that the interface should organize values of attributes for a display so it is easy to read. For example, a patient list can be grouped by city, state, and zip code, and a financial report could be 1C grouped by day, week and month. The object may include other presentation control flags for similar control purposes.
According to a feature of the invention, attributes and objects in the-information model use consistent rules or "expressions" that, in conjunction with the various control flags, facilitate the application process flow to execute information model. The attributes of an object contain (i) information on how to assign values to these attributes, (ii) value constraints limiting the kind of values that can be assigned to these attributes, (iii) dependency information specifying how assigning a particular value to one attribute affects the value of another attribute, and (iv) select constraints creating one or more attributes with specific constraints. More specifically, at the attribute level these rules include (i) "initial values" or "default values" expressions that assign values to these attributes, (ii) "values," "condition" or "assignment" expressions limiting the kind of values that can be assigned to these attributes, and (iii) "activation" expressions specifying how to change the value of attributes when instances are activated, (iv) "propagation"
expressions specifying how assigning a particular value to one attribute affects the value of another attribute, (v) "select"

W 096/32675 PCTnUS96105026 expressions specifying con~L~ L~ limiting the kind of instants that can be activated. Similar rules or expressions are implemented at the object level. When used in an object, these expressions modify the behavior of the instant of the object to effect the activation, instantiation and processing of information. For example, a constraint expression at the object level specifies the activation constraint limiting what kind of instants of the object can be activated. Finally, the object also includes index attributes by which instances of an object can be stored and retrieved via the database 10 using the value of one or more attributes of the object.
Thus according to the invention, an object generally includes one or more control flags that facilitate the CSE's use of the object, a subset of attributes selected from a dictionary of attributes, and one or more rules or expressions that modify the behavior of an object's instants to affect the activation, instantiation and processing of information. An object's attributes may also include expressions that control how to assign values to these attributes, that limit the kind of values that can be assigned to these attributes, that specify how to change the value of attributes when instances are activated, that specify how assigning a particular value to one attribute affects the value of another attribute, and that specify constraints limiting the kind of instants that can be activated.
An advantageous feature of the present invention is that the MICS emulates application processing with autonomous control by directly converting one or more information models into an independent set of activation, instantiation and processing of functions using control flags defined in the model, thereby - automating the application process flow of an application program.
In the prior art, it has heretofore been necessary to create a detailed CA 022l7873 l997-lO-09 W 096/32675 PCTnUS96/05026 design of such process flow (and to automatically or manually generate source code to implement the flow). The present invention wholly obviates such detailed design and code generation.
According to the preferred embodiment of the invention, the MICS includes one or more information models and the control system engine (CSE). The control system engine reads the information model directly and in response thereto (i) activates objects from the set of objects defined in the information model, (ii) activates actions from a set of actions associated with action control 10 flags of an object, (iii) activates one or more "instants" of an object and (iv) processes the one or more instants of the object through one or more interfaces or functions associated with the actions along with any expressions associated with the object and/or its attributes.
In this manner, the MICS activates and processes the independent set of activation, instantiation and service actions over the information models.
A specific implementation of the MICS incorporating the features of the present invention can now be described. By way of additional background, it is helpful to define the concept of an "action" which refers to the automatic categorization and association of functions using control flags to control activation, instantiation and processing of information using one or more functions. This obviates the specific creation of process flow instructions for each application. Applications thus can be said to be isolated from the process flow specification process because the information model only needs to specify an action and not how the action is implemented. An "action" is preferably categorized by its class of service or type of function that it uses. For convenience, action class types are divided as follows:

CA 022l7873 l997-lO-09 W 096/32675 PCTrUS96/05026 1 ) ANALYSIS type (actions that process an active instants through one or more functions that analyze information);

2) DATABASE type (actions that process an active instant through one or more functions that access and manipulate information);

3) REPORT type (actions that process an active instant through one or more functions that create reports from information);

4) ADD type (actions that process an empty instant through one or more functions to create an active instant);

5) UPDATE type (actions that process an active instant through one or more functions that access, manipulate and return an active instant to the database);

6) DELETE type (actions that process an active instant through one or more functions that remove the trace of an instant from the database); and 7) CREATE type (actions that process an active instant through one or more functions to create atomic information from primitive information).
The above list of action types is merely exemplary and the MICS may include other action types or variations of the above.
Each action has associated therewith the set of action control flags previously described. It should be noted that different sets of action control flags can be used instead of the flags identified above.
In an exemplary embodiment of the invention, for instance, assume that the action type is UPDATE. The associated action control flags are then: "UPDATE, ACTIVE INSTANT, DATABASE, UPDATE INSTANT, USR_INSTANTIATION." The first flag UPDATE is the identifier flag that identifies the action UPDATE. The second flag ACTIVE INSTANT indicates that the action requires an active instant.

CA 022l7873 l997-lO-09 WO 96/32675 PCTrUS96/0~026 The third flag DATABASE identlties that the UPDATE action belongs to the DATABASE action class type. The fourth flag, UPDATE
INSTANT, is the instant propagation type that will cause the CSE to update the final state of the active instant using the database interface. Finally, the function USR_INSTANTIATION indicates that the CSE will require the execution of a user instantiation function.
The user instantiation function instantiates an instant through the user interface.
In another example, assume the action is ADD. The ADD
action has action control flags "ADD, EMPTY INSTANT, DATABASE, UPDATE INSTANT, USR-INSTANTIATION," The first flag identifies the action ADD. The second flag indicates that the action operates on an empty instant. The third flag identifies that the ADD action belongs to the DATABASE action class type. The fourth flag, UPDATE INSTANT, is the instant propagation type flag and will cause the CSE to add a newly created instant to the database using the database interface. Finally, the function USR-INSTANTIATION
indicates that CSE will require execution of a user instantiation function.
With the above background, the following is a portion of a representative object from an information model (shown below) for a medical office accounting, billing and patient management system:
MOPEL MEDICAL

#OBJECT PATIENT CHART,PRIMITIVE,DATABASE
ACNT NO,TYPE = I,LEN = 8,GROUP = 1 00,FPROT
DEFAULT VALUE
[ACNT NO] = SEQNUMBER.
VISIT FlRST,TYPE=d,GROUP=100,FPROT,SETDATE

CA 022l7873 l997-lO-09 W 096/32675 PCTrUS96/05026 LAST,TYPE = D,GROUP = 1 00,FPROT,SETDATE
PATIENT NAME,TYPE = A, LEN = 30,GROUP = 1 02,MFILL
ADDRESS,TYPE = A,LEN = 30,GROUP = 1 03,MFILL
CITY,TYPE = A,LEN = 1 5,GROUP = 1 04,MFILL
STATE,TYPE = A,LEN = 2,GROUP = 1 04,MFILL
ZIP CODE,TYPE = L,PTYPE = Z,LEN = 5,GROUP = 1 04,MFILL
BiRTHDATE,TYPE = D,GROUP = 1 05,MFILL
SEX,TYPE = A,LEN = 1 ,GROUP = 1 05,MFILL
Constraint,values M - MALE, F- FEMALE.
MARITAL STATUS,TYPE = A,LEN = 1 ,GROUP = 1 05,MFILL
Constraint,values S - SINGLE, M - MARRIED, W - WIDOWED, D - DIVORCED.
PHONE
NO(HOME),TYPE = S,PTYPE = P,LEN = 1 0,GROUP = 1 06,RJUST
(OFFICE),TYPE = S,PTYPE = P,LEN = 1 0,GROUP = 1 06,RJUST
SOCIAL SEC.#,TYPE = L,PTYPE = S,LEN = 9,GROUP = 107 DRIVER LIC.#,TYPE = C,LEN = 1 5,GROUP = 107 The first field in the first line includes the object's name (in this case PATIENT CHART). The second field in the line includes the object type flag identifying the type of object (in this case primitive).
Following the object type flag, the next field identifies the action type flags that identify the one or more actions that the CSE can select for activation, instantiation and processing of instant(s) of an object. In this example, an object having the DATABASE action class flag merely indicates to the CSE to substitute all actions associated with the DATABASE action class as available actions CA 022l7873 l997-lO-09 W O 96132675 PCTnUS96/05026 ~6 (thus making it unnecessary to individually list each action of the set) .
Following the object type and action type control flags on the first line of the object, the object includes a set of attributes. As can be seen, the patient chart object is used for accounting and information purposes and thus includes such attributes as name, address, date of last visit and account number, as well as others.
The object further includes a number of presentation control flags that are associated with particular attributes. As noted above, the 10 GROUP flags in the attributes are used to group different attributes of the object on the same line of the interface display. Thus ACNT
NO, VISIT FIRST, and LAST attributes will be presented on the same line. An attribute will also include a DATA statement if the same attribute is used more than once in the object.
Referring now to FIGURE 2, a detailed state diagram is shown of the preferred operation of the control system engine (CSE) of the MICS. The various states of the CSE and associated control actions are identified below:
( 1 ) Initialize MICS
(2) Select Model (3) Select Object (4) Select Action (5) Activate Instant (6) Process Instant (7) Terminate Model (8) Terminate CSE
Prior to the CSE execution, one or more information models are created by a developer using semantic rules for the target system. Each information model has one of three states: idle, active CA 022l7873 l997-lO-09 W 096/32675 PCTrUS96/05026 and suspended. When an information model is in its idle state, its ~ "next state" is active. An information model in the active state canbe suspended at any time during the processing of the information model. Once suspended, the information model can be returned to its active state (at the same point therein where processing was suspended) or the suspended information model can be placed back into its idle state. Each information model has associated therewith a attribute identifying its state and its next state. Execution of the control system engine begins with State 1. In state 1, the CSE is initialized. This step obtains the necessary resources (e.g., memory, buffer pools, interprocess communication environment, I/O interface environment) from the operating system and then reads the action table definitions and function table definitions and loads them into memory. The CSE also creates structure in the memory to hold the information models, and loads information models into the memory.
State 1 also sets up the user environment's presentation interface 26.
In State 1, all information models are set to idle and the information model attribute is set to "3" (which is the next state after selection of an idle model). The CSE then moves to State 2. If there is a failure during State 1, the CSE goes to State 8 and terminates, providing an error message or the like.
In State 2, the user is prompted to select an information model. Although not meant to be limiting, preferably the presentation interface is a Windows-based graphical user interface (GUI) and a conventional point and click device is used to make appropriate selections. If the user selects a model, the CSE activates the selected model and sets an "active model" to the selected model.
The activation of a model means assigning necessary storage area, W O 96/32675 PCTnUS96105026 initializing databases, building a dictionary from the set of attributes from all objects and creating sets of attributes with an associated attribute constraint expression or merely building a group of attributes with associated attribute constraint expression. This will be more fully shown later with respect to a calendar example. If the user decides to cancel the session, the CSE activates the most recently suspended model to "active model." The CSE then proceeds to the next state of the active model. If the user decides to exit, the CSE proceeds to State 8 and the CSE is terminated.
In State 3, the CSE first determines whether there are one or more objects defined for the active model. If there is no object, set object equal to model name and copy all control flags and control expressions defined at model to object, and set all attributes of model as attributes of object. If there is only one object defined for the active model, the CSE sets "active object" attribute to this object and proceeds to State 4. On the active model, the CSE controls the presentation interface to display the list of available objects (which are defined in the information model) and prompts the user to select one. If the user selects one of the objects, the CSE sets an "active object" attribute to the selected object and proceeds to State 4. If the user decides to cancel, the CSE returns to State 2, from which the CSE then proceeds to State 7 in which the active model is terminated.
In State 4, the CSE first determines whether there is an action class flag associated with the active object. If there is one, the CSE
substitutes all action flags associated with the action's class as valid action flags. If there is only one action flag, the CSE sets an action associated with the action flag to "active action" and proceeds to state 5. On the other hand, if there is more than one action flag, the CA 022l7873 l997-lO-09 W 096/32675 PCTrUS96/05026 CSE controls the presentation interface to display the list of action - names associated with action flags of the active objects and prompts the user to select one. If the user selects one of the actions, the CSE sets an "active action" attribute to the action associated with the action name of the selected action of the active object and proceeds to State 5. If the user decides to cancel, the CSE goes back to State 3. If the user decides to exit, the CSE proceeds to State 7. If the user decides, however, to access another information model during State 4, the CSE sets the active model's next state 10 equal to 4, suspends the active model and proceeds back to State 2.
In State 5, processing begins by first setting all values of the attributes of active objects to zero except those attributes having the DPROT flag set. Then a test is performed to determine whether the active object has an associated link object. If so, the CSE activates the instant of the link object. If activation for a link object fails, the CSE returns to state 4. If the activation for the link object has been successful, or if the active object does not have an associated link object, then the routine continues by determining whether the active object requires an active instant. If so, the CSE then activates the instant using a select condition if one exists in the active object.
(The select activation constraint of the object maps directly to a select call associated with the database 20). If activation fails, and there is no learn flag, the CSE goes to state 4. If activation is successful or no activation is required, the CSE goes to State 6. If activation fails and there is a learn flag, the CSE also goes to state 6 because the learn flag instructs the CSE to accept an empty instant even though an active instant might otherwise be required. For example, in an appointment calendar information model, the database will not necessarily contain the instances corresponding to all ~ = . = = =
CA 022l7873 l997-lO-09 W 096/32675 PCTrUS96/05026 calendar dates. When the user requests to see the data for a specific page of the calendar and no data for such page exists in the database, the learn flag allows the CSE to accept the empty page as an active page with no data in it so that when the user enters the data on this page it will be entered into the database. Also, the CSE
executes any activation expression if one exists for the active instant. If the user decides, however, to access another information model during State 5, the CSE sets the active model's next state equal to 5, suspends the active model and proceeds back to state 2.
10 For each of the actions described above, such as activations of instants, assigning of values and execution of expressions a check is performed by the Expected Behavior Control System (EBCS) to determine if the processing actions initiated by the actions provide an expected behavior. For conformance of actions to a particular behavior, the checks are only performed after an action is performed.
For enforcing particular process flow behavior, the checks by the EBCS may be performed both before and after the processing of actions. The EBCS will be more fully discussed in a moment.
In State 6, the routine first determines if there is any function flag associated with the active action. If one or more function flags exist, then for each function flag, the CSE executes the associated function and any process propagation expression associated with the active object over all instants which satisfy activation constraints in the object. The function may be an instantiation function, e.g., a user instantiation function that interacts with the user using the presentation interface and presentation control flags. The CSE will also process any attribute flags by mapping the attribute flags into appropriate functions. For example, the presentation flags are used to create windows and control the interaction with the data in the CA 022l7873 l997-lO-09 W O 96/32675 PCTrUS96/05026 window. Only data that satisfies attribute constraints is accepted and upon acceptance, the CSE also executes any propagation expression associated with any attribute. If the user decides, however, to access another information model during State 6, the CSE sets the active model's next state equal to 6, suspends the active model and proceeds back to State 2.
If no function is associated with the active action exist or if the functions associated with the active action have been successfully executed, the CSE executes any propagation expression 10 associated with object and the routine continues by determining if any object type flag is primitive or atomic. If not, the CSE goes to state 4 to select the next action. If yes, then the CSE determines whether the current action has an update instant or delete instant (instant propagation type action control) flag. If an update instant flag exists, active instants are updated or an empty instant is added to the database. If an delete instant flag exists, the CSE deletes an active instant and ignores empty instants. If an object has link objects, its associated link propagation expressions are executed and its instants are updated. If user selects NEXT or PREVIOUS event, the CSE obtains the NEXT or PREVIOUS instant. If user selects a PROCESS event, the CSE returns to state 4. If an error occurs during any of these activities, the CSE returns to state 4 with an event flag indicating a failure. As in State 5, for each action a test is performed for the EBCS to check for expected behavior to conform or enforce the processing actions to provide an expected behavior.
In State 7, the active model is terminated and the CSE
activates the most recently suspended model is one exists and goes to the next state of the activated model; otherwise the CSE returns to State 2.

CA 022l7873 l997-lO-09 W 096/32675 PCTrUS96/05026 In State 8, the CSE is terminated. Once the CSE is initialized it executes through its various states until State 8 is reached. As the CSE executes, the functionality defined in the information model is effected in the same way as a prior art source code program executes.
An exemplary implementation of several information models for use in the MICS are now be illustrated which do not utilize an EBCS. In this example,the MICS includes three information models:
an appointment book (MODEL APPOINTMENT CALENDAR), a 10 notepad tMODEL NOTEPAD) and a complex medical system (MODEL
MEDICAL). The Appointment Calendar model includes a short list of attributes (such as the date, day of week, time and daily time increments) and control expressions. The initial values expression that initiate the date, the day of week and the time to current system date, day of week and time, a default values expression that sets the value of the day of week attribute to a corresponding value of the date attribute, and a constraint assignment expression that sets the date to prevdate (date-1 ) or nextdate (date + 1 ) based on EVENT prev and next, respectively. Likewise, the notepad model includes a short list of attributes. The medical system includes a list of numerous objects. The system control tables consisting of action and function control flags is also provided to understand the examples.
SYSTEM CO NTRO L TABLES
#ACTION
ADD,EMPTY INSTANT,DATABASE,UPDATE INSTANT,USR
INSTANTlATlONUPDATE,ACTlVE INSTANT,DATABASE,UPDATE
INSTANT,USR_INSTANTIATION
DELETE,ACTIVE INSTANT,DATABASE,DELETE INSTANT,USR
INSTANTIATION

CA 022l7873 l997-lO-09 W 096/32675 PCTrUS96/05026 REPORT,ACTIVE INSTANT,REPORT,O,O,CREATE_REPORT
~ CREATE ATOMIC DATA,ACTIVE INSTANT,ANALYSIS,UPDATE
INSTANT,CREATE_ATOMIC_DATA
GRAPH,ACTIVE INSTANT,ANALYSIS,O,O,GRAPH
LEARN ASSOCIATION,ACTIVE INSTANT,ANALYSIS,O,O,LEARN
ATO M I C_DATA
USE ASSOCIATION,ACTIVE INSTANT,ANALYSIS,O,O,USE_ATOMIC
DATA

#MODEL APPOINTMENT CALENDAR, PRIMITIVE, UPDATE, LEARN
Description You can use Calendar program to keep track of your appointments SELECT, INSTANT
(NEXT INSTANT) [DATE] + = 1; (PREV INSTANT) [DATE] -= 1.
DATE,TYPE = D,UNIQUE
DATE, TYPE = D,PTYPE = D,TEMP
09:00 A.M.,TYPE = C,LEN = 66,ATYPE =t Description Type any information you want to include for this time slot.
SELECT,ATTRIBUTE
(ATTRIBUTE < 5.30) ATTRIBUTE += 60.
NOTE,TYPE = C,LEN = 132 Description Type up to two lines of text as notes.
TODO,TYPE = C,LEN = 132 Description Type up to two lines of text for things to do.

W O 96/32675 PCTrUS96/05026 ~END
MODEL NOTEPAD.PRIMITIVE. UPDATE LEARN
DATE,TYPE = D,GROUP = 100,SETDATE,FPROT,UNIQUE
TIME,TYPE = T,GROUP = 100,SETTIME,FPROT
REFERENCE,TYPE = A,LEN = 20,GROUP = 100 TEXT,TYPE = C,LEN = 512,GROUP = 101,PHIDE
#END
MODEL MEDICAL
#OBJECT PATIENT CHART,PRIMITIVE,DATABASE
10 ACNT NO,TYPE = I,LEN = 8,GROUP = 100,FPROT
DEFAULT VALUE
[ACNT NO] = SEQNUMBER.
VISIT FIRST,TYPE =d,GROUP= 100,FPROT,SETDATE
LAST,TYPE = D,GROUP = 100,FPROT,SETDATE
PATIENT NAME,TYPE = A,LEN = 30,GROUP = 102,MFILL
ADDRESS,TYPE = A,LEN = 30,GROUP = 103,MFILL
CITY,TYPE = A,LEN = 15,GROUP = 104,MFILL
STATE,TYPE = A,LEN = 2,GROUP = 104,MFILL
ZIP CO DE,TYPE = L, PTYPE = Z, LEN = 5,GROUP = 104,MFILL
20 BIRTHDATE,TYPE = D,GROUP = 105,MFILL
SEX,TYPE = A,LEN = 1,GROUP = 105,MFILL
Constraint,values M - MALE, F - FEMALE.
MARITAL STATUS,TYPE = A,LEN = 1,GROUP = 105,MFILL
Constraint,values S - SINGLE, M - MARRIED, W - WIDOWED, D - DIVORCED.
PHONE NO(HOME),TYPE = S,PTYPE = P,LEN = 10,GROUP = 106,RJUST
(OFFICE),TYPE = S,PTYPE = P,LEN = 10,GROUP = 106,RJUST
SOCIAL SEC.#,TYPE = L,PTYPE = S,LEN = 9,GROUP = 107 CA 022l7873 l997-lO-09 W O 96/32675 PCTrUS96/05026 DRIVER LIC.#,TYPE = C,LEN = 15,GROUP = 107 CREDIT CARD#,TYPE = C,PTYPE = N,LEN = 16,GROUP = 108 TYPE,TYPE = A,LEN = 10,GROUP = 108 EMPLOYMENT STATUS,TYPE = A,LEN = 1,GROUP = 108 Constraint,values E - Employed,F - Full time student,P - Part time student.
OCCUPATION,TYPE = A,LEN = 20,GROUP = 109 EMPLOYER'S NAME,TYPE = A,LEN = 30,GROUP = 109 SPOUSE/GUARDIAN NAME,TYPE =A,LEN = 30,GROUP = 111 RELATIONSHIP,TYPE = A,LEN = 1,GROUP = 112 Constraint,values S - self,s - spouse,c - child,o - other.
PHONE NO(HOME),GROUP= 112,DATA = 1,RJUST
(OFFICE),GROUP = 112,DATA = 1,RJUST
OCCUPATION,GROUP = 113,DATA = 1 EMPLOYER'S NAME,GROUP = 113,DATA = 1 RESP. PARTY'S NAME,TYPE = A,LEN = 30,GROUP = 115 RELATIONSHIP,GROUP = 115,DATA = 1 BIRTHDATE,GROUP = 116,DATA = 1 SEX,GROUP = 116,DATA = 1 SOCIAL SEC.#,GROUP = 116,DATA = 1 DRIVER LIC.#,GROUP = 117,DATA = 1 CREDIT CARD#,GROUP = 117,DATA = 1 TYPE,GROUP = 117,DATA = 1 PHONE NO(HOME),GROUP = 118,DATA = 2,RJUST
(OFFICE),GROUP = 118,DATA = 2,RJUST
ADDRESS,GROUP= 119,DATA= 1 CITY,GROUP = 120,DATA = 1 STATE,GROUP = 120,DATA = 1 CA 022l7873 l997-lO-09 W O 96132675 PCTrUS96/05026 ZIP CODE,GROUP = 120,DATA = 1 OCCUPATION,GROUP = 121,DATA = 2 EMPLOYER'S NAME,GROUP = 121,DATA = 2 INSURED?,TYPE = A,LEN = 1,GROUP = 122 ' Constraint,values Y - YES, N - NO.
CARRIER CODE,GROUP= 122 PLAN NAME,TYPE =A,LEN = 20,GROUP = 123 INS ID,TYPE = C,LEN = 12,GROUP = 123 GROUP ID,TYPE = C,LEN = 12,GROUP = 123 OTHER INSURANCE?,TYPE = A,LEN = 1,GROUP = 125 Constraint,values Y - YES, N - NO.
CARRIER CODE,DATA = 1,GROUP = 125 PLAN NAME,GROUP = 126,DATA = 1 INS ID,GROUP = 126,DATA = 1 GROUP ID,GROUP = 126,DATA = 1 INSURED'S NAME,TYPE =A,LEN =30,GROUP= 127 RELATIONSHIP,TYPE = A,LEN = 1,GROUP = 127,DATA = 2 BIRTHDATE,TYPE = D,GROUP = 128,DATA = 2 SEX,GROUP = 128,DATA = 2 EMPLOYER'S NAME,GROUP = 128,DATA = 3 ACTIVE STMNT,TYPE = I,LEN = 2,GROUP = 130 Default value [ACTIVE STMNT] = 1.
BALANCE,TYPE = R,LEN = 10,DEC = 2,GROUP = 130,FPROT
OB DUE,TYPE = D,GROUP = 130 RECALL,TYPE = D,GROUP = 130 CHARGES,TYPE = R,LEN = 10,DEC = 2,TEMP,FHIDE

CA 022l7873 l997-lO-09 W O 96/32675 PCTrUS96/05026 POST AMOUNTS,TYPE = R,LEN = 1 0,DEC = 2,TEMP,FHIDE
CREDITS,TYPE = R,LEN = 1 0,DEC = 2,TEMP,FHIDE
PATIENT PORTION,TYPE = R,LEN = 1 0,DEC = 2,GROUP = 131 INSURANCE COVERAGE(%),TYPE = R,LEN = 1 0,DEC = 2,GROUP = 1 31 Propagation [PATIENT PORTION] = (100 - [INSURANCE COVERAGE(%)]) *.01 * ([BALANCE]-[DEDUCTIBLE]);
[PATIENT PORTION] = [PATIENT PORTION] + [DEDUCTIBLE].
DEDUCTIBLE,TYPE = R,LEN = 1 0,DEC = 2,GROUP= 131 BILLING DATE,TYPE = D,GROUP = 132 INS BILLING DATE,TYPE = D,GROUP = 132 PATIENT PAYMENTS,TYPE = R,LEN = 1 0,DEC = 2,GROUP = 133 INSURANCE PAYMENTS,TYPE = R,LEN = 1 0,DEC = 2,GROUP = 133 INSURANCE TYPE,TYPE = A,LEN = 1 ,GROUP = 134 Constraint,values E - MEDICARE,D - MEDICAID,G - GROUP HEALTH PLAN.
AUTHORIZATION NO,TYPE = C,LEN = 1 2,GROUP = 134 MEDICAID RESUB CODE,TYPE = C,LEN = 1 2,FHIDE
ORIGINAL REF NO,TYPE = C,LEN = 1 6,FHIDE
DATE OF SYMPTOM (CURRENT),TYPE=D,FHIDE
(PRIOR),TYPE = D,FHIDE
REFERRING PHYSICIAN,TYPE = A,LEN = 20,FHIDE
PHYSICIAN ID,TYPE = C,LEN = 1 0,FHIDE
FACILITY,TYPE = A,LEN = 20,FHIDE
2 5 HOSPITAL DATE (FROM) ,TYPE = D,FHIDE
(TO),TYPE = D,FHIDE
UNBL TO WORK (FROM),TYPE = D,GROUP = 1 40,FHIDE
(TO),DATA= 1 ,FHIDE
OUTSIDE LAB? ,TYPE = A,LEN = 1 ,FHIDE

CA 022l7873 l997-lO-09 W 096/32675 PCTrUS96/05026 Constraint,values Y - YES, N - NO.
LAB AMNT,TYPE = R,LEN = 8,DEC = 2,FHIDE
NICOE NAME,TYPE = A,LEN = 25,GROUP = 137 DESCRIPTION
ENTER THE NAME OF PERSON TO BE NOTIFIED IN CASE OF
EMERGENCY.
NICOE PHONE NO,GROUP = 1 37 CONDITION RELATED TO JOB?,TYPE = A,LEN = 1 ,FHIDE
Constraint,values Y - YES, N - NO.
AUTO ACClDENT?,TYPE = A,LEN = 1 ,FHIDE
Constraint,values Y - YES, N - NO.
OTHER ACClDENT?,TYPE = A,LEN = 1 ,FHIDE
Constraint,values Y - YES, N - NO.
#OBJECT BILLING DATA,PRIMITIVE,JOURNAL_RCD,HIDE
ACNT NO,DPROT
STMNT,DPROT
TRANS DATE,TYPE = D
Constraint,condition ([TRANS DATE] LE DATE).
Description Enter date when service started for this procedure.
TO DATE,TYPE=D
Constraint,condition ([TO DATE] LE DATE); ([TO DATE] GE [TRANS DATE]).
Description CA 022l7873 l997-lO-09 W 096/32675 PCTrUS96/05026 Enter date when service ended for this procedure ~ in case of surgery or pregnancy to and from dates may be different.
PS,TYPE = A,LEN = 1 Constraint,values IH - in patient hospital,OH - out patient hospital, O-office.
TS,TYPE = N,LEN = 1 Constraint,values 1 - medical care,2 - surgery,3 - consultation,4-xray,5 - laboratory, 8 -assi:~lallt surgery,9 - other medical service, O - blood or packed red shell.
CODE,TYPE = A,LEN = 4,UNIQUE
Description Enter four byte alias procedure code or payment/adjust.codes:
payments- pca(cash), pck(check), pin(insurance),pcl(collection):payment error adjust. -cpe(credit postingerror) or dpe(debit): payment -dop(refund), drc(returncheck), drc(return check fee):
dlf(legal/court), dfc(financecharge): charges adjustment - cad(credit) or dda(debit) orccd(discount).
Propagation [AMOUNT] = [AMNT]; ([UNIT] EQUAL TO O) [UNIT] = 1.
DIAG,TYPE = A,LEN = 6 Description Enter valid diagnosis code from icd 9 code book.
UNIT,TYPE = I,LEN = 2 CA 022l7873 l997-lO-09 W O 96/32675 PCTrUS96/05026 AMOUNT,TYPE = R,LEN = 8,DEC = 2 DESCRIPTION,TEMP
AMOUNTS,FHIDE,TEMP
OLD AMOUNT,TYPE = R,LEN = 8,DEC = 2,FHIDE,TEMP
POST AMNT,TYPE = R,LEN = 8,DEC = 2,FHIDE,TEMP
#OBJECT BILLING DATABASE,VIEW of BILLING DATA,DATABASE
Initial values SETVALUE([STMNT],[ACTIVE STMNT]).
activation propagation [OLD AMOUNT] = [AMOUNT] * [UNIT] * [CDFLG].
Propagation [POST AMNT] = [AMOUNT] * [UNIT] * [CDFLG] -[OLDAMOUNT];
[POST AMOUNTS] = [POST AMOUNTS] + [POST AMNT];
(([CTYPE] EQUAL TO 9) AND ([POST AMNT] > O)) [PATIENT PAYMENTS] = [PATIENT PAYMENTS] + [POST
AM NT];
(([CTYPE] EQUAL TO 8) AND ([POST AMNT] > O)) [INSURANCE PAYMENTS] = [INSURANCE
PAYMENTS] + [POST AMNT];
[LAST] = DATE;
([STMNT] > [ACTIVE STMNT]) [ACTIVE STMNT] = [STMNT].
Iink propagation ([POST AMOUNTS] ! = O) [BALANCE] = [BALANCE] +
[POSTAMOUNTS] .
DOCNAME,FHIDE,HEADER,DPROT
LINE1 ,FHIDE,HEADER,DPROT
LINE2,FHIDE,HEADER,DPROT
LINE3,FHIDE,HEADER,DPROT

CA 022l7873 l997-lO-09 W O 96/32675 PCT~US96/05026 LINE4,FHIDE,HEADER,DPROT
ACNT STRING,PHIDE,COL = 50,GROUP = 98,FPROT,DPROT
PATIENT NAME,GROUP = 100,FPROT,PHIDE,COL = 5,DPROT
ACNT NO,GROUP = 100,FPROT,COL = 55,DPROT
ADDRESS,GROUP = 101,FPROT,PHIDE,COL = 5,DPROT
STMNT,GROUP = 101,FPROT,COL = 57,DPROT
CITY,GROUP = 102,FPROT,PHIDE,COL= 5,DPROT
STATE,GROUP = 102,FPROT,PHIDE,FCAT,DPROT
ZIP CODE,GROUP=102,FPROT,PHIDE,FCAT,DPROT
BALANCE,GROUP = 102,COL = 55,DPROT
STMNT,GROUP = 105,ENTRY = 10,RSKIP
TRANS DATE,GROUP = 105,ENTRY = 10 TO DATE,GROUP = 105,ENTRY = 10,RSKIP
CODE,GROUP--1 Q5,ENIRY--1 Q,RSKlP
AMOUNT,GROUP = 105,ENTRY = 10,RSKIP
UNIT,GROUP = 105,ENTRY = 10,RSKIP
PS,GROUP = 105,ENTRY = 10,RSKIP
TS,GROUP = 105,ENTRY = 10,RSKIP
DIAG,GROUP = 105,ENTRY = 10,RSKIP
DESCRIPTION,GROUP = 105,ENTRY = 10,FPROT
AMOUNTS,GROUP = 105,ENTRY = 10,WSKIP,RJUST
CHARGES,GROUP = 106,WSKIP
CREDITS,GROUP = 106,WSKIP
BALANCE,GROUP = 106,WSKIP,DPROT
TOTAL OF AMOUNT,RSKIP,TEMP
Constraint,assignment [TOTAL OF AMOUNT] = COLSUM([AMOUNT]).
POST AMOUNTS,FHIDE
OLD AMOUNT,FHIDE

CA 022l7873 l997-lO-09 W O 96/32675 PCTrUS96/05026 CDFLG,FHIDE,TEMP
Constraint,values 1 - debit,-1 - credit.
#OBJECT REMOVE VISIT CHARGE,SYNONYM OF BILLING
DATABASE,UPDATE
activation propagation =BILLING DATABASE.
#OBJECT PRINT INSURANCE FORM,VIEW of BILLING DATA,NOLINE,REPORT,GROUP = 6 initial values [STMNT NUMBER] = ~ACTIVE STMNT];
GETVALUE([STMNT NUMBER]).
activation propagation [AMOUNTS] = [AMOUNT] * [UNIT];
([CDFLG] EQUAL TO 1 ) [CHARGES] = [CHARGES] +
[AMOUNTS];
([CDFLG] EQUAL TO -1 ) [CREDITS] = [CREDITS] +
[AMOUNTS] .
Constraint,condition (([CDFLG] EQUAL TO 1) AND ([AMOUNT] > O) AND
([STMNT]EQUAL TO [STMNT NUMBER])).
post propagation [POST AMOUNTS] = O; [CREDITS] = O; [CHARGES] = O.
CARRIER NAME,PHIDE,ROW=1,COL=43 25 (ADDRESS),PHIDE,ROW=2,COL=43 (CITY),PHIDE,ROW = 3,COL = 43 (STATE),PHIDE,ROW = 3,FCAT
(ZIP CODE),PHIDE,ROW = 3,FCAT
INSURANCE TYPE,PHIDE,ROW = 7,COL = 2 CA 022l7873 l997-lO-09 W 096/32675 PCTrUS96/05026 INS ID,PHIDE,ROW = 7,COL = 50 PATIENT NAME,PHIDE,ROW = 9,COL = 1 BIRTHDATE,PHIDE,ROW = 9,COL = 30 SEX,PHIDE,ROW = 9,COL = 41,BOX = 5 s RESP. PARTY'S NAME,PHIDE,ROW = 9,COL = 50 ADDRESS,PHIDE,ROW = 11,COL = 1 RELATIONSHIP,DATA = 1,PHIDE,ROW = 11,COL = 32,BOX = 5 ADDRESS,DATA = 1,PHIDE,ROW = 11,COL = 50 CITY,PHIDE,ROW = 13,COL = 1 0 STATE,PHIDE,ROW= 13,COL=26 MARITAL STATUS,PHIDE,ROW = 13,COL = 34,BOX = 5 CITY,DATA = 1,PHIDE,ROW = 13,COL = 50 STATE,DATA = 1,PHIDE,ROW = 13,COL = 74 ZIP CODE,PHIDE,ROW= 15,COL= 1 PHONE NO(HOME),PHIDE,RJUST,COL = 13 EMPLOYMENT STATUS,PHIDE,COL = 34,ROW = 15 ZIP CODE,DATA = 1,PHIDE,ROW = 15,COL = 50 PHONE NO(HOME),PHIDE,RJUST,ROW = 15,COL = 63 INSURED'S NAME,DATA = 1,PHIDE,ROW = 17,COL = 1 GROUP ID,PHIDE,ROW = 17,COL= 50 GROUP ID,DATA= 1,PHIDE,ROW= 19,COL= 1 CONDITION RELATED TO JOB?,PHIDE,BOX = 6,ROW = 19,COL = 34 BIRTHDATE,DATA = 1,PHIDE,ROW = 19,COL = 53 SEX,DATA = 1,PHIDE,ROW = 19,COL= 69,BOX = 5 BIRTHDATE,DATA = 2,PHIDE,ROW = 21,COL = 1 SEX,DATA = 2,PHIDE,ROW = 21,COL = 17,BOX = 6 AUTO ACCIDENT?,PHIDE,ROW = 21,COL= 34,BOX = 6 EMPLOYER'S NAME,DATA = 2,PHIDE,ROW = 21,COL= 50 EMPLOYER'S NAME,DATA = 3,PHIDE,ROW = 23,COL = 1 CA 022l7873 l997-lO-09 W 096/32675 PCTrUS96tO5026 OTHER ACCIDENT?,PHIDE,ROW = 23,COL = 34,BOX = 6 PLAN NAME,PHIDE,ROW = 23,COL = 50 PLAN NAME,DATA = 1,PHIDE,ROW = 25,COL= 1 OTHER INSURANCE?,PHIDE,ROW = 25,COL = 51,BOX = 5 DATE OF SYMPTOM (CURRENT),PHIDE,ROW=31,COL=2 (PRIOR),PHIDE,ROW = 31,COL = 38 UNBL TO WORK (FROM),PHIDE,ROW=31,COL=54 (TO),DATA = 1,PHIDE,ROW = 31,COL = 68 REFERRING PHYSICIAN,PHIDE,ROW = 33,COL = 1 10 PHYSICIAN ID,PHIDE,ROW = 33,COL = 29 HOSPITAL DATE (FROM),PHIDE,ROW = 33,COL = 54 (TO),PHIDE,ROW = 33,COL = 68 OUTSIDE LAB?,PHIDE,ROW = 35,COL = 52 LAB AMNT,PHIDE,ROW = 35,COL = 62 MEDICAID RESUB CODE,PHIDE,ROW = 37,COL = 50 ORIGINAL REF NO,PHIDE,ROW = 37,COL = 62 AUTHORIZATION NO,PHIDE,ROW = 39,COL = 51,LINE = 1 TRANS DATE,PHIDE,ENTRY = 6,ROW = 43,COL = 1,LINE = 1 TO DATE,PHIDE,ENTRY = 6,ROW = 43,COL = 10 20 PS,PHIDE,ENTRY = 6,ROW = 43,COL = 19 TS,PHIDE,ENTRY = 6,ROW = 43,COL = 22 CPT4 CODE,PHIDE,ENTRY = 6,ROW = 43,COL = 25 D IAG, PH I D E, ENTRY = 6, ROW = 43, CO L = 42 AMOUNT,PHIDE,ENTRY=6,ROW=43,COL=48,RJUST
25 UNIT,PHIDE,ENTRY = 6,ROW = 43,COL = 58 FEDTAXID,PHIDE,DPROT,ROW = 55,COL = 2 IDTYPE,PHIDE,DPROT,ROW = 55,COL = 16,BOX = 3 Constraint,values S- SSN,E- EIN.

CA 022l7873 l997-lO-09 W 096/32675 PCTrU~;C~.?5 ACNT NO,PHlDE,DPROT,ROW = 55,COL = 23 ASSlGNMENT,PHlDE,DPROT,ROW = 55,COL = 37 CHARGES,PHIDE,ROW = 55,COL = 50,RJUST
PATIENT PAYMENTS,PHIDE,FHIDE
5 CHARGES,PHIDE,ROW = 55,COL = 69,RJUST
DOCNAME,PHIDE,DPROT,ROW = 57,COL = 51 LINE1,PHIDE,DPROT,FHIDE
LINE2,PHIDE,DPROT,ROW = 58,COL = 51 LINE3,PHIDE,DPROT,ROW = 59,COL = 51 10 PIN,PHIDE,DPROT,ROW = 60,COL = 51 #OBJECT DAILY JRNL,JOURNAL OF BILLING
DATA, BROWSE,CREATE
link initial values GETVALUE([FROM_DATE],[TO_DATE]) .
link Corl~L~ ail ~,condition (([TRANS DATE] GE [FROM_DATE]) AND ([TRANS DATE]
LE[TO_DATE])) .
Iink activation propagation [F] = 1; [JRNL DATE] = tTRANS DATE]; [PTYPE] = [ITYPE];
[POST AMNT] = [AMOUNT] * [UNIT] *[CDFLG].
Iink propagation [F] = 1; (ACTIVE INSTANT) [F] = 2; [JRNL DATE] = DATE;
[PTYPE] = [ITYPE].
JRNL DATE,TYPE = D

~ PATIENT NAME
TRANS DATE
STM NT
CODE

CA 022l7873 l997-lO-09 W 096/32675 PCTrUS96/05026 CDFLG
CTYPETYPE = N,LEN = 1 Constraint,values 1 - OBSTETRICS, 2 - SONOGRAM, 3 - LASER, 4- MEDICAL
5 - GYNECOLOGY/SURGERY, 6 - OFFICE, 7 - OTHER SERVICE, 8 - INSURANCE PAYMENT, 9 - OTHER PAYMENT, 10 -REFUND, 1 1 - CHARGE/CREDIT ADJST, 12 - CHARGE/DEBIT ADJST, 13 - PMNT/CREDIT ADJST, 14 - PMNT/DEBIT ADJST.

F,TYPE = N,LEN = 1 POST AMNT,TYPE = R,LEN = 1 O,DEC = 2 #OBJECT DAILY RECONClLlATlON,VlEW OF
DAlLYJRNL,BROWSE,REPORT,PAGE
15activation propagation ([CTYPE] < 8) [CHARGES] = [CHARGES] + [POST AMNT];
(([CTYPE] EQUAL TO 8) OR ([CTYPE] EQUAL TO

9)) [PAYMENT]
= [PAYMENT] + [POST AMNT];
20([CTYPE] EQUAL TO 10) [REFUND] = [REFUND] +
[POSTAMNT];
([CTYPE] EQUAL TO 11 ) [CREDIT
ADJST] = [CREDITADJST] + [POST
AMNT];
([CTYPE] EQUAL TO 12) [DEBIT ADJST] = [DEBIT ADJST]
+ ~POST
AMNT];
([CTYPE] EQUAL TO 13) [PMNT/CDT
ADJST] = [PMNT/CDTADJST] + [POST AMNT];

W O 96/32675 PCTrUS96/05026 ([CTYPE] EQUAL TO 14) [PMNT/CDT ADJST] = [PMNT/DBT
ADJST] +
[POST AMNT].

5 JRNL DATE,ENTRY = 1 6,GROUP = 100 ACNT NO,ENTRY = 1 6,GROUP = 100 PATIENT NAME,ENTRY = 1 6,GROUP = 100 TRANS DATE,ENTRY--16, GROUP = 1 00,WSKIP
STMNT,ENTRY = 1 6,GROUP = 100 CTYPE,ENTRY = 1 6,GROUP = 1 00,WSKIP,RSKIP
F,ENTRY = 1 6,GROUP= 1 00,WSKIP,RSKIP
PTYPE,ENTRY = 1 6,GROUP = 1 00,WSKIP
CODE,ENTRY = 1 6,GROUP = 100 POST AMNT,ENTRY = 1 6,GROUP = 100 CHARGES,GROUP = 101 PAYMENT,GROUP = 101 REFUND,GROUP= 101 CREDIT ADJST,GROUP = 102 DEBIT ADJST,GROUP= 102 PMNT/CDT ADJST,GROUP = 1 03,WSKIP
PMNT/DBT ADJST,GROUP = 1 03,WSKIP
#OBJECT BILLING/INS MNGMNT,VIEW of PATIENT CHART,UPDATE
Constraint,condition ([BALANCE] > 1).
ACNT NO,GROUP = 1 33,FPROT
- VISIT FIRST,GROUP= 1 33,FPROT
LAST,GROUP= 1 33,FPROT
PATIENT NAME,GROUP = 1 34,FPROT
PHONE NO(HOME),GROUP = 1 34,DATA = 2,FPROT,RJUST,PHIDE

CA 022l7873 l997-lO-09 W 096/32675 PCTnUS96/05026 (OFFICE),GROUP = 134,DATA = 2,FPROT,PHIDE
RESP. PARTY'S NAME,GROUP = 136,FPROT
RELATIONSHIP,GROUP = 136,DATA = l ,FPROT
CARRIER CODE,GROUP = 137 5 CARRIER NAME,GROUP= 137,FPROT
PHONE NO,GROUP= 138,RJUST
FAX NO,GROUP = 138,RJUST
(800) NO,GROUP = 138,RJUST
PLAN NAME,GROUP = 139 0 INS ID,GROUP = 139 GROUP ID,GROUP = 139 DEDUCTIBLE,GROUP = 141 INSURANCE COVERAGE(%),GROUP = 141 PATIENT PORTION,GROUP= 141 5 BILLING DATE,GROUP=142 INS BILLING DATE,GROUP=142 PATIENT PAYMENTS,GROUP = 143 INSURANCE PAYMENTS,GROUP= 143 BALANCE,GROUP = 143,FPROT
AUTHORIZATION NO,GROUP = 145 OUTSIDE LAB?,GROUP = 145 LAB AMNT,GROUP = 145 MEDICAID RESUB CODE,GROUP = 146 ORIGINAL REF NO,GROUP = 146 DATE OF SYMPTOM (CURRENT),GROUP= 147 (PRIOR),GROUP = 147 REFERRING PHYSICIAN,GROUP=148 PHYSICIAN ID,GROUP = 148 FACILITY,GROUP = 149 CA 022l7873 l997-lO-09 W 096/32675 PCTnUS96/05026 HOSPITAL DATE (FROM),GROUP= 150 (TO),GROUP = 150 UNBL TO WORK (FROM),GROUP= 151 (TO),GROUP = 1 51 ,DATA = 1 5 CONDITION RELATED TO JOB?,GROUP = 1 52 AUTO ACCIDENT?,GROUP = 1 52 OTHER ACCIDENT?,GROUP = 152 ACTIVE STMNT,GROUP = 1 53,FPROT
#OBJECT PRINT BlLL,SYNONYM OF BILLING DATABASE, REPORT
initial values =PRINT INSURANCE FORM.
Constraint,condition ([STMNT] EQUAL TO [STMNT NUMBER]).
activation propagation =PRINT INSURANCE FORM.
#OBJECT LIST OB DUE PATIENT,VIEW OF
PATIENTCHART,BROWSE,GROUP = 1 6,REPORT,PAGE
initial values GETVALUE([MONTH]) .
Co~,sL~ail-l,condition ([MONTH] EQUAL TO MMYYYY([OB DUE])).
PATIENT NAME
OB DUE
#OBJECT LIST RECALL PATlENT,VlEW OF
25 PATIENTCHART,BROWSE,GROUP = 1 6,REPORT,PAGE
initial values GETVALUE([MONTH]) .
- Col ,~lrainL,condition ([MONTH] EQUAL TO MMYYYYY([RECALL])).

W O 96/3267~ PCTrUS96/05026 PATIENT NAME
RECALL
#OBJECT ACCOUNT BALANCE DUE,VIEW o~ PATIENT CHART, BROWSE, REPORT, PAGE
Constraint,condition l[BALANCE] > 1).
ACNT NO
PATIENT NAME
BALANCE

#OBJECT PRACTICE ANALYSlS,ATOMlC OF DAILY JRNL, ANALYSIS
link activation propagation [MONTHl = MMYYYY(tJRNL DATE]);
([CTYPE] EQUAL TO O) [CTYPE] = 1.
link propagation SUMBY([CTYPE],~POST AMNTl);
([CTYPE] < 8) lCHARGES] = [CHARGES] + [POST AMNT];
(([CTYPE] EQUAL TO 8) OR ([CTYPE] EQUAL TO
9))[PAYMENT]
= lPAYMENTl + [POST AMNT].
MONTH,DPROT,GROUP = 1 O,COL = 50,XAXIS
OBSTETRICS,GROUP = 1 1 ,INPUT
SONOGRAM,GROUP= 1 2,1NPUT
LASER,CSUM,GROUP= 1 3,1NPUT
MEDICAL LAB,GROUP = 1 4,1NPUT
GYNECOLOGY,GROUP= 1 5,1NPUT
OFFICE,GROUP = 1 6,1NPUT
OTHER SERVICE,GROUP = 1 7,1NPUT
INSURANCE PAYMENT,GROUP = 1 8,1NPUT

CA 022l7873 l997-lO-09 W O g6/32675 PCTrUS96/05026 OTHER PAYMENT,GROUP = 1 9,1NPUT
~ REFUND,GROUP = 20,1NPUT
CREDIT ADJST,GROUP = 21 ,INPUT
DEBIT ADJST,GROUP = 21 ,INPUT
s PMNT/CDT ADJST,GROUP = 22,1NPUT
PMNT/DBT ADJST,GROUP = 22,1NPUT
CHARGES,GROUP = 24,SERIES,OUTPUT
PAYMENT,GROUP = 24,SERIES,OUTPUT
#OBJECT INS CHARGES ANALYSIS,ATOMIC OF DAILY JRNL, link activation propagation [MONTH] = MMYYYY([JRNL DATE]).
Iink propagation ~EPTYPE} ~ 0~ AN~({S~YPE] ~ 8)) SUMBY([PTYPE],[POSTAMNT]);
(([PTYPE] EQUAL TO 0) AND ([CTYPE] < 8)) [OTHER]
=[OTHER] + [POST AMNT].
activation propagation [CHARGES] = SUM([PRIMARY],[OTHER]).
MONTH,DPROT,COL=50 PRIMARY,GROUP = 1 MEDICARE/CAID,GROUP = 2 SANUS,GROUP = 3 PRUCARE,GROUP = 4 NORTH TX,GROUP = 5 DALLAS,GROUP = 6 AETNA,GROUP = 7 BLUE CHOICE,GROUP=8 CHAMPUS,GROUP = 9 CA 022l7873 l997-lO-09 W 09613267S PCTrUS9C.~_026 SANUS PPO,GROUP = 1 O
TRAVELERS,GROUP = 1 1 PTYPE 12,GROUP=12 PTYPE 1 3,GROUP = 13 PTYPE 14,GROUP=14 PTYPE 1 5,GROUP = 15 OTHER,GROUP= 1 6 CHARGES,GROUP = 1 7,TEMP
#OBJECT PROCEDURE
10 CODE,PRIMITIVE,ADD,UPDATE,REPORT,PAGE
CODE,PROTECT
CPT4 CODE,TYPE = C,LEN = 7,RSKIP
Description enter valid cpt4 codes in case of payment er same as code or skip the field.
MED CODE,TYPE = C,LEN = 7,RSKIP
Description Eenter alternate procedure code used by medicare\medicaid.
CDFLG,TYPE = N,LEN = 1 ,RSKIP~0 AMNT,TYPE = R,LEN = 8,DEC = 2 Description Charges should be amount you charge for procedure. In other case it is O.
CTYPE~5 DESCRIPTION

#OBJECT INSURANCE COMPANY,PRIMITIVE,ADD,UPDATE,REPORT, PAGE
CARRIER CODE,TYPE = A,LEN = 8,GROUP = 1 OO,PROTECT,UNIQUE

CA 022l7873 l997-lO-09 W 096/32675 PCTrUS96/05026 CARRIER NAME,TYPE =A,LEN = 25,GROUP= 101 - PHONE NO,TYPE = S,PTYPE = P,LEN = 10,GROUP = 102,RJUST
(800) NO,TYPE = S,LEN = 10,PTYPE = P,GROUP = 102,RJUST
FAX NO,TYPE = S,LEN = 10,PTYPE = P,GROUP = 102,RSKIP,RJUST
5 (ADDRESS),TYPE = A,LEN = 30,GROUP = 103,RSKIP
(CITY) ,TYPE = A,LEN = 15,GROUP = 104,RSKIP
(STATE),TYPE = A,LEN = 2,GROUP = 104,RSKIP
(ZIP CODE),TYPE = L,PTYPE = Z,LEN = 5,GROUP = 104,RSKIP
ITYPE,TYPE = I,LEN = 2,GROUP = 105,RSKIP
Constraint,values 01 - PRIMARY, 02 - MEDICARE/CAID, 03 - SANUS, 04 -PRUCARE,05 - NORTH TX, 06 - DALLAS, 07 - AETNA, 08 -BLUECHOICE,09 - CHAMPUS, 10 - SANUS PPO, 11 TRAVELERS, 12 - PTYPE 12, 13 - PTYPE 13, 14 - PTYPE 14, 15 - PTYPE
15.
#OBJECT DIAGNOSIS CODE,PRIMITIVE,ADD,UPDATE,REPORT,PAGE
DIAG,TYPE = C,LEN = 5,UNIQUE
DIAGNOSIS
#OBJECT DOCTOR,TRANSIENT,HIDE
initial values [DOCNAME] = "J. DOE, M.D., P.A.";
[LINE1] = "OBSTETRICS and GYNECOLOGY";
[LINE2] = "123 ANY STREET, SUITE 100";
[LINE3] = "ANY TOWN, TEXAS 75200";
[PIN] = "1177";
[FEDTAXID] = " 123456789";
~ [ACNT STRING] = "STATEMENT OF ACCOUNT";
[IDTYPE] = "E" .

CA 022l7873 l997-lO-09 W O 96/32675 PCTrUS96/05026 DOCNAME,TYPE = A,LEN = 25 LINE 1,TYPE = A,LEN = 25 LINE2,TYPE = A,LEN = 25 LINE3,TYPE = A,LEN = 25 PIN,TYPE = C,LEN = 12 FEDTAXID,TYPE = N,LEN = 10 IDTYPE,TYPE = C,LEN = 1 ACNT STRlNG,TYPE = C,LEN = 15 #OBJECT POST EXPENSES,PRlMlTlVE,ADD,UPDATE,GROUP= 16, REPORT,PAGE
CHECK DATE,TYPE=D
ACNT CODE,TYPE = I,LEN = 2 Constraint,values 1 - RENT,2 - TELEPHONE,3 - ANSWERING SERVlCE,4 -UTlLlTlES, 5 - POSTAGE,6 - MEDICAL LAB,7 -MEDICAL
SUPPLY,8-OFFICE SUPPLY,9 - AUTO INSURANCE,10 -MALPRACTlCElNSURANCE,11 - HEALTH INSURANCE,12 OTHER
INSURANCE, 13 -TRADE DUES,14 - SEMINAR TRAlNlNG,15 -PROFESSIONAL SERVICE,16- ENTERTAlNMENT/GlFTS,17 -ACCOUNTING & LEGAL, 18 - CONTRACTSERVICE,19 - AUTO
EXPENSE, 20 - OSHA EXPENSE, 21 - REFUNDS,22- LEASE
PAYMENT,23 - LOAN PAYMENT,24 - PAYROLL,25 -TRANSFER,26 -ALL OTHER.
CHECK NO,TYPE = L,LEN = 6 CHECK AMNT,TYPE = R,LEN = 10,DEC = 2 REFERENCE,TYPE = A,LEN = 20 CA 022l7873 l997-lO-09 W 096132675 PCT~US96/0~026 #OBJECT EXPENSE REPORT,SYNONYM OF POST EXPENSES, BROWSE, REPORT, PAGE
Initial values GETVALUE([MONTH]) .
Constraint,condition ([MONTH] EQUAL TO MMYYYY([CHECK DATE])).

#INDEX PATIENT CHART,2,PATIENT NAME
#INDEX BILLING DATA,1,ACNT NO
10 #INDEX POST EXPENSES,1 ,CHECK DATE
#INDEX DAILY JRNL,1,JRNL DATE

#END
As can be seent the medical system is muGh more Gomp!iGated 15 as compared to the simple notepad and calendar applications.
Despite the length of the information model itself, however, it should be appreciated that the model is all that is required for purposes of executing the business application. In other words, once the medical system information model is written, it is not required for the user to 20 write source code or other high level code to implement the model.
It is further not required that the user maintain source code or the like to implement enhancements or to correct errors. In this regard, all the user need do is to modify the information model (e.g., by adding an attribute, modifying or adding an object, changing an 25 expression in an object, etc.). In operation, the information model is directly processed by the CSE. The MICS may include a preprocessor to process the expressions if desired and the functions can be embedded in the MICS or can be distinct therefrom and thus CA 022l7873 l997-lO-09 W 096/32675 PCTrUS96tO5026 executed using IPC facilities. The base MICS need not be changed or altered .
With reference to the medical system information model and the function set previously described, the trace of the CSE for the exemplary system can also be seen for a system which does not utilize the expected behavior control system which will be more fully discussed in a moment:
State 1: MICS initializes presentation interface and creates linked list of three models namely appointment calendar, notepad and l0 medical system.
State 2: CSE displays three models using presentation interface. Assume the user conditions the medical system. The CSE
activates the medical system model and sets "active model" attribute to the medical system.
State 3: CSE displays the following objects to user using the presentation interface:
PATIENT CHART
BILLING DATABASE
PRINT BILL

DAILY RECONCILIATION
BILLING?INS MNGMNT
LIST OB DUE PATIENT
LIST RECALL PATIENT

PRACTICE ANALYSIS
INS CHARGE ANALYSIS
PROCEDURE CODE
INSURANCE COMPANY

CA 022l7873 l997-lO-09 W O 96/32675 PCTnUS96/05026 DIAGNOSIS CODE
POST EXPENSES
EXPENSE REPORT
Assuming the user conditions the PATIENT CHART object, the CSE
proceeds to State 4.
State 4: CSE displays the following action associated with PATIENT CHART object using the presentation interface (note that these actions are displayed because they are the only action flags in the object and the actions associated with such action flags):
ADD
U PDATE
DELETE
VIEW
Assume now that the user conditions UPDATE. The CSE then proceeds to state 5.
State 5: CSE sets all values of PATIENT CHART object to null.
CSE looks for initial values expression of the PATIENT CHART.
There are no such expressions; if one existed it would have been executed. The primary object has no associated link object so no instant is activated for a link object. The CSE then selects data object of the PATIENT CHART. Since PATIENT CHART type is primitive, the DATA OBJECT of PATIENT CHART is PATIENT CHART
itself. Because the action instant type flag of an active action is ACTIVE INSTANT and PATIENT CHART has no constraint expression, the CSE instantiates instant of the DATA OBJECT as foilows:
The CSE displays the following two keys using the ~ presentation interface (because the PATIENT CHART instances are CA 022l7873 l997-lO-09 W O 96/32675 PCTnUS96/05026 accessed by indexes or keys as indicated in the index at the end of the object):
ACCOUNT NO
PATIENT NAME
Assuming the user enters the key value for PATIENT NAME, the - CSE interacts until a valid key value is entered. The CSE also activates instant associated with PATIENT NAME by instantiating PATIENT CHART attributes using the database interface. Assuming activation is successful, the CSE looks for an activation expression 10 associated with PATIENT CHART object. There is none here; if one existed it would have been executed.
State 6: CSE first determines if there is any function flag associated with the UPDATE action. In this case there is only one function USR_INSTANTIATION, so CSE executed USR_INSTANTIATION function. This function displays attributes to user using presentation control flags and the presentation interface.
The user then modifies the attributes and returns an "event." If event is not "process" (selection of PROCESS or NEXT or PREV
EVENT), the CSE proceeds to an appropriate state described in the state 6 logic of the CSE. Assuming the selected event is "process", the CSE executes any propagation expression associated with the active object. In this case there is none. CSE then determines if DATA OBJECT associated with PRIMARY OBJECT is primitive or atomic. In this case DATA OBJECT of PRIMARY OBJECT PATIENT
2~ CHART is PATIENT CHART itself. Since PATIENT CHART is primitive, CSE then determines if active action has any instant propagation type flag. In this instant propagation type flag is UPDATE INSTANT. Since PATIENT CHART instant is ACTIVE
INSTANT the CSE updates the instant of PATIENT CHART using the CA 022l7873 l997-lO-09 W 096/32675 PCTrUS96/05026 database interface. If "process" is a result of PREV/NEXT event then the CSE will get prev/next instant of the patient chart from the database, activate the instant and repeat state 6, else the CSE
returns to state 4. In the present case, assume "process" was the result of even PROCESS, then CSE returns to state 4. This completes the processing.
Referring now to the second calendar program information model, the model contains no dictionary or object. The model also does not implement the expected behavior control system. The trace 10 of the CSE for the exemplary system in which the system learns can also be seen.
State 1: MICS initializes the presentation interface and creates a linked list of three models, namely the appointment calendar, notepad and medical system.
State 2: The CSE activates the appointment calendar as follows. CSE displays the three models using presentation interface.
Assume the user conditions the appointment calendar.
Since the appointment calendar has no object, CSE creates appointment calendar object and sets control flags and control expressions defined at model equal to object, that is UPDATE ADD, SELECT EXPRESSION. The CSE also sets all attributes defined under the model as attributes of appointment calendar object. Now if object has attribute type and selects expression type attribute, it expands attributes using attribute selection expression. In this, 9:30 A.M. has attribute type equal to time and has associated attribute selection expression. CSE executes select expression and creates attributes from 9:00 A.M. to 5:00 P.M. Since DATE has a UNIQUE
flag, the CSE sets DATE as an index for the Appointment Calendar.
The object now created is as follows:

CA 022l7873 l997-lO-09 W O 96/3267S PCTrUS96/05026 #OBJECT APPOINTMENT CALENDAR,PRIMITIVE,UPDATE,LEARN
select, INSTANT
(NEXT INSTANT)[DATE] + = 1; (PREV INSTANT) [DATE]- = 1 DATE,TYPE = d DATE,TYPE = d,PTYPE = d,TEMP
09:00 A.M.,TYPE = C,LEN = 66 Description Type any information you want to include for this time slot.
10 10:00 A.M.,TYPE = C,LEN = 66 Description Type any information you want to include for this time slot.
1 1 :00 A.M.,TYPE = C,LEN = 66 Description Type any information you want to include for this time slot.
12:00 P.M.,TYPE = C,LEN = 66 Description Type any information you want to include for this time slot.
1 :00 P.M.,TYPE= C,LEN = 66 Description Type any information you want to include for this time slot.
2:00 P.M.,TYPE = C,LEN = 66 Description Type any information you want to include for this time slot.

CA 022l7873 l997-lO-09 W O 96/32675 PCTrUS9610S026 3:00 P.M.,TYPE = C,LEN = 66 ~ Description Type any information you want to include for this time slot .
4:00 P.M.,TYPE = C,LEN = 66 Description Type any information you want to include for this time slot.
5:00 P.M.,TYPE = C,LEN = 66 Description Type any information you want to include for this time slot.
NOTE,LEN = 1 34,TYPE = C
Description Type up to two lines of text as notes.
TODO,LEN = 1 34,TYPE = C
Description Type up to two lines of text for things to do.
#Index, APPOINTMENT CALENDAR,UNIQUE

The CSE activates the appointment calendar and sets active model to appointment calendar and proceeds to state 3.
State 3: Now since there is only one object, CSE sets appointment calendar as object and sets next state to state 4.
State 4: Since there is only one action associated with action control flags, CSE sets active action to UPDATE ADD and goes to state 5.
State 5: CSE sets all values of calendar to null. Because action instant type has action type flag of an active instant, CSE

W O 96/32675 PCTnUS96/05026 obtains index value date from user to instantiate the appointment book instant. Since there is a select expression, CSE executes select expression and select expression selects next date if event is "next"
or "prev". Since event is "process" CSE obtains date from the user.
If date was as result of "next" or prev", CSE will skip the process of obtaining date from the user. In this case date is not set, so CSE
obtains the date from the user using presentation interface. Assume user enters date value. CSE obtains the appointment calendar for the specified date. If appointment book for date exists it goes to state 6.
10 Assume appointment book page does not exist. Since calendar has learn flag CSE sets active instant flag to EMPTY and action to ADD
and sets next state to 6. This is where CSE differs from traditional programming systems. Since there is only one control flag associated with action ADD, CSE instantiates the appointment calendar via user interface. The user then modifies the appointment and returns an event assuming user selects an event "next". Since action is ADD and instant is EMPTY, CSE adds calendar for specific date using database interface. CSE then proceeds to state 6.
Please note that calendar records in the database appear to exist for all dates to user. In reality no data exists unless there is information in the appointment calendar for given date. This is significant because if one needs to use the database to build a calendar using the database management system, one must create empty records for all years. This can waste significant disk space.
The action control flag learn makes it possible to create a database record when instant is instantiated and no record exists.
According to the invention, a user of the MICS simply writes information models rather than source code or the like. The information model 12 and functions 16 replace the common source CA 022l7873 l997-lO-09 W 096/32675 PCTnUS~'"5~26 code programs used in computer software systems of the prior art.
To modify the operation of the program, the user need only change the information model and thus there is no software maintenance in the traditional sense. This approach is therefore radically different from prior art techniques and practices.
Thus a designer desiring to take advantage of the present invention builds models as opposed to applications, thereby allowing end users to create their own applications directly from the business model. As set forth above, a complete medical system is 10 implemented using less than about 700 lines of an information model as compared to thousands upon thousands of lines of complex source code. The main processing engine of the MICS is the CSE
machine in which each action creates an event, the event changes a state, and the state triggers an action. A model can be terminated during any state and can be restarted at the same state later.
According to the invention, whenever a transaction is terminated, which may occur for example when another model is called for processing, the control engine saves the prior model and the state of the transaction. When the other processing is completed, the control engine reenters the previous transactions at the "action" level (as opposed to the instruction level). The control engine is thus reentrant at the action level.
In the preferred embodiment, the information model is defined with the assistance of a BNF grammar using an editor. The BNF
grammar also facilitates dividing the application into a set of independent actions. The model is converted into information processing objects using a preprocessor or lexical analyzer that is based on the BNF grammar.

CA 022l7873 l997-lO-09 W 096/32675 PCTnUS96/05026 An application processing system such as MICS may be greatly enhanced by the inclusion of an expected behavior control system (EBCS) for automatically detecting and correcting the behavior of the actions implemented by the application programs where the expected behavior of the application programs is essentially independent of the application processing system. This allows the expected behavior to be modified without effecting the operation of the application processing system. An EBCS may operate in one of two manners. In a first application the EBCS
10 conforms the behavior of the system to an expected behavior of the system defined by the EBCS. In a second application, a particular behavior may be enforced by the EBCS to alter the processing flow of the application processing system in a desired manner.
Referring now to FIGURE 3, there is illustrated a preferred embodiment of the present invention. The application processing system 30 consists of an action processor 32 for executing application programs by executing one or more actions required by an application program. The execution of these actions generates a particular behavior. With respect to MICS, the action processor will comprise the control system engine and the application programs will consist of information models. An EBCS 34 interfaces with the action processor 32 and an external input/output 36. In most cases, the EBCS 34 executes after each execution of an application "action"
which occurs during active instants (State 5) and process instants (State 6) of an application processing system 32 such as the MICS.
However in some cases, execution of the EBCS may occur before execution of an action or expression to check for certain conditions affecting enforcement of a particular process flow. With respect to CA 022l7873 l997-lO-09 W 096/32675 PCTnUS96/05026 the ECBS the terms "rules", "expressions" and "actions" are synonymous unless otherwise specified.
The EBCS 34 comprises an expected behavior function (EBF) 38 for conforming or enforcing processing system behavior to expected behavior rules in response to the resulting behavior of an action initiated by the application program and a correction action function 40 for executing one or more corrective actions to conform or enforce the expected behavior if an expected behavior rule is not met. The expected behavior function 38 and correction action 10 function 40 may be incorporated as separate rules or as a single rule without effecting the overall operation of the present invention. The expected behavior function 38 consists of a set of rules for determining whether or not an expected behavior for an executed application program action has occurred. This rule may either conform the behavior of the system to an expected behavior or enforce the processing flow of the actions in a desired manner. If the conditions set by the rules within the EBF 38 are not met, a correction ID number is returned which the correction action function 40 uses to enable an associated response for executing actions to achieve the expected behavior for the application processing system.
The expected behavior rules of the EBF verify specific behavior for actions initiated by the application programs and implement corrective actions for conforming or enforcing the expected behavior of the system when necessary. The expected behavior rules are divided into two groups, missing action rules and invalid action rules.
The missing action rules search for specific behavior which should result in response to a particular action. The invalid action rules detect and correct behavior occurring which should not be occurring.

CA 022l7873 l997-lO-09 W 096/32675 PCTrUS96/05026 A sample of these rules for conforming system behavior are as follows:
Missins1 action rules 1. If missing index key attribute value then execute action"correct specification to assign index key attribute value."
2. If instant contains cross reference and no cross reference is added to the database then execute action correct specification to create cross reference."
Invalid action rules 1. If user instant and no attribute value change by the user and database update occurs the execute action "correct invalid propagation expression."
2. If loop condition in assignment of attribute values then execute action "terminate assignment loop condition."
The above described rules are not meant to be limiting, and any number of rules for conforming and correcting the expected behavior of the system may be used.
The following example is an application program corresponding to an information model of the MICS system described previously.
This information model will be used to demonstrate the EBCS and its functionality.
#MODEL PAYMENT MANAGER
#OBJECT BANK ACCOUNT,ADD,UPDATE,REPORT
ACT ID,UNIQUE,FPROT
NAME
ACCOUNT NO
BALANCE
#OBJECT TRANSACTION,ADD,UPDATE,REPORT,JOURNAL

W O 96/32675 PCTnUS96/05026 propagation ([ACT ID] NEQ "") [PAYEE] = [NAME].
CODE
propagation ([CODE] IS "ICR") [REFRENCE] = 999999.
DATE
PAYEE
AMOUNT
propagation ([AMOUNT<O) [REFERENCE] = 999999.
REFERENCE
propagation (lREFERENCE] IS "999999") [AMOUNT]-=[AMOUNTl.
ACT ID
propagation [PAYEE] = [NAME].
STATUS
# TRANSACTION JOURNAL,JOURNAL OF TRANSACTION,HIDE
([AMOUNT] is not "O") [CTYPE] = [CODE].
CTYPE
PAYEE
DATE
AMOUNT
ACT ID
#BALANCE CHECKBOOK, VIEW OF
TRANSACTION,BROWSE,REPORT
select,ALL
([STATUS] is "O").
activation CA 022l7873 l997-lO-09 W O 96/32675 PCT~US96/05026 ([LAST BALANCE] IS ZERO) [LAST BALANCE] = [BALANCE];
[LAST BALANCE] -= [AMOUNT].
propagation [BALANCE]-= [AMOUNT].
CODE,ENTRY = 15 PAYEE
DATE
AMOUNT
LAST BALANCE, ENTRY = 1 o #INDEX TRANSACTION,ACT ID
The following description illustrates a number of cases wherein the trace for the operation of the EBCS to conform expected behavior can be seen:
Case 1: Assume a user has selected the ADD action of the BANK ACCOUNT object. In execution of State 6 by the CSE, the database operation fails because ACT ID index key attribute value is indexed but the value assignment for ACT ID never occurs because the field is protected from data entry by the FPROT attribute flag and there is no propagation expression or "action" to assign to the attribute value. Upon execution of the EBCS, conformance with the EBCS missing action rule 1 is not achieved, and the correction action function executes "correct specification to assign index key attribute value." Here EBCS correction actions of the correction action function can automatically remove the FPROT attribute flag from ACT ID attribute definition of BANK ACCOUNT to correct the problem without having the user modify the information model, or EBCS correction actions can interact with the user through the input/output interface by displaying the attribute definition and asking CA 022l7873 l997-lO-09 W O 96/32675 PCTnUS96/05026 the user to change the flag or add a propagation expression to correct the problem to enforce the expected behavior.
Case 2: In the TRANSACTION object the JOURNAL flag instructs the CSE to activate the JOURNAL object of TRANSACTION
after a database operation. Assume that the user has selected the ADD action of TRANSACTION. If the AMOUNT attribute value is not entered by the user, then the CSE fails to create the JOURNAL
database record because upon execution of the JOURNAL object, no attribute value is changed because the propagation expression only 10 changes attribute values if AMOUNT is not zero. EBCS conformance missing action rule number 2 is not achieved, and the correction action function executes "correct specification to create cross efere"ce." The correction action can enforce the behavior by automatically adding the MUST FILL flag to the attribute definition AMOUNT of TRANSACTION or EBCS correction actions can il,teracl with the user using input/output interface to ask the user to change the MUST FILL flag or modify the propagation expression of the JOURNAL object to change at least one attribute value.
Case 3: Assume that the user has selected the ADD action 20 and the user enters a CODE value equal to ICR. The REFERENCE
value then changes to 999999. This causes the AMOUNT value to become negative, which in turn c~uses the REFERENCE value to change to 999999. This creates a loop condition and conformance with the EBCS invalid rule 2 fails, and the EBCS executes "terminate 25 lOOp condition". The correction action function can conform the behavior by automatically terminating the loop condition or asking the user to do so via the input/output interface.
It is important to note that there is no fault in any processing portion of the information model itself. The fault is in the information W 096/32675 PCTAUS3~'C'~

model specification. In a traditional software program, the error would be in the program specifications and the process flow and not in the actions executed in response to the program.
In addition to conforming the application processing system to a specific behavior, the EBCS may also enforce processing flow of actions defined by the application programs to a selected behavior.
This enables the application processing system to operate in a new manner without altering the databases or application programs as they exist. One example of this enforcement of processing flow 10 would be a method for enabling two users to update a database record at the same time as long as the users were working on different attributes of the record. Currently existing sys~ems do not enable two users to update the same database records concurrently.
Presently when an application requests use of a database record for updating purposes, the application initiates a READ
UPDATE action that reads the entry within the database and locks the record into an UPDATE mode. During the READ UPDATE action, no other user may access the database record. This is due to the fact that the READ UPDATE action initiated by the application program generates a processing flow that only enables one user to access the desired database. A new type of processing flow may be enforced by the EBCS by using a set of enforcement rules similar to the conformance rules discussed previously. The enforcement rules are different from the conformance rules in that they may be executed both before and after the execution of an action. This is due to the fact that the expected behavior for the action may be different depending upon the existing conditions.
Assume the following rules are also included within the EBCS:

CA 022l7873 l997-lO-09 W 096/32675 PCTrUS96/05026 1. If operation is READ UPDATE, then get record with READ without UPDATE and activate the instant.
2. If action is READ UPDATE, then wait until record is available for READ UPDATE and update database record with attribute values of the instants which have been changed by the user interface or progation expression.
Thus when a READ UPDATE action is executed by the application processing system the EBCS rule 1 causes the record to be read without update. This enables more than one user on the o network or client/server computing system to simultaneously update the same record without locking the record during an update session.
Upon completion of each user's modifications to a record, each user's updates are returned to the database in accordance with rule 2. Rule number 1 is a pre-enforcement rule executed before execution of an action to direct the processing flow in a desired direction without altering the application programs. In this case, the rule initiates only a READ action. Rule number 2 is a post-enforcement rule for enforcing a particular behavior after execution of an action. In this case, the rule reads the database record for UPDATE READ and modifies the record with the changes made by the user.
Rules such as this enable multiple users to update a database record as long as different attributes of the database record are being updated. In a normal processing system, whatever changes are last made to the attribute values of a record are the changes that are finally used within the database record. Should a conflict occur between multiple users trying to update the same attribute during READ UPDATE actions, additional rules may be included in the EBCS
to enable resolution of the conflict. A rule may be included in the CA 022l7873 l997-lO-09 W 096132675 PCTrUS96/05026 EBCS enforcing that whichever user has entered the largest number of attribute value changes within a specific group gets priority for all attribute value changes for that group. Thus in the case where a first user updates one attribute in the record of a first patient and five attributes within the record of a second patient, and a second user only updates ten attributes within a record of the second patient, the corrective actions force the changes made by the first user to control and be entered into the first patient s record, and the attributes entered by the second user to control and be entered into the second 10 patient s record.
It should be noted from the foregoing discussion that none of the application programs are being altered in any way. All that is altered is the manner in which the process flow of the actions is carried out to enable new system behaviors to be achieved without reproy.~m~ing the application programs. It should also be noted that the particular rules discussed for enforcing process flow are merely illustrative and that any number of rules may be used to achieve any desired behavior.
It should be appreciated by those skilled in the art that the specific embodiments disclosed above may be readily utilized as a basis for modifying or designing other structures or techniques for carrying out the same purposes of the present invention. It should also be realized by those skilled in the art that such equivalent constructions do not depart from the spirit and scope of the invention as set forth in the appended claims.

Claims (15)

IN THE CLAIMS
What is claimed is:

1. A method for automatically correcting the behavior of an application processing system having at least one application program including at least one action, the method comprising the steps of:
monitoring the behavior enacted by execution of the actions of the application program;
comparing each monitored behavior of an action of the application program to an expected behavior rule; and executing a corrective action when a monitored behavior does not follow the expected behavior rule to enact behavior defined by the expected behavior rule.

2. The method of Claim 1, wherein the expected behavior rule defines a behavior that should result from execution of the action .

3. The method of Claim 1, wherein the expected behavior rule defines a behavior that should not result from execution of the action.

4. The method of Claim 1 further includes the steps of executing the actions of the application programs in accordance with a second expected behavior rule.

5. A method for automatically correcting the behavior of a model information control system having at least one information model including at least one action, the method comprising the steps of:
monitoring the behavior enacted by execution of an action by the information model;
comparing monitored behavior of the action to an expected behavior rule; and executing a corrective action when a monitored behavior does not follow the expected behavior rule to enact behavior defined by the expected behavior rule.

6. An expected behavior control system for use with an application processing system having at least one application program including at least one action defined therein, the system comprising:
an expected behavior function for detecting if an executed action provides an expected result; and a correction action function for executing at least one corrective action in response to unexpected results detected by the expected behavior function.

7. The system of Claim 6 wherein the expected behavior function includes a plurality of rules defining expected behavior.

8. The system of Claim 6 wherein the expected behavior function includes at least one rule for enforcing a particular process flow.

9. The system of Claim 7 wherein the corrective action function includes a plurality of corrective actions, each of the corrective actions corresponding to one of the plurality of rules defining an expected behavior.

10. The system of Claim 7 wherein the plurality of rules are divided into two groups, the groups comprising:
missing action rules for defining actions which should be found within the execution of the actions of the application program; and invalid action rules for defining invalid actions caused by the execution of the actions of the application program.

11. The system of Claim 6 wherein the application processing system comprises a model information control system.

12. The system of Claim 11 wherein the application programs comprise an information model including at least one attribute and one action.

13. A method for enforcing the behavior of a model information control system having at least one information model including at least one action to enable a plurality of user to update a database at the same time, the method comprising the steps of:
processing actions within the information model according to enforcement behavior rules to enforce local updates of attributes within a record of the database by plurality users; and updating the changes to the attributes of the record in the database by adding each of the local updates of each user to the database.

14. The method of Claim 13 wherein the steps of processing further includes the steps of:
in response to an action requesting an update of the database, reading the database to local storage for local updates by the user;
and waiting to update the database with the local updates until no user conflict exists.

15. The method of Claim 13 further including the steps of:
determining if multiple users have attempted to update a same attribute of a same record in the database; and resolving the conflict according to the enforcement behavior rules.