Structured policy modeling and context-aware generation for multi-jurisdictional compliance in global software systems

doi:10.1016/j.infsof.2026.108041

CSpace

	Structured policy modeling and context-aware generation for multi-jurisdictional compliance in global software systems
	Zhuang, Zhixian 1,2; Lee, Xiaodong 1,3,4; Zhang, Aiyao 1,2; Wei, Jiuqi 1,2; Fu, Yufan 1,2; Peng, Botao 1
	2026-05-01
发表期刊	INFORMATION AND SOFTWARE TECHNOLOGY
ISSN	0950-5849
卷号	193 页码:23
摘要	Context: Legal compliance is increasingly vital in software systems that process personal data across jurisdictions, yet ensuring adherence to diverse regulatory requirements remains challenging throughout the development lifecycle. Objective: We aim to develop a modular framework that enables automated, context-aware compliance policy generation and seamless integration into software engineering workflows. Methods: We propose CBCMS+, a cross-border compliance management system that introduces a structured Policy Definition Language (PDL) for representing both legal constraints and user-defined preferences. CBCMS+ employs a two-step solution: EpMap, which transforms multilingual legal texts into structured PDL representations, and ComGen, which generates contextualized policies based on runtime scenarios. The framework also supports policy conflict resolution, DevOps integration, and flexible deployment. Results: We implement CBCMS+ and evaluate it on multilingual legal corpora from multiple jurisdictions. EpMap achieves an F1 score of 89.11% in legal-to-PDL mapping, while ComGen reaches 94.21% in generating valid policies. Under high-concurrency workloads, ComGen sustains over 1200 requests per second with an average latency of 12.8 ms. Conclusion: CBCMS+ provides a scalable and practical foundation for compliance-by-design in global software systems, combining structured modeling, multilingual adaptability, and efficient policy automation.
关键词	Software engineering Regulatory compliance Legal automation Policy modeling Data protection
DOI	10.1016/j.infsof.2026.108041
收录类别	SCI
语种	英语
WOS研究方向	Computer Science
WOS类目	Computer Science, Information Systems ; Computer Science, Software Engineering
WOS记录号	WOS:001677459000001
出版者	ELSEVIER
引用统计
文献类型	期刊论文
条目标识符	http://119.78.100.204/handle/2XEOYT63/42850
专题	中国科学院计算技术研究所
通讯作者	Lee, Xiaodong
作者单位	1.Chinese Acad Sci, Inst Comp Technol, Beijing 100190, Peoples R China 2.Univ Chinese Acad Sci, Beijing 100190, Peoples R China 3.Fuxi Inst, Beijing 100192, Peoples R China 4.Tsinghua Univ, Ctr Internet Governance, Beijing 100084, Peoples R China
推荐引用方式 GB/T 7714	Zhuang, Zhixian,Lee, Xiaodong,Zhang, Aiyao,et al. Structured policy modeling and context-aware generation for multi-jurisdictional compliance in global software systems[J]. INFORMATION AND SOFTWARE TECHNOLOGY,2026,193:23.
APA	Zhuang, Zhixian,Lee, Xiaodong,Zhang, Aiyao,Wei, Jiuqi,Fu, Yufan,&Peng, Botao.(2026).Structured policy modeling and context-aware generation for multi-jurisdictional compliance in global software systems.INFORMATION AND SOFTWARE TECHNOLOGY,193,23.
MLA	Zhuang, Zhixian,et al."Structured policy modeling and context-aware generation for multi-jurisdictional compliance in global software systems".INFORMATION AND SOFTWARE TECHNOLOGY 193(2026):23.