The following use cases were recorded by the Data Security, Entitlements and Obligations Sub-com and have been used to define user, data and agreement attributes that will be needed.

Economic sanctions

Use Case

Add description in English. Who is doing this? Why? What are their security, authorization, entitlement and obligation expectations?

PermanentLocationNationality

Data Attributes

ResourceLocaleID

Rule Prefix

Esanctions

Pseudocode Rule

Data Attribute = "Restricted" AND/OR "Export AuthorizationRequirements"THEN Rule: Esanction[Origin Country, Target Country]PULL Data Attribute(ResourceLocaleID) OPEN Table: (EsantionCountry:list) PULL "COUNTRY"IF User Attribute:(Nationality) AND (Permanent Location) = list THEN "OK" ELSE "ACCESS DENIED"

TABLE: EcoSanctionOrigin Country, Target Country, Santion Description

State secrets

Use Case

PermanentLocation

Data Attributes

ResourceLocaleID

Rule Prefix

StSecrets

Pseudocode Rule

Data Attribute = "Restricted" AND/OR "Export AuthorizationRequirements" THEN Rule: StSecret[Country]PULL Data Attribute(ResourceLocaleID) OPEN Table: (StSecret_Country:list) IF User Attribute:(Permanent Location) = list THEN "OK" ELSE "ACCESS DENIED"

TABLE: StSecretTarget Country, Description of secret requirement

Export restrictions

Use Case

PermanentLocation

Data Attributes

ResourceLocaleIDExportAuthorizationRequirements

Rule Prefix

ExpRestrict

Pseudocode Rule

Data Attribute = "Export AuthorizationRequirements" THEN Rule: ExpRestrict[Country]PULL Data Attribute(ResourceLocaleID) OPEN Table: (ExpRestrict_Country:list) IF User Attribute:(Permanent Location) = "Country" THEN "OK" ELSE "ACCESS DENIED"

TABLE: ExpRestrictTarget Country, Description of export requirement

PSC (Production Sharing Contract)

Use Case

Add description in English. Who is doing this? Why? What are their security, authorization, entitlement and obligation expectations?

Data Attributes

ResourceSecurityClassificationTermsOrigin of data

Agreement Attributes

AgreementExternalIDStartDateEndDate

Rule Prefix

PSC

Pseudocode Rule

Data Attribute("Terms") = ("PSC") THEN Rule: Terms[Production Sharing Contract] OPEN Table: (Terms_Type:PSC, JOA, Other? / Job Role / Start Date / End Date) IF User Attribute:(Job Role) = Job Role, AND 'Current DATE'>'Terms(Start Date) AND <Terms(End Date) THEN Access "OK" ELSE "Access Denied"

TABLE: Terms_Production Sharing ContractTarget Country, Description of terms requirement, Start Date, End DateNOTE: This table is likely to be unique for each BigOil company

JOA (Joint Operating Agreement)

Use Case

Add description in English. Who is doing this? Why? What are their security, authorization, entitlement and obligation expectations?

Data Attributes

ResourceSecurityClassificationTermsOrigin of data

Agreement Attributes

AgreementExternalIDStartDateEndDate

Rule Prefix

JOA

Pseudocode Rule

Data Attribute("Terms") = ("JOA") THEN Rule: Terms[Joint Operating Agreement]IF User Attribute:(Job Role) = Job Role, AND 'Current DATE'>'Terms(Start Date) AND <Terms(End Date) THEN Access "OK" ELSE "Access Denied"

TABLE: Terms_Joint Operating AgreementTarget Country, Description of terms requirement, Start Date, End DateNOTE: This table is likely to be unique for each BigOil company

Data subscription

Use Case

Please see the following illustration taken from the proceedings of the External Data Subscriptions working group. More information can be found at https://collaboration.opengroup.org/og_sdu/EA/Enablingdatasubs/documents.php?action=show&dcat=&gdid=46848.

Data Attributes

ResourceSecurityClassificationOrigin of data

Agreement Attributes

AgreementExternalIDStartDateEndDate

Rule Prefix

DataSub

Pseudocode Rule

Data Attribute("Terms") = ("Subscription)THEN Rule: Terms[Data Subscription]IF User Attribute:(Job Role) = Job Role, AND 'Current DATE'>'Terms(Start Date) AND <Terms(End Date) THEN Access "OK" ELSE "Access Denied"

TABLE: Data SubscriptionTarget Country, Description of terms requirement, Start Date, End DateNOTE: This table is likely to be unique for each BigOil company

Data purchase

Use Case

Add description in English. Who is doing this? Why? What are their security, authorization, entitlement and obligation expectations?

Data Attributes

ResourceSecurityClassificationOrigin of data

Agreement Attributes

AgreementExternalIDCounterparties

Rule Prefix

DataPurch

Pseudocode Rule

Multi-client data

Use Case

Add description in English. Who is doing this? Why? What are their security, authorization, entitlement and obligation expectations?

Data Attributes

ResourceSecurityClassificationOrigin of data

Agreement Attributes

AgreementExternalIDEndDate

Rule Prefix

MCData

Pseudocode Rule

Data exchange

Use Case

Add description in English. Who is doing this? Why? What are their security, authorization, entitlement and obligation expectations?

Data Attributes

ResourceSecurityClassificationOrigin of data

Agreement Attributes

AgreementExternalID

Rule Prefix

DataEx

Pseudocode Rule

Data room

Use Case

Add description in English. Who is doing this? Why? What are their security, authorization, entitlement and obligation expectations?

Data Attributes

ResourceSecurityClassificationOrigin of data

Agreement Attributes

AgreementExternalIDRestriction expirationStartDateEndDate

Rule Prefix

Droom

Pseudocode Rule

Data Attribute("ResourceSecurityClassification") >= 1THEN Rule: DataRule[Security Classification]IF "Security Classification" > 0 THEN OPEN Table(DataSecurityClassification)

TABLE: Data Security ClassificationOne time setup, unique per Company0= Authenticated User1=Authenitcated User + Access Control (Group, Perm)2 = Authenticated User + Access Control (specific use)3 =Authenticated User + Access Control + 2FA + Encryption (unique, Company managed key)