This document presents a new profile called ODRLData Usage Control (DUC) that extends from ODRL core vocabulary and expresion focused on data processing over big data systems

DUC is a Rights Expresson Language for the big data industry. With DUC profile, every single piece of content, a data asset, released by a news data provider or or data publisher can be annotated with machine-readable instructions that spell out the particular permissions and restrictions for this data asset.

Acknowledgments

This document is the result of a team effort by members of the Universidad Politécnica de Madrid 2020 with input and assistance from other contributors. Development and maintenance of DUC was done by these persons (ordered by surname): Munoz-Arcentales Andrés, Salvachua Joaquín, Lopez-Pernas Sonsoles, Huecas Gabriel, Alejandro Pozo, Alonso Álvaro

DUC specifications

This section extends the ODRL Recommendation [ODRL22] by terms required by the big data industry.

Introduction

This ODRL extension for policy definition regarding access and usage control. This means that data ownership along different phases of processing could be specified. The different use cases are been develop inside the FIWARE initiative (like Implement Data spaces, Machine Learning, Federated Learning, Secure Data sharing, Data Markets). Policy enforcement implemented via translation into a formal CSP like process algebra to specify the allowed behavior. Later is transformed into an extended automata that checks against Big Data platform logging information (like Apache Spark or Apache Flink).

Actions for Rules

For the class Action (http://www.w3.org/ns/odrl/2/Action), used with Rules, these instances are defined.

Party Functions

For the class Party (http://www.w3.org/ns/odrl/2/Party), used with Rules, these instances are defined.

Examples

Machine Learning (ML) example

Company A wants to share a dataset to Company B. Company A only allows Company B to use the data for generating a ML model. Company B can not transfer any data to internal or external parties.

{
                 "@context": "http://www.w3.org/ns/odrl.jsonld",
                 "@type": "Agreement",
                 "uid": "http://example.com/policy:1010",
                 "duc:provider": "http://oem.com/ids#me",
                    "permission": : [{
                        "duc:consumer": "http://supplier.com/"",
                    "target": "http://oem.com/ids/inventory/dataset-1",
                    "action": "duc:train"",
                    }],

                 "obligation": [{
                    "@type": "Duty",
                    "target": "http://oem.com/ids/inventory/dataset-1",
                    "action": "inform",
                    "consequence": [{
                    "target": "http://oem.com/ids/inventory/dataset-1",
                        "action":[{
                            "rdf:value": { "@id": "duc:KillJob" },
                            "refinement": [{
                                "leftOperand": "recipient",
                                "operator": "eq",
                                "rightOperand": {
                                    "@value": "flinkid00",
                                    "@type": "http://orion.fiware.org/Job"
                                    }
                                }]
                            }]
                        }]
                    }],
                    "prohibition": [{
                    "assignee": "http://supplier.com/",
                    "target" : "http://oem.com/ids/inventory/dataset-1",
                    "action": "print"
                    }]
                }