Mojave Pipeline Company

Second Revised Volume No. 1

Effective Date: 09/01/1997, Docket: GT97- 60-000, Status: Effective

Original Sheet No. 508 Original Sheet No. 508 : Effective

TRADING PARTNER AGREEMENT

for the Electronic Data Interchange

of Information Over the Public Internet

(Continued)

Section 1. Prerequisites. (Continued)

1.4. Security Procedures. Each party, in its sole discretion and

expense, shall use and provide for the requisite levels of security which

are reasonably sufficient to ensure that all transmissions of Documents are

authorized by the parties and to protect their business records and data

from improper access. At a minimum, the parties shall provide and use those

security measures specified herein, in the GISB standards as adopted by the

FERC, or as may be agreed upon by the parties as set forth in the Appendix.

1.5. Keys. When the parties are utilizing the Internet electronic

delivery mechanism as herein contemplated, each party shall maintain a

Pretty Good Privacy ("PGP") "public key," (an encryption algorithm used to

facilitate private electronic communication) which may be changed from time

to time in accordance with this Agreement or as may be set forth in the

Appendix. Each party shall provide to the other party its PGP public key by

either (a) a certified or receipted mail service using a diskette with the

public key contained in an ASCII text file, or (b) an electronic simple mail

transfer protocol (smtp) mail message with the public key contained in the

body. Under either option above, the public key shall be verified by the

party to whom it is sent by validating the fingerprint of the public key

which may be accomplished via telephone, fax, or other comparably reliable

means. If a party desires to change its public key, it shall provide at

least five business days prior notice thereof to the other party; provided

that under an emergency situation, a prior written notice of at least 24

hours shall be given.

1.6. Electronic Signatures. Each party shall adopt as its signature

the PGP private key, where required by the Standards or otherwise agreed to

by the parties, in the Document transmitted by such party ("Signature

Code(s)"). Such Signature Codes(s) shall be specified in the Appendix.

Each party agrees that the Signature Code(s) of such party affixed to or

contained in any transmitted Document shall be sufficient to verify that

such party originated the Document. Neither party shall disclose to any

unauthorized person the Signature Code(s) of the other party.