帮助 · 22
Custody, in plain words
Who holds the keys that can change your company's records, the two custody options, and what A-REX can never do without you.
Custody answers one question: who holds the keys that can change your company's records? A key here is a digital key that signs changes. A passkey is such a key kept on your phone, computer or a security key, unlocked with your fingerprint, face or a PIN.
Your administration account
Your ledger is administered by your company's administration account: an account that needs several keys to approve a change. It decides which partners may receive lots, which labs may sign certificates, which partners may record processing, and which version of the ledger software runs. Day-to-day work (registering lots, deliveries, certificates) is approved by your team in the console; the administration account is used for these rarer, weightier changes, by the owner.
The two options
| Managed custody | Keys on your devices | |
|---|---|---|
| Keys | your owner passkey, your recovery passkey, an A-REX operations key | your owner passkey, your recovery passkey |
| Approvals needed | 2 of 3 | 1 of 2 |
| A-REX alone | never | never (it holds no key) |
| Your company alone | yes, with both passkeys | yes |
Your country decides which options exist. Where both are allowed, the owner chooses before the ledger is prepared. Managed custody is offered for traceability records only.
Accounts A-REX keeps for your partners
With managed custody, A-REX creates an account for each partner so they can receive lots without installing anything. A-REX holds the only key of these accounts, a cloud key (AWS KMS). It uses that key only to carry out what a person in your company approved; that rule is enforced by the platform, not by the key itself. These accounts never hold money.
You can hand them over to your administration account at any time. The owner gives the approval for the handover, A-REX's key signs once to remove itself, and from then on A-REX cannot move lots out of them. Lots stay where they are. With keys on your devices, A-REX creates no such accounts.
If A-REX ceases to operate
Your administration account and the records of your ledger stay readable and verifiable without A-REX. With your keys you can move the administration to an account of your own, after exporting your data (EPCIS 2.0). A-REX operations would prepare the handover of partner accounts for your approval.
Where to see it
Jurisdiction & custody shows, for your company, who holds each key, how many approvals are needed, the rules of your country and how many partner accounts A-REX's key still holds. To register your passkeys, see Your keys.