Remote Policy UI

1. Creation

To create a policy suitable for operating by users via multiple (different) instances of Guardian, at the publishing stage ‘Public’ availability type must be selected.

Once such policy is published it can be imported into other Guardian instances via its publishing Message ID.

2. Import

The import of ‘external’ policies is initiated from the Remote Policies tab in the Policies grid

The original policy Message ID must be specified in the Search dialogue box.

The operation must be approved by the Standard Registry

Imported policy will become accessible from the Remote Policies tab alongside the ordinary policies

3. Users

To enable users to participate in the remote policy workflow they must be registered on the ‘home’ Guardian of the policy (from which it has been published). Such registration involves importing user profile. Please note that private information, such as private keys, are not exported, imported or accessed in any way.

Profile files can be used to create corresponding Remote Users, which can participate in the policy execution workflow using external (other) Guardian instance as a ‘console’ without exposing users private keys to any Guardian other than user’s home instance.

4. Encryption

To protect private information all data exchanges between Guardians are encrypted with the addressee public key. Each policy can be configured with a unique key:

1. Generate the key on the ‘home’ Guardian user account\

2. Input the message ID of the Policy for which the key is being prepared

3. Copy the generated key

Note: The key is not retrievable after the initial creation. If lost a new one would need to be generated.

1. Import the key into the ‘remote’ Guardian via the user account page

5. Policy execution

Remote policies are used in the same way as those running locally with few differences:\

• Speed and waiting time

Synchronization of policy execution state between different Guardian instances is performed via Hedera, an update of the policy state on other Guardians can take several minutes.

• Publishing actions

When user take actions in their home Guardians there is a time delay associated with the remote Guardian instance processing the action request.

• Action request

Processing remote user actions may require user private keys for signatures. These keys never leave users’ home Guardians, instead the remote Guardian formulates corresponding requests which require user action confirmations in their ‘home’ Guardians.

For the avoidance of doubt, such confirmations to do not pass private keys to the remote Guardian instance. The confirmation is performed locally, remote Guardians receive only the result of the actions (e.g. signed documents etc).

6. Disconnecting from a Remote Policy

When disconnecting from a remote (external) policy, there are two available options.

2.1. Disconnect from the Remote Policy Only

This option disconnects your user from the remote policy on the current Guardian instance. Your account on the Main Guardian instance (where the policy is originally deployed) remains connected and unaffected.

2.2. Full Disconnection from the Policy

Full disconnection removes your user from:

• The remote policy on the current Guardian instance, and

• The same policy on the Main Guardian instance where it is deployed.

In this case, if you need to resume working with the policy, you will have to:

1. Reconnect (import/connect) the policy again on the remote Guardian instance.

2. Log in to the Main Guardian instance where the policy is deployed and reconnect there as well (see Section 1).

2.3. Removing a Remote Policy from Guardian

A System Administrator (SR) can disconnect a remote policy and completely remove it from the Guardian instance, thereby freeing server resources.

Note:

This removal:

• Does not affect the Main Guardian instance where the policy is deployed.

• Does not affect any data stored within the policy.

After removal, the policy can be restored by importing it again. All data will be restored except for local cache-related data (for example, grid sorting preferences).