Security Architecture

Blsqui leverages a Split-Server MPC Architecture to eliminate the single-point-of-failure inherent in custodial systems. By distributing a (2,2) Threshold Signature Scheme across isolated infrastructure clusters—the Frankfurt Identity Vault and the User-Selected Signer Node—we ensure that absolute control remains with the user, protected by their private PIN.

Our architecture allows users to select their preferred 'Signer Service' for their second fragment (s2). This sovereign choice provides flexibility for gaming partners and enterprise clients to host their own secure nodes, while the master identity fragment (s1) remains secured in our GDPR-compliant Frankfurt cluster.

By decoupling the fragment from a specific hardware enclave, Blsqui offers seamless recovery. Users can access their vault from any device or browser using only their confirmed email and security PIN. This eliminates the risk of "device-loss lockout" while maintaining the security of a distributed vault.

The master identity Fragment (s1) is managed via a dedicated Supabase instance within our Frankfurt cluster, leveraging Point-in-Time Recovery (PITR) and AES-256 transparent column encryption.
Our infrastructure choice is guided by institutional-grade compliance: Supabase is strictly audited under SOC2 Type 2 and ISO 27001 standards, ensuring that identity data is protected by the same physical and digital security protocols used by global financial institutions.
To guarantee physical resilience against regional disasters, our architecture utilizes Cross-Region Read Replicas and off-site encrypted backups, ensuring immediate data availability and failover capability even in the event of a total infrastructure outage in the Frankfurt zone. By utilizing PostgreSQL Row-Level Security (RLS), we ensure that even at the database level, identity fragments are cryptographically isolated and inaccessible to unauthorized internal processes or third-party actors.

To optimize gaming UX, Blsqui utilizes a Non-Persistent Session Cache; once a user authenticates with the PIN, a temporary signing authority is held in volatile memory (RAM Cache) for a strictly limited window (1 hour), enabling seamless multi-transaction gameplay without compromising the long-term security of the encrypted fragments.

While blockchain protocols are built on mathematical foundations, Blsqui incorporates layers of resilience to account for real-world operational variables. Our architecture is designed to maintain integrity even in cases where external factors, such as third-party account access, are compromised.
・Rate & Velocity Monitoring: The system incorporates standard processing intervals for signature requests. These “cool-down” periods are designed to maintain network stability and prevent automated bulk-processing, allowing time for administrative review if necessary.
・Cryptographic Sequence Binding: Each transaction is processed using non-repeating sequence logic. This standard protocol ensures that signatures are unique to a specific context, mitigating the risk of unauthorized replay attempts from historical data.