BlackGlass Theory introduces Asymmetric Custody as a framework for evaluating information protection systems. This framework is designed for systems that can accept, seal, and govern sensitive data without retaining routine unilateral readback capability. The core of the theory defines a five-degree sealed custody model and a seven-dimensional evaluation matrix. This matrix covers critical aspects such as custody degree, coercion resistance, forward secrecy, quantum resistance, network isolation, key ceremony assurance, and data classification tier.
The applicability of this framework spans across commercial, institutional, and sovereign environments. It is meticulously mapped to major national classification schemes, including the Australian PSPF, US Executive Order 13526, UK GSCP, and EU classified information frameworks. Furthermore, it aligns with regulatory standards such as PCI-DSS v4.0.1 and APRA CPS 234.
Key advancements addressed in the paper include:
Forward secrecy in asynchronous sealed custody systems.
A hybrid post-quantum key encapsulation strategy.
A physiological coercion detection layer for biometric-bound authorization flows.
This research aims to address the common structural weakness in conventional encrypted storage systems where the system holding encrypted data also possesses the capability to decrypt it, thus creating a custody-level exposure that could lead to plaintext disclosure through system compromise, authorized insider access, or compelled operator action. BlackGlass Theory proposes Asymmetric Custody as a design principle to functionally separate the capability to accept and seal data from the capability to unseal it.
Built with