Logo
ScienceStack
Table of Contents
Fetching ...
Sign In

Extending Quantum-Safe Communications to Real-World Networks: An Adaptive Security Framework

Ane Sanz, Eire Salegi, Asier Atutxa, David Franco, Jasone Astorga, Eduardo Jacob

TL;DR

Addresses the challenge of quantum threats in real-world networks by proposing an adaptive framework that unifies QKD and PQC under centralized management. The approach introduces four security levels and a vKMS/QuSeC control plane to tailor quantum-safe protection to node capabilities, enabling end-to-end security across heterogeneous networks. The framework is implemented in a Kubernetes-based testbed and validated for correctness, interoperability, and latency within ETSI QKD specifications. The results indicate practical viability for gradual, standards-aligned deployment of quantum-safe infrastructure.

Abstract

The advent of quantum computing threats classical cryptographic mechanisms, demanding new strategies for securing communication networks. Since real-world networks cannot be fully Quantum Key Distribution (QKD)-enabled due to infrastructure constraints, practical security solutions must support hybrid operation. This paper presents an adaptive security framework that enables quantum-safe communications across real-world heterogeneous networks by combining QKD and Post-Quantum Cryptography (PQC). Building upon a hierarchical key management architecture with Virtual Key Management Systems (vKMS) and a centralized Quantum Security Controller (QuSeC), the framework dynamically assigns security levels based on node capabilities. By transitioning between pure QKD, hybrid, and PQC modes, it ensures end-to-end quantum-safe protection regardless of the underlying node capabilities. The framework has been implemented and validated on a Kubernetes-based containerized testbed, demonstrating robust operation and performance across all scenarios. Results highlight its potential to support the gradual integration of quantum-safe technologies into existing infrastructures, paving the way toward fully quantum-safe communication networks.

Extending Quantum-Safe Communications to Real-World Networks: An Adaptive Security Framework

TL;DR

Addresses the challenge of quantum threats in real-world networks by proposing an adaptive framework that unifies QKD and PQC under centralized management. The approach introduces four security levels and a vKMS/QuSeC control plane to tailor quantum-safe protection to node capabilities, enabling end-to-end security across heterogeneous networks. The framework is implemented in a Kubernetes-based testbed and validated for correctness, interoperability, and latency within ETSI QKD specifications. The results indicate practical viability for gradual, standards-aligned deployment of quantum-safe infrastructure.

Abstract

The advent of quantum computing threats classical cryptographic mechanisms, demanding new strategies for securing communication networks. Since real-world networks cannot be fully Quantum Key Distribution (QKD)-enabled due to infrastructure constraints, practical security solutions must support hybrid operation. This paper presents an adaptive security framework that enables quantum-safe communications across real-world heterogeneous networks by combining QKD and Post-Quantum Cryptography (PQC). Building upon a hierarchical key management architecture with Virtual Key Management Systems (vKMS) and a centralized Quantum Security Controller (QuSeC), the framework dynamically assigns security levels based on node capabilities. By transitioning between pure QKD, hybrid, and PQC modes, it ensures end-to-end quantum-safe protection regardless of the underlying node capabilities. The framework has been implemented and validated on a Kubernetes-based containerized testbed, demonstrating robust operation and performance across all scenarios. Results highlight its potential to support the gradual integration of quantum-safe technologies into existing infrastructures, paving the way toward fully quantum-safe communication networks.

Paper Structure

This paper contains 14 sections, 10 figures, 1 table.

Table of Contents

  1. INTRODUCTION
  2. RELATED WORK
  3. BACKGROUND: E2E QUANTUM KEY ESTABLISHMENT IN QKD NETWORKS
  4. PROPOSED FRAMEWORK
  5. System Architecture
  6. Operational description of the security framework
  7. Security Level Assignment.
  8. Security Level Configuration.
  9. Secure Key Derivation.
  10. VALIDATION
  11. Implementation and Testbed Setup
  12. Functional validation
  13. Performance Assessment
  14. CONCLUSIONS

Figures (10)

  • Figure 1: A representation of a heterogeneous network comprised of QKD-enabled and classical nodes.
  • Figure 2: System Architecture of the proposed framework.
  • Figure 3: Operational flow of the proposed framework for all levels.
  • Figure 4: High-level operation of each Security Level.
  • Figure 5: Operational flow of Secure Key Derivation in Level 3.
  • ...and 5 more figures