Extending Quantum-Safe Communications to Real-World Networks: An Adaptive Security Framework

2025-11-27

AI Summary

To address the threat quantum computing poses to classical cryptography and the practical deployment limitations of quantum key distribution (QKD) in real-world networks, this paper proposes an adaptive quantum-safe communication framework integrating QKD and post-quantum cryptography (PQC). The framework adopts a layered architecture incorporating a virtualized Key Management System (vKMS) and a centralized Quantum-Secure Controller (QuSeC), enabling end-to-end quantum-resistant communication with dynamic, node-capability–driven adaptation of security levels and key generation mechanisms—first of its kind. Implemented and experimentally validated on a Kubernetes-based container platform across heterogeneous networks, the framework demonstrates seamless evolutionary integration. Results show significant improvements in compatibility with legacy infrastructure and scalability of quantum-safe technologies, thereby facilitating pragmatic migration toward quantum resilience.

Technology Category

• Machine Learning: Quantum Machine Learning
• Application Domains: Security
• Search and Optimization: Distributed Search

Application Category

• Security and Privacy: Applications of cryptography
• Systems and Infrastructure for Web, Mobile and WoT: Virtualization and resource management in Web systems and infrastructures
• Responsible Web: Consent frameworks and practices on the web

Abstract

The advent of quantum computing threats classical cryptographic mechanisms, demanding new strategies for securing communication networks. Since real-world networks cannot be fully Quantum Key Distribution (QKD)-enabled due to infrastructure constraints, practical security solutions must support hybrid operation. This paper presents an adaptive security framework that enables quantum-safe communications across real-world heterogeneous networks by combining QKD and Post-Quantum Cryptography (PQC). Building upon a hierarchical key management architecture with Virtual Key Management Systems (vKMS) and a centralized Quantum Security Controller (QuSeC), the framework dynamically assigns security levels based on node capabilities. By transitioning between pure QKD, hybrid, and PQC modes, it ensures end-to-end quantum-safe protection regardless of the underlying node capabilities. The framework has been implemented and validated on a Kubernetes-based containerized testbed, demonstrating robust operation and performance across all scenarios. Results highlight its potential to support the gradual integration of quantum-safe technologies into existing infrastructures, paving the way toward fully quantum-safe communication networks.

Problem

• Develops adaptive framework for quantum-safe communications in heterogeneous networks
• Integrates QKD and PQC to ensure end-to-end security across varying node capabilities
• Enables gradual deployment of quantum-safe technologies in existing network infrastructures

Innovation

• Hybrid QKD and PQC framework for quantum-safe communications
• Dynamic security level assignment based on node capabilities
• Kubernetes-based containerized testbed for implementation validation