A Scalable Cloud-Orchestrated and Service-Oriented Multi-Domain QKD Network with PQC Integration

• URL: http://arxiv.org/abs/2607.12765v1
• Date: Tue, 14 Jul 2026 13:37:28 GMT
• Title: A Scalable Cloud-Orchestrated and Service-Oriented Multi-Domain QKD Network with PQC Integration
• Abstract summary: This work presents a flexible multi-domain and multi-site quantum-secure network architecture integrating vendor-agnostic QKD, SDN orchestration, and cloud-managed trust services.<n> Communication is based on Zero Trust Network Access protocols featuring multi-level authentication mechanisms.<n>The proposed framework extends quantum-safe key transport beyond native QKD boundaries while preserving flexibility, interoperability, and compatibility with existing infrastructures.
• Score: 0.0
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: Quantum key distribution (QKD) offers unconditional security but existing QKD networks remain difficult to scale across heterogeneous infrastructures and administrative domains due to vendor-specific interfaces, trusted-node constraints, and limited interoperability. This work presents a flexible multi-domain and multi-site quantum-secure network architecture integrating vendor-agnostic QKD, SDN orchestration, and cloud-managed trust services. Communication is based on Zero Trust Network Access protocols featuring multi-level authentication mechanisms building upon post-quantum cryptography (PQC) signature and key encapsulation algorithms. The system is deployed on a real-world testbed with domains incorporating QKD nodes from 3 vendors, as well as domains without QKD infrastructure elements. Experimental results show that PQC and SDN overhead remain relatively low even on constrained devices, with the main bottleneck being QKD key retrieval and vendor-specific key streaming limitations. The proposed framework extends quantum-safe key transport beyond native QKD boundaries while preserving flexibility, interoperability, and compatibility with existing infrastructures.

Related papers

• Software Defined Networks Key Relay for Large-Scale Quantum Key Distribution Networks [35.61991435985963]
  This work addresses the orchestration of largescale Quantum Key Distribution Networks (QKDNs) using Software Defined Networking (SDN)<n>Building on ETSI and ITU specifications, common best practices and architectures are outlined.<n>Multiple path selection algorithms, based on Dijkstra or a maximum-minimum capacity algorithm, with built-in load balancing are presented.
  arXiv  Detail & Related papers  (2026-08-18T09:01:32Z)
• Deploying and validating a metropolitan QKD secure network: architecture and field performance [76.02413102965598]
  Quantum Key Distribution provides information-theoretic security for key establishment.<n>A metropolitan-scale quantum-secure network between data centers in Milan is reported.<n>Results establish the technical and operational readiness of metropolitan QKD networks for production deployment.
  arXiv  Detail & Related papers  (2026-07-13T15:51:26Z)
• Quantum-safe IPsec in the banking industry [0.0]
  This paper introduces a hybrid quantum-safe architecture, orchestrated via Software-Defined Networking (SDN) key distribution.<n>The proposed framework enables the early integration of Classical Cryptography (CC), Quantum Key Distribution (QKD), and Post-Quantum Cryptography (PQC) within a Dynamic Multipoint Virtual Private Network (DMVPN) environment.<n>The architecture has been validated across a five-node testbed comprising three physical nodes within a campus network in Madrid and two private-cloud nodes located in the north of Spain and Mexico.
  arXiv  Detail & Related papers  (2026-04-14T17:19:44Z)
• PQC-Enhanced QKD Networks: A Layered Approach [0.5249805590164902]
  We present a layered and modular network architecture that combines Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC)<n>To ensure interoperability and efficient practical deployment, hop-wise tunnels between physically secured nodes are protected by WireGuard.<n>Rosenpass performs a PQC key exchange to establish an end-to-end data channel without modifying deployed QKD devices or network protocols.
  arXiv  Detail & Related papers  (2026-04-07T08:48:05Z)
• Towards Global Quantum Key Distribution [47.07173095566302]
  Quantum Key Distribution (QKD) supports the negotiation and sharing of private keys with unconditional security between authorized parties.<n>As QKD expands its reach globally, it encounters challenges such as performance limitations, cost, and practical security concerns.<n>In this review, we provide an overview of QKD implementations, with a focus on protocols, devices, and quantum channels.
  arXiv  Detail & Related papers  (2025-11-14T06:04:48Z)
• High-Fidelity Coherent-One-Way QKD Simulation Framework for 6G Networks: Bridging Theory and Reality [105.73011353120471]
  Quantum key distribution (QKD) has been emerged as a promising solution for guaranteeing information-theoretic security.<n>Due to the considerable high-cost of QKD equipment, a lack of QKD communication system design tools is challenging.<n>This paper introduces a QKD communication system design tool.
  arXiv  Detail & Related papers  (2025-01-21T11:03:59Z)
• Practical hybrid PQC-QKD protocols with enhanced security and performance [44.8840598334124]
  We develop hybrid protocols by which QKD and PQC inter-operate within a joint quantum-classical network. In particular, we consider different hybrid designs that may offer enhanced speed and/or security over the individual performance of either approach.
  arXiv  Detail & Related papers  (2024-11-02T00:02:01Z)
• Quantum-Secured Data Centre Interconnect in a field environment [38.4938584033229]
  Quantum key distribution (QKD) is an established quantum technology at a high readiness level. In this article, we present the successful implementation of a QKD field trial within a commercial data centre environment. The achieved average secret key rate of 2.392 kbps and an average quantum bit error rate of less than 2% demonstrate the commercial feasibility of QKD in real-world scenarios.
  arXiv  Detail & Related papers  (2024-10-14T08:05:25Z)
• Relaxing Trust Assumptions on Quantum Key Distribution Networks [0.0]
  We explore the possibility to securely relay a secret in a QKD network by relaxing the trust assumptions (if not completely) on the relay.<n>We propose multiple constructions of the QKD key management system based on the different trust levels.<n>Main contribution of the paper is realized by evaluating key management systems with no access trust level.
  arXiv  Detail & Related papers  (2024-02-20T16:51:30Z)
• MadQCI: a heterogeneous and scalable SDN QKD network deployed in production facilities [0.0]
  Current quantum key distribution (QKD) networks focus almost exclusively on transporting secret keys with the highest possible rate. This architecture is neither scalable nor cost-effective and future, real-world deployments will differ considerably. The structure of the MadQCI QKD network presented here is based on disaggregated components and modern paradigms.
  arXiv  Detail & Related papers  (2023-11-21T18:57:21Z)
• Practical quantum secure direct communication with squeezed states [37.69303106863453]
  We report the first table-top experimental demonstration of a CV-QSDC system and assess its security.<n>This realization paves the way into future threat-less quantum metropolitan networks, compatible with coexisting advanced wavelength division multiplexing (WDM) systems.
  arXiv  Detail & Related papers  (2023-06-25T19:23:42Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.