Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This work introduces a scalable architecture for multi-domain quantum key distribution (QKD) networks that integrates vendor-agnostic QKD with software-defined networking (SDN) orchestration and cloud-managed trust services. By employing Zero Trust Network Access protocols and post-quantum cryptography (PQC) mechanisms, the system achieves interoperability across heterogeneous infrastructures, overcoming traditional vendor-specific constraints. Experimental deployment on a real-world testbed demonstrates low overhead for PQC and SDN, highlighting the architecture's potential to extend quantum-safe key transport while maintaining compatibility with existing systems.
Achieving seamless interoperability in quantum key distribution networks could revolutionize secure communications across diverse infrastructures.
Quantum key distribution (QKD) offers unconditional security but existing QKD networks remain difficult to scale across heterogeneous infrastructures and administrative domains due to vendor-specific interfaces, trusted-node constraints, and limited interoperability. This work presents a flexible multi-domain and multi-site quantum-secure network architecture integrating vendor-agnostic QKD, SDN orchestration, and cloud-managed trust services. Communication is based on Zero Trust Network Access protocols featuring multi-level authentication mechanisms building upon post-quantum cryptography (PQC) signature and key encapsulation algorithms. The system is deployed on a real-world testbed with domains incorporating QKD nodes from 3 vendors, as well as domains without QKD infrastructure elements. Experimental results show that PQC and SDN overhead remain relatively low even on constrained devices, with the main bottleneck being QKD key retrieval and vendor-specific key streaming limitations. The proposed framework extends quantum-safe key transport beyond native QKD boundaries while preserving flexibility, interoperability, and compatibility with existing infrastructures.