English 
Tiếng ViệtIngest source evidence
Receive key material from an approved QKD endpoint
FLAGSHIP PRODUCT PROFILE · QKD · HSM · KMS · VPN MIDDLEWARE
QuantumSafe QKD Bridge
Research / partner pilot
Present QKD-derived keys through governed enterprise interfaces, synchronize approved key material with HSM/KMS controls and support PPK-based protected tunnels.
CUSTOMER PROBLEM
QKD infrastructure exposes specialist protocols and operational constraints that existing applications, HSMs and VPNs are not designed to consume directly.
Present QKD-derived keys through governed enterprise interfaces, synchronize approved key material with HSM/KMS controls and support PPK-based protected tunnels.
OPERATING WORKFLOW
QuantumSafe QKD Bridge: from source input to governed outcome.
Every step names a product responsibility rather than a generic security box.
Validate key provenance
Validate peer, key identifier, entropy metadata and policy
Protect key material
Store or wrap the key inside the approved HSM/KMS boundary
Expose governed interface
Expose a PKCS#11, REST or RFC 8784 PPK reference
Control key usage
Consume the key once or according to approved lifecycle rules
Monitor health and failover
Monitor pool health, failover and cryptographic erasure
QKD–HSM INTEGRATION ARCHITECTURE
Convert partner QKD key material into governed application key references.
ETSI QKD connectivity, key-pool state, protected storage and application interfaces remain distinct, while high availability spans every layer.
Partner QKD boundary
QKD node AQKD node BETSI QKD 014
ETSI QKD 014 Connector
Authenticates the approved QKD endpoint and retrieves key identifiers, material references and source metadata.
PARTNER INTERFACEQuantum Key Pool
Tracks available, reserved, consumed, expired and failed key states under a versioned consumption policy.
KEY STATEHSM/KMS Synchronization Service
Wraps, stores or references key material inside an approved HSM/KMS boundary and records correlation evidence.
PROTECTED STORAGEPKCS#11 & REST Facade
Exposes governed key references through versioned PKCS#11 and REST profiles without leaking raw key material.
APPLICATION INTERFACERFC 8784 PPK Adapter
Maps approved key references into IPsec pre-shared post-quantum key workflows with peer and lifetime binding.
VPN INTERFACEGOVERNED OUTPUTS
IPsec / VPNEnterprise applicationApproved key consumer
- ETSI GS QKD 014
- PKCS#11
- REST/mTLS
- RFC 8784 PPK
- HSM/KMS connectors
- HA monitoring API
- QKD-to-HSM integration
- IPsec VPN PPK
- High-availability QKD key pools
- Industrial IoT message protection
PRODUCT READINESS PASSPORT
Decision-grade facts before product evaluation.
Reference QKD adapter model, key-pool simulator, HSM/KMS mapping and failover workflow.
- Public profile ID
- QS-QB-2026.07
- Website profile release
- 2026.07 / v8.0
- Current maturity
- Research / Partner Pilot
- Deployable scope
- Partner laboratory or dual-site controlled pilot with approved QKD equipment.
- Interactive demo
- Available — local key-pool lifecycle and failover simulation.
- Product manual
- Available — profile-specific manual.
- API publication
- Reference ETSI QKD 014-style and key-lease API contract published.
- Test corpus
- Mock key-pool, lease, consume, failover and exhaustion scenarios.
- Compatibility
- Vendor/device compatibility requires partner evidence; no universal QKD claim.
- Independent assessment
- No independent production assessment is published.
- Support model
- Partner-pilot engineering support with topology and device scope fixed in advance.
- Commercial route
- Partner-integrated pilot; Mobile-ID provides orchestration, policy and HSM/KMS integration scope.
PRODUCT BOUNDARIES
What the public profile does—and does not—claim.
These boundaries preserve accuracy while keeping the product value visible.
RELATED PLATFORM MODULES
Deep technical profiles behind this flagship product.
EVALUATE
QuantumSafe QKD Bridge
Use the local demo, review the manual and define a versioned pilot before any production claim.