Toshiba QSN Key Management System (Q-KMS)
Standalone, interoperable and guaranteed key delivery at scale
Quantum-safe networks need to adapt as cryptographic technologies, standards and threats evolve. Toshiba QSN Key Management System (Q-KMS) provides a comprehensive software platform for managing, monitoring and assuring key delivery across quantum-safe network environments.
Build confidence into key management
Deployed as standalone software on industry-standard servers, Q-KMS combines key management system (KMS), Quantum Key Distribution Management (QKDN) controller and QKDN management functionality within a single platform. Supporting both Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC), Q-KMS enables organisations to build flexible quantum-safe networks tailored to their operational requirements.
Built for large-scale deployments, Q-KMS continuously monitors network status, key reserves and application demand, automatically selecting the optimum route for key delivery. Routes are recalculated as demand or topology changes, or if a fibre link or QKD node fails, maintaining stable end-to-end key supply without operator intervention. Centralised dashboards give operators real-time visibility across multiple sites.
Standards-based interfaces connect quantum-safe keys with the applications and systems that need them. Support for ETSI GS QKD 014, ETSI GS QKD 020 and SKIP enables integration with encryptors, applications, third party QKD systems and external key management environments.
Highlights
Features & Benefits
Adaptable to your cryptography needs
Combine QKD, PQC and Diffie-Hellman key exchange within a single key-management platform. PQC links connect sites where QKD fibre is impractical, extending network reach while giving organisations greater flexibility to respond as technologies, standards and security requirements evolve.
Keep keys moving when networks change
Optimised key-delivery routes are selected automatically according to demand and recalculated as applications are added, the topology changes, or a fibre link or QKD node fails. This helps maintain stable end to end supply without operator intervention.
Guarantee keys for critical applications
Large-capacity storage builds key reserves ahead of demand. Reserve volumes can be configured per encryptor or application, and per QKD link, with reserved allocation guaranteeing supply to critical applications.
Integrate with multi-vendor systems
Standards-based interfaces enable quantum-safe keys to be delivered into established security environments. ETSI GS QKD 014 or SKIP supports delivery to encryptors and applications, while ETSI GS QKD 020 supports interoperability with other key management systems.
Manage and monitor from one place
Operator dashboards provide real-time visibility across multiple sites, with integrated performance monitoring and alarm management. Preconfigured role-based access control (RBAC) and metrics reduce setup effort, while full key lifecycle management and log collection support day to day operations.