AI 中文总结
针对量子计算机对经典公钥基础设施的威胁，报告米兰数据中心间城域量子安全网络的部署与验证。采用分层架构，集成多种技术，经动态路径重新配置和应用层验证，确立其用于生产部署的就绪性并提供可复制蓝图。
AI 中文摘要
具有密码学相关性的量子计算机的出现对经典公钥基础设施构成了生存威胁。量子密钥分发（QKD）通过为密钥建立提供信息理论安全性来应对这一挑战，独立于任何计算难度假设。在这项工作中，报告了米兰数据中心之间城域规模量子安全网络的部署和实验验证。该网络通过已安装的光纤基础设施运行，并实现了一种分层架构，集成了QKD硬件、符合标准的密钥管理（KM）和集中式软件定义网络（SDN）编排。通过有源光交换和可信节点路由进行动态路径重新配置，实现了自动化故障转移解决方案。跨多种协议和工作负载的应用层验证证实了所有系统组件的无缝互操作性。这些结果确立了城域QKD网络用于生产部署的技术和操作就绪性，并为构建城域规模的量子安全通信基础设施提供了可复制的蓝图。
英文摘要
The advent of cryptographically relevant quantum computers poses an existential threat to classical public-key infrastructure. Quantum Key Distribution (QKD) addresses this challenge by providing information-theoretic security for key establishment, independently of any computational hardness assumption. In this work, the deployment and experimental validation of a metropolitan-scale quantum-secure network between data centers in Milan is reported. The network operates over installed fiber infrastructure and implements a layered architecture integrating QKD hardware, standards-compliant Key Management (KM), and centralized Software-Defined Networking (SDN) orchestration. Dynamic path reconfiguration via active optical switching and trusted-node routing allow automated fail-over solutions. Application-layer validation across diverse protocols and workloads confirms the seamless interoperability of all system components. These results establish the technical and operational readiness of metropolitan QKD networks for production deployment, and offer a replicable blueprint for building quantum-secure communication infrastructure at metropolitan scale.
