AI 中文总结
针对遗留微服务直接迁移至后量子密码学的困难，提出基于临时边车架构的策略驱动迁移框架PG-PQMES，实现无需修改代码的透明迁移，显著降低迁移时间、停机与开销。
AI 中文摘要
量子计算的快速发展对云原生及基于微服务的企业系统中普遍使用的经典密码学构成了重大风险。传统密码原语与遗留微服务紧密耦合，直接迁移至后量子密码学（PQC）既复杂、危险又具破坏性。为克服这些问题，本研究提出了一种通过临时边车架构进行策略驱动的后量子迁移（PG-PQMES）框架，该框架支持动态且可逆的迁移，允许在不修改应用程序遗留代码的情况下透明地采用PQC。该架构由三个连贯层组成，包括注入运行时密码学的临时加密边车层、集中管理迁移的策略治理层，以及衡量性能并自动回滚的迁移安全与可观测性层。提出了一种创新的策略驱动的临时PQ迁移（PG-EPM）算法，以最大化性能、合规性和基于信任的迁移。在模拟微服务环境中，实验评估表明，与现有迁移策略相比，迁移时间、服务停机时间、延迟开销和回滚恢复时间均显著减少。研究结果表明，基于策略的边车迁移策略为安全的后量子转型提供了一种可行、可扩展且适用于企业规模的迁移路径。
英文摘要
The fast development of quantum computing represents a big risk to classical cryptography that is commonly used in cloud native and microservice based enterprise systems. Traditional cryptographic primitives are closely linked to legacy microservices and it is both intricate, hazardous, and disruptive to straight up migrate to post-quantum cryptography (PQC). In a bid to overcome these issues, this research presents a PolicyGoverned Post-Quantum Migration through Ephemeral Sidecar Architectures (PG-PQMES), a framework of dynamic and reversible migration that allows transparent adoption of PQC without any modifications in the legacy code of applications. The architecture is a combination of three coherent layers, including Ephemeral Crypto Sidecar Layer which injects the runtime cryptography, Policy Governance Layer which manages the migration centrally, and Migration Safety and Observability Layer which measures the performance and rolls back automatically. An innovative Policy-Governed Ephemeral PQ Migration (PG-EPM) algorithm is proposed to maximize the performance, compliance, and trust-based migration. In simulated environment of microservices, experimental assessment shows that the time of migration, service downtime, overheads of latency, and rollback recovery time are substantially reduced using the current migration strategies. The findings show that a sidecar-based migration strategy that is policy-based offers a viable, scalable, and enterprise-scale migration to a secure post-quantum transformation.
DOI：10.23919/ICCMSOCPS00092.2026.00051
