Common Criteria as a Way to Secure Quantum Communication in Europe (A30a)
In their talk, the speakers will discuss how the implementation of Common Criteria will contribute to the growth of Europe’s industrial ecosystem for quantum communication technologies and systems. They will emphasize that quantum networking and quantum key distribution (QKD) are emerging technologies that aim to secure data communication in a world where computers are constantly increasing in power. They will highlight that this field is rapidly expanding and holds significant potential for becoming a thriving technology market in Europe.
Furthermore, they will mention that the Cyber Resilience Act of the EU Commission seeks to create a secure cyberspace for European users and promote the growth of the EU economy by endorsing solutions from EU providers. They will explain that QKD is a technique used for securely distributing cryptographic keys by leveraging quantum phenomena, and any attempts to intercept or eavesdrop on the transmission of these keys are detectable by the quantum network due to the fundamental laws of nature governing quantum communication.
The European Commission has specifically requested the development and industrialization of next-generation QKD devices and crucial elements to upgrade to future quantum information networks. To ensure the security of the developed QKD devices and support the EU Cyber Security Act, the European Commission has requested that these industrial QKD devices be ready for certification and deployment in operational European telecom and enterprise infrastructures based on Common Criteria targeting EAL4+.
The project they are working on includes specific components focused on establishing a controlled documentation environment and devising a security certification strategy and roadmap. They will mention that by collecting and monitoring all relevant documentation, such as requirements and architecture specifications, future certification procedures will be significantly streamlined. This work is being executed within a European-funded project called MDI-Queen, which involves multiple research partners.