Curator's Take
This article shows that a full‑stack, standards‑compliant QKD network can now run over existing metropolitan fiber and be managed like any other carrier service, proving the technology is ready for real‑world rollout rather than just laboratory demos. By coupling quantum hardware with SDN‑based path control and automated key‑management, the Milan deployment demonstrates how dynamic routing and fail‑over can be achieved without manual intervention—a capability that aligns with recent ETSI QKD standards and other city‑scale trials. The work also highlights remaining practical limits, such as reliance on trusted nodes for long distances, but offers a clear blueprint for telecom operators to build quantum‑secure infrastructure today.
— Mark Eatherly
Summary
The advent of cryptographically relevant quantum computers poses an existential threat to classical public-key infrastructure. Quantum Key Distribution (QKD) addresses this challenge by providing information-theoretic security for key establishment, independently of any computational hardness assumption. In this work, the deployment and experimental validation of a metropolitan-scale quantum-secure network between data centers in Milan is reported. The network operates over installed fiber infrastructure and implements a layered architecture integrating QKD hardware, standards-compliant Key Management (KM), and centralized Software-Defined Networking (SDN) orchestration. Dynamic path reconfiguration via active optical switching and trusted-node routing allow automated fail-over solutions. Application-layer validation across diverse protocols and workloads confirms the seamless interoperability of all system components. These results establish the technical and operational readiness of metropolitan QKD networks for production deployment, and offer a replicable blueprint for building quantum-secure communication infrastructure at metropolitan scale.