Our solution
Existing industrial systems. Communication built for the future.
Industrial systems often remain in service for decades. Their communications must stay protected as attackers gain new technical capabilities.
QMS is developing a security gateway that brings post-quantum cryptography to existing industrial environments. It helps companies prepare their communications for future threats, step by step.
01 / The challenge
Why we secure industrial communications
Powerful quantum computers could one day break some of the cryptographic methods used today for key exchange and digital signatures.
This creates a challenge for long-life industrial systems: migration takes time, and changing or replacing existing systems can require significant effort.
That is why our approach focuses on the communications between systems.
02 / Our approach
A gateway for existing environments
Our security gateway is integrated into selected communication paths, where it provides cryptographic protection.
Existing equipment continues to perform its operational role. The gateway adds a security component that enables post-quantum cryptography to be introduced where it is needed.
Integrate with existing systems
We adapt the integration to the existing infrastructure. Our aim is to limit changes to the equipment and support a migration that fits its operating conditions.
Protect selected communication paths
Together, we identify which connections to protect. These might include communications between sites or remote access to an industrial environment.
Migrate step by step
Companies can start with a clearly defined communication path, validate the integration, and then extend protection to other connections.
03 / Integration
Where does the gateway sit in the network?
The gateway sits at the boundary of the communication area we want to protect—for example, between a plant network and a connection to another site.
A protected communication path also depends on the remote endpoint and the protocols in use. We determine the components required by looking at the specific network architecture.
As part of the integration, we look at:
- Which systems communicate with one another.
- Which data and connections need protection.
- Where cryptographic protection starts and ends.
- The requirements for availability, latency, and throughput.
04 / Responsibilities
What does QMS handle—and what stays with your systems?
| The gateway handles | Existing systems continue to handle |
|---|---|
| Cryptographic protection for the selected communication paths | Plant control and operational processes |
| Integrating post-quantum cryptography into these connections | Business applications and their functions |
| An additional security function at defined network boundaries | Existing safeguards such as access management, segmentation, and monitoring |
The gateway adds to your security architecture. We assess any changes needed to the network and remote endpoints for each project.
05 / Cryptography
Combining classical cryptography and PQC
We take a hybrid approach that combines classical cryptographic methods with post-quantum cryptography.
We use ML-KEM for key exchange and are evaluating ML-DSA for digital signatures. The specific combination and integration are tailored to the requirements of each communication path.
In technical discussions, we focus on protocol support, key management, system integration, and the impact on ongoing operations.
06 / Configuration
One solution. Different requirements.
Our security gateway is functional and can be configured for different use cases. Protecting a wind turbine, for example, brings different requirements from securing communications with a satellite.
Together, we review your infrastructure, the connections to protect, and your operational requirements. We use these to tailor the gateway configuration and integration.
In a focused pilot project, we evaluate the solution under your operating conditions and establish a basis for potential further deployment.
Let’s get started
Which connection do you need to protect for the long term?
Do you operate long-life industrial systems or want to explore how post-quantum cryptography could fit into your environment?
Let’s discuss your architecture and a practical first step.