Abstract The security of future large-scale IoT networks is critically threatened by the ''Harvest Now, Decrypt Later'' (HNDL) attack paradigm. Securing the massive, long-lived data streams from these systems requires protocols that are both quantum-resistant and highly scalable. Existing solutions are insufficient: post-quantum classical protocols rely on computational assumptions that may not hold for decades, while purely quantum protocols are too resource-intensive for the sheer scale of IoT. This paper introduces the Quantum Anonymous Data Reporting (QADR) protocol, a hybrid framework that provides a theoretical benchmark and high-performance architecture for this challenge, designed for future fully-connected quantum networks. The protocol achieves scalable, quantum-resistant anonymity through a hybrid security model; it leverages information-theoretically secure keys from Quantum Key Distribution (QKD) to seed a quantum-secure pseudorandom function (QS-PRF), grounding its long-term data protection in well-established computational hardness assumptions. We also propose and analyze an automated slot reservation mechanism by making a deliberate trade-off: achieving high performance by accepting a quantifiable information leak during the anonymous slot reservation phase while maintaining strong unlinkability for the final data submission. Our security analysis formally quantifies the anonymity reduction caused by the leak and discusses pathways to fully mitigate it at a significant performance cost. We prove the protocol's critical advantage as a performance benchmark: its primary communication cost scales as O(n2), a dramatic improvement over quantum-native alternatives O(n4), establishing a high-performance goal for future quantum-secured anonymity systems.
Abstract The security of future large-scale IoT networks is critically threatened by the ''Harvest Now, Decrypt Later'' (HNDL) attack paradigm. Securing the massive, long-lived data streams from these systems requires protocols that are both quantum-resistant and highly scalable. Existing solutions are insufficient: post-quantum classical protocols rely on computational assumptions that may not hold for decades, while purely quantum protocols are too resource-intensive for the sheer scale of IoT. This paper introduces the Quantum Anonymous Data Reporting (QADR) protocol, a hybrid framework that provides a theoretical benchmark and high-performance architecture for this challenge, designed for future fully-connected quantum networks. The protocol achieves scalable, quantum-resistant anonymity through a hybrid security model; it leverages information-theoretically secure keys from Quantum Key Distribution (QKD) to seed a quantum-secure pseudorandom function (QS-PRF), grounding its long-term data protection in well-established computational hardness assumptions. We also propose and analyze an automated slot reservation mechanism by making a deliberate trade-off: achieving high performance by accepting a quantifiable information leak during the anonymous slot reservation phase while maintaining strong unlinkability for the final data submission. Our security analysis formally quantifies the anonymity reduction caused by the leak and discusses pathways to fully mitigate it at a significant performance cost. We prove the protocol's critical advantage as a performance benchmark: its primary communication cost scales as O(n2), a dramatic improvement over quantum-native alternatives O(n4), establishing a high-performance goal for future quantum-secured anonymity systems.
The security of future large-scale IoT networks is critically threatened by the ``Harvest Now, Decrypt Later'' (HNDL) attack paradigm. Securing the massive, long-lived data streams from these systems requires protocols that are both quantum-resistant and highly scalable. Existing solutions are insufficient: post-quantum classical protocols rely on computational assumptions that may not hold for decades, while purely quantum protocols are too resource-intensive for the sheer scale of IoT. This paper introduces the Quantum Anonymous Data Reporting (QADR) protocol, a hybrid framework that provides a theoretical benchmark and high-performance architecture for this challenge, designed for future fully-connected quantum networks. The protocol achieves scalable, quantum-resistant anonymity through a hybrid security model; it leverages information-theoretically secure keys from Quantum Key Distribution (QKD) to seed a quantum-secure pseudorandom function (QS-PRF), grounding its long-term data protection in well-established computational hardness assumptions. We also propose and analyze an automated slot reservation mechanism by making a deliberate trade-off: achieving high performance by accepting a quantifiable information leak during the anonymous slot reservation phase while maintaining strong unlinkability for the final data submission. Our security analysis formally quantifies the anonymity reduction caused by the leak and discusses pathways to fully mitigate it at a significant performance cost. We prove the protocol's critical advantage as a performance benchmark: its primary communication cost scales as O(n2), a dramatic improvement over quantum-native alternatives (O(n4)), establishing a high-performance goal for future quantum-secured anonymity systems.
With the rapid development of quantum computing, in response to its disruptive threats to traditional cryptosystems and the urgent demand for lightweight and highly scalable secure group communication among resource-constrained devices in large-scale Internet of Things (IoT) scenarios, this paper proposes a lightweight anonymous group authentication scheme that integrates Physical Unclonable Functions (PUFs), distributed Gossip algorithms, and quantum key distribution. By exploiting the uniqueness and unclonability derived from the inherent physical characteristics of PUF hardware, the scheme fundamentally eliminates attack vectors against quantum computers without requiring devices to pre-store any secret keys in their memory, while the QKCS pre-provisions CRPs and key seeds, which is the standard enrollment procedure in PUF-based systems. Combined with information-theoretically secure quantum keys as session keys, it forms a dual protection mechanism: anti-forgery at the physical layer and anti-quantum attack at the cryptographic layer. Innovatively, the Gossip algorithm is deeply integrated with group key agreement, converting global broadcast into local iterative interactions between nodes, which effectively alleviates broadcast storms and improves the scalability and fault tolerance of the protocol. Meanwhile, a pseudonym mechanism is introduced to achieve anonymous identity protection, and a dynamic key update strategy guarantees forward and backward security when members join or leave the group. Formal verification based on BAN logic and security analysis show that the proposed protocol can resist typical attacks such as replay attacks, man-in-the-middle attacks, and impersonation attacks. Performance evaluations demonstrate that our scheme outperforms existing comparable schemes in terms of computational cost, communication overhead, and dynamic group management efficiency, demonstrating its potential for resource-constrained IoT environments, pending further validation on real hardware platforms.
The rapid expansion of the Internet of Things (IoT) has introduced unprecedented cybersecurity challenges, as traditional cryptographic methods struggle to provide both efficiency and quantum resistance in resource-constrained environments. This research introduces Adaptive Quantum Cryptography (AQC), a novel security framework that integrates Quantum Key Distribution (QKD), Post-Quantum Cryptography (PQC), Quantum Random Number Generators (QRNGs), and AI-driven dynamic adaptation to safeguard IoT networks against evolving cyber threats. Unlike classical encryption techniques such as RSA and ECC, which are vulnerable to quantum attacks, AQC leverages quantum mechanical principles—such as superposition, entanglement, and the no-cloning theorem—to ensure provably secure key exchange and data encryption. The proposed AQC system dynamically adjusts cryptographic protocols based on real-time network conditions, computational resources, and threat intelligence, optimizing security without imposing excessive overhead. Experimental evaluations demonstrate that AQC achieves a 70% improvement in key exchange efficiency, a 50% reduction in computational load, and a 95% resilience rate against quantum attacks compared to conventional encryption methods. Additionally, the integration of QRNGs enhances cryptographic key entropy, while AI-driven anomaly detection enables proactive threat mitigation. This framework is particularly suited for next-generation IoT applications, including smart grids, autonomous vehicles, and industrial automation, where security, scalability, and energy efficiency are critical. By combining quantum-resistant algorithms with adaptive security mechanisms, AQC provides forward secrecy, resistance to quantum adversaries, and robust authentication, ensuring long-term protection for IoT ecosystems in the post-quantum era. The findings underscore AQC’s potential as a foundational security architecture for future quantum-safe IoT networks.
The exponential growth of the Internet of Things (IoT) and its integration into critical infrastructures has elevated the need for robust and future-proof security mechanisms. Traditional cryptographic systems, while effective today, are increasingly vulnerable to advancements in quantum computing. This paper explores the integration of Quantum Key Distribution (QKD) as a novel security paradigm for next-generation IoT ecosystems. QKD leverages the principles of quantum mechanics to enable unconditionally secure key exchange, immune to computational attacks. We propose an architecture where QKD-enabled edge gateways and IoT nodes facilitate real-time secure communication through quantum-secured channels. The study analyzes the feasibility of implementing QKD in resource-constrained IoT environments and evaluates its performance in terms of key generation rate, latency, and energy consumption. Simulation results demonstrate that the proposed QKD-IoT framework significantly outperforms conventional encryption protocols in resisting both classical and quantum-based attacks, making it a viable foundation for building post-quantum resilient IoT infrastructures. The research also outlines the challenges related to scalability, hardware integration, and key management, and proposes solutions through hybrid QKD-classical cryptography models. This work paves the way for a quantum-secure IoT future, ensuring trust, privacy, and integrity in hyper-connected digital ecosystems.
The rapid expansion of Internet of Things (IoT) ecosystems has introduced significant security challenges due to resource-constrained devices, heterogeneous network architectures, and largescale connectivity. Traditional authentication and key exchange mechanisms, primarily based on classical cryptographic algorithms such as RSA and ECC, are vulnerable to future quantum computing attacks. The emergence of quantum algorithms, particularly Shor’s algorithm, threatens the long-term confidentiality and integrity of IoT communications. This paper proposes a Quantum-Resistant Authentication and Key Exchange Protocol specifically designed for secure IoT architectures. The proposed framework integrates post-quantum cryptographic primitives, including lattice-based key exchange mechanisms and hash-based authentication schemes, optimized for low computational overhead suitable for constrained IoT devices. The protocol ensures mutual authentication, forward secrecy, and resistance against quantum adversaries while maintaining minimal communication latency. Security analysis demonstrates robustness against replay, man-in-the-middle, and key-compromise attacks. Performance evaluation shows that the proposed solution achieves a balance between quantum security strength and resource efficiency, making it suitable for next-generation IoT deployments in smart cities, healthcare systems, and industrial automation.
Abstract To ensure the long-term security of anonymous communication against quantum computing threats, this paper proposes a QKD-assisted quantum secure onion routing protocol. The scheme employs a hybrid architecture comprising a star-topology QKD network, a classical onion routing network, and a blockchain-based pseudonym mechanism. By splitting trust between the central cloud and blockchain, the system prevents any single entity from compromising the complete path or session keys, thus balancing anonymity with scalability. Specifically, a quantum secure key agreement sub-protocol is designed: communicating parties XOR locally generated nonces with quantum keys and employ a hash family to achieve trust splitting. This method prevents both the central cloud and the blockchain from recovering session keys. Furthermore, a complete onion packet encapsulation process is established for layered encryption. Comprehensive analyses of correctness, security, and performance under practical QKD key rate constraints are provided. The results indicate that, under semi-honest and non-colluding assumptions, the proposed protocol achieves quantum secure anonymous communication while maintaining practical scalability.