THL quantum assurance consulting logo THLquantum
THLquantum

QKD System and Network – Common Criteria Certification & Standardisation

Providing expert consultancy for the certification of QKD components, systems, and networks according to Common Criteria ISO/IEC 15408:2022 & strategic representation within international standards developing organisations (SDOs).

Core Services

1. Common Criteria Certification

Preparing your company for successful high-EAL Common Criteria evaluations and certifications of QKD products starts with becoming CC ready. Detailed plans are developed together to ensure timely and cost-effective execution of certification projects. Support includes establishing contact with evaluation labs and certification bodies and negotiating the project framework, timelines, and applicable requirements. Specific assistance covers CC Security Target (ST) development and guidance for development teams to produce certifiable documentation while meeting the required developer action elements for high-EAL evaluations.

2. Standardisation and SDO Representation

A standardisation strategy tailored to your company aims to maximise the positive impact while minimising the overhead of participation. Representation in SDOs such as CEN/CENELEC JTC22, ISO/IEC JTC3, and ETSI ISG-QKD helps bring your developments into standards in line with your strategic interests. Business intelligence on the latest developments in QKD standardisation supports your product roadmaps and their alignment with emerging international standards.

3. Funded Projects Context

Support for funded R&D projects focuses on the transition from research prototypes to evaluated products. This requires precise alignment between technical development and the strict certification requirements of the high EAL levels common in QKD product evaluation and certification. Assistance with project design and implementation, including work package or task leadership, helps ensure that outcomes and deliverables meet the expectations of funding bodies.

Expertise and Experience

  • QKD Certification Experience Since 2004

    My background combines computer science and IT security with more than 20 years of experience in QKD R&D projects. Work on QKD and QKD certification began in 2004, as a key researcher for the Austrian Institute of Technology (AIT) in the “Certification according to Common Criteria” work package of the pioneering SECOQC EU FP6 project.

  • Founding Chairman of ETSI ISG-QKD, 2008–2012

    In 2008, I identified missing standards as a major roadblock to QKD certification and initiated the ETSI ISG-QKD together with Prof. Solange Ghernaouti, UNIL, serving as its founding chairman until 2012.

  • Funded Research and Development

    Subsequent participation in funded projects for the EU, ESA, and the Austrian FFG focused mainly on QKD certification, as well as IT-secure cryptographic cloud services.

  • Standards Work Focused on Evaluation Challenges

    Further standardisation work includes the newly founded ISO/IEC JTC3 and, since its inception, CEN/CENELEC JTC22, where I currently lead work item JTC22014, “Gaps in IT security evaluation of QKD systems and networks”.

  • Connections Across Research and Evaluation

    Current work involves closing the remaining gaps that still prevent full certification of QKD components and systems, particularly the missing practical protocol security proof required by the ETSI 016 PP. My network includes contacts within the NOSTRADAMUS project, which is developing specifications for the upcoming European Quantum Evaluation lab at the EU’s JRC in Ispra, Italy. Professional contacts include European evaluation labs and certification bodies operating within the EUCC framework.

  • Publications, Patents, and Industry Experience

    My research output includes more than 30 relevant QKD publications and a patent family for QKD network modules developed between 2007 and 2012. Previous positions include AIT, Université de Lausanne, and the Vienna-based companies ID Quantique Europe and Nutshell GmbH.

A detailed CV and references are available on request.

Standards

My expertise covers the following selection of standards and regulations:

  • ISO/IEC 15408:2022Common Criteria for IT Security Evaluation
  • EUCCEuropean Union Common Criteria cybersecurity certification framework
  • EU Cybersecurity Act(Regulation (EU) 2019/881)
  • ETSI GS QKD 016CC Protection Profile V2.1.1
  • ISO/IEC 23837Test and Evaluation Methods for QKD
  • BSI AIS 20 & 31 V3.0; NIST SP800-90{A,B,C}applicability for QRNG
  • EU General Data Protection Regulation(Regulation (EU) 2016/679)

Contact

info@thlquantum.com Signal: thl.21