Focused on core cloud protection, seamlessly connecting the Space Quantum Cloud with customers' cloud systems to ensure post-quantum security for cloud data, keys, and identity authentication.
Integrates PQC quantum security audit modules to perform real-time auditing and log retention for all quantum security devices, cryptographic operations, key usage, and data transmission in the cloud. It enables unified encryption policy control, abnormal behavior alerting, and compliance self-checks, meeting the security audit requirements of classified protection and cryptographic evaluation, and can work with network-side, edge-side, and terminal-side audit devices to achieve full-link auditing.
Deployed on the core nodes of cloud object storage, block storage, and file storage, and integrated with a PQC encryption engine, it provides in-transit and at-rest encryption for data stored in the cloud. PQC algorithms ensure data confidentiality and integrity, making it suitable for cloud storage of sensitive data such as government, financial, and medical data.
Includes a PQC security agent, disk encryption module, and trusted boot module, enabling trusted boot, firmware anti-tamper protection, transparent disk encryption, and memory data encryption for cloud hosts, virtual machines, and containers, while also securing inter-host communication with quantum security. It is well suited to multi-tenant isolation in public clouds and core business protection in private clouds.
A dedicated encryption hardware device integrating a PQC algorithm engine and security chips to deliver high-performance, high-security hardware-level cryptographic services. It is used for electronic signatures and seals, digital certificate issuance, transaction signing, and data masking, offloading cryptographic operations to hardware so cloud server CPU resources are not consumed. It fits core business scenarios in financial clouds and government clouds.
Integrating QKD, QRNG, and PQC technologies, it provides quantum-secure generation, hardware-isolated storage, and full lifecycle management of all keys in the cloud (data encryption keys, identity authentication keys, and session keys). It supports ML-KEM key agreement and ML-DSA signing/verification, meets cryptographic evaluation and Classified Protection 2.0 Level 3 and above requirements, and enables collaborative key management with network-side, edge-side, and terminal-side products.
