Abstract: A framework for authenticating firewall and encryption devices (FEDs) as endpoints of a secure tunnel using quantum-based secrets keys are provided. The secure tunnel is between two network sites. A quantum key distribution (QKD) subsystem is collocated, in part, with a first network site in another part, with a second network site. The QKD subsystem generates and shares at least one quantum-based secret key with respective key hosts in the first network site and second network site. Each FED obtains the same quantum-based secret key from the respective key host and authenticate each other as endpoints of the secure tunnel to be established between the first network site and the second network site through the public network. The authentication may be repeated.

Abstract: Systems, methods, and computer-readable programs are provided for authentication of unencrypted message(s) transmitted between two devices of a power grid over a public communications network are provided. The authentication uses a quantum-based secret key and an initialization vector generated from a quantum random number to generate a payload for a transmission packet. The quantum-based secret key is shared between the transmitting device and the receiving device. When the receiving device receives the packet, the receiving device uses the shared quantum-based secret key and the initialization vector to verify whether the payload in the packet is authentic.