Metropolitan MetroProtect™ is a data security platform that applies two layers of quantum-safe encryption to protect operational data, ensuring confidentiality, integrity, and availability. Key capabilities include: - Attribute-based access control (ABAC): Enforces access policies using attributes such as data topic sensitivity, device type, access location, and user role. - Crypto agility: Allows network configuration to use classical PKI, post-quantum cryptography (PQC), or quantum key distribution (QKD). - Data-centric security: Applies fine-grained encryption at the data-topic level, restricting access on a need-to-know basis. - Distributed authentication and access control: Eliminates single points of failure for authentication and access control, maintaining security during network partitions. - Integrated key management: Provides a unified API for managing and distributing cryptographic keys. - Quantum-safe encryption: Protects communications against threats posed by quantum computing. - Secure device roaming: Allows devices to continuously publish or consume data as their network identities change, maintaining data availability. - Open standard protocol security: Offers plugins for securing open standard communication protocols including DDS, MQTT, ONVIF, and ASTERIX. - Zero trust security model: Enforces mutual authentication for all communicating users, devices, and software services.