VIA CORE - a Secure and Resilient Distributed CKMS

DDG 51 destroyers rely on the GEDMS for critical ship functions, but its centralized certificate and key management server creates a single point of failure vulnerable to cyber/kinetic attacks. The Navy needs a secure, resilient GEDMS with a decentralized CKMS. VIA's commercially deployed dCKMS, already deployed on the USS Carl Vinson, meets this need. It's zero trust, integrates with DoD RBAC, uses post-quantum encryption, and is fully auditable, passing DON/NSA scrutiny. VIA's dCKMS is also deployed within the Air Force and commercial sectors. VIA will adapt its dCKMS to create CORE, a decentralized CKMS for GEDMS. CORE will manage certificates/keys, enabling secure communication even if the central CA is compromised. CORE will utilize a multi-node architecture with synchronized certificate stores at each system interface, ensuring redundancy. If a system is compromised, its certificate will be revoked across the network. If the central CA fails, CORE assumes authority. Data transfer will involve CORE retrieving certificates and encrypting/decrypting data using combined classical/post-quantum algorithms. Optionally, the certificate store can reside on VIAsecurechain, a DoD-accredited blockchain. CORE eliminates single points of failure, ensuring GEDMS resilience. VIA's solution addresses all Navy requirements for a resilient, decentralized, zero trust CKMS with military-grade security and seamless integration.