A Cross-Layer Post-Quantum Architecture for Resource-Efficient End-to-End Encrypted Distributed Communications

Abstract

The rapid development of intelligent terminals has accelerated their deployment in renewable-energy monitoring systems. These large-scale distributed terminals feature periodic reporting, intermittent connectivity, and sensitive transmission. However, existing protection schemes are mainly channel-centric and gateway-dependent, which may expose critical data and incur excessive handshake overhead. To address these issues, a cross-layer post-quantum framework is proposed for end-toend encrypted distributed photovoltaic systems. The framework coordinates secure session establishment, encrypted data delivery, and session control. Specifically, the control plane adopts hybrid TLS 1.3 with ML-KEM-based key establishment and ML-DSAenabled mutual authentication to ensure post-quantum security. The data plane protects payloads using AEAD, where device identifiers, and sequence/window states are bound as metadata. The cross-layer coordination plane jointly manages session resumption, adaptive key rotation, and gateway-assisted buffering according to reporting periodicity, reconnection dynamics, and link conditions. Experimental results have demonstrated that the ML-KEM-768-based hybrid scheme maintains handshake overhead within a practical deployment range, while the proposed resource-aware session strategy reduces daily handshake cost and latency compared with repeated full handshakes.