NTT Research Launches Scale Academy and SaltGrain Quantum-Safe Platform： A Criti

Why is NTT Shifting from “Research” to “Products” Now?

Simple answer: Because the time is right. Seven years of foundational research investment have allowed NTT Research to accumulate technical capital in specific areas sufficient for productization; simultaneously, external market anxiety over quantum-safe solutions is intensifying, creating an unprecedented window of demand. The establishment of Scale Academy is essentially aimed at solving the most headache-inducing “valley of death” problem for research institutions—how to bridge the vast gap between laboratory prototypes and market-viable products.

Since its founding in 2019, NTT Research has played the role of a “future technology explorer.” According to its public data, its investments in areas such as physics and informatics, cryptography and information security, and medical and health informatics over the past few years have yielded hundreds of academic papers and patents. However, academic influence does not equate to market influence. Senior Vice President Bennett Indart bluntly pointed out that transforming theories, papers, and patents into things people genuinely want to use in their daily lives is a “completely different challenge.” The mission of Scale Academy is to systematically address this challenge.

There is clear business logic behind this move. According to a MarketsandMarkets report, the global post-quantum cryptography market is projected to grow from a scale of several hundred million dollars in 2023 to tens of billions of dollars by 2030, with a compound annual growth rate exceeding 40%. Another forecast released by Gartner indicates that by 2027, over 40% of large enterprises will have active quantum-safe encryption transition plans. NTT clearly does not want to be absent from this race, and launching Scale Academy is the key engine for converting its technical reserves into market share.

The table below compares the differences between traditional research lab commercialization and the Scale Academy model:

This model shift reflects NTT’s dual assessment of current technological maturity and market opportunity. It is no longer aimless exploration but disciplined resource allocation toward the most promising monetizable technical directions.

Is SaltGrain’s Attribute-Based Encryption a Marketing Gimmick or a Game-Changer?

Direct answer: It is a potentially disruptive technological path, but its success depends on its ability to balance robust security with practical application complexity. Attribute-based encryption, upon which SaltGrain is based, is not a new concept, but its move from academic halls to a commercial platform suggests we may have found a more elegant path to address modern data security challenges.

Traditional encryption is like locking a safe: whoever has the key (private key) can open it and see all contents. Attribute-based encryption, however, is like a smart safe that can dynamically decide whether to open and only reveal permitted portions based on “who, at what time, from where, and for what purpose.” This ability to encode access policies directly into the ciphertext itself allows data to remain controlled even after leaving a controlled environment—whether on a partner’s server, public cloud, or an employee’s laptop.

The core advantage of this technology lies in its “data-centric” security paradigm. In today’s era of cloud and hybrid work normalization, corporate network perimeters have long been blurred. According to IBM’s “2025 Cost of a Data Breach Report,” the average data breach cost has climbed to $4.5 million, with breaches involving cloud environments costing even more. Many current zero-trust solutions primarily focus on “identity” verification and “network” access control, but protection of the data itself often remains at a relatively coarse file-level permission stage. SaltGrain aims to solve this last-mile problem.

mindmap
  root(SaltGrain Attribute-Based Encryption's<br>Core Value Proposition)
    (1. Data-Centric Security)
      (Policy Bound to Data)
      (No Need for Continuous Online Verification)
    (2. Granular Access Control)
      (Based on Attributes Like Role, Time,<br>Location)
      (Supports Complex Logic)
    (3. Quantum-Safe Foundation)
      (Resists Future Quantum Computer Attacks)
      (Long-Term Data Confidentiality)
    (4. Simplifies Compliance & Auditing)
      (Access Logs Embedded in Ciphertext)
      (Reduces Data Governance Complexity)

However, great technological concepts are never short of challenges. ABE has historically been criticized for computational overhead and ciphertext expansion, which can become performance killers when handling massive data. Furthermore, seamless integration with existing enterprise identity providers, databases, and applications will be key to determining its adoption barrier. NTT needs to prove that SaltGrain is not only theoretically secure but also sufficiently efficient and user-friendly in practice.

What Does This Mean for the Competitive Landscape of the Enterprise Security Market?

NTT’s move is by no means an isolated event; it must be viewed within a broader competitive landscape. While cloud giants like Microsoft, Google, and AWS are vigorously promoting their identity-centric zero-trust architectures, NTT’s choice to切入 from the more foundational, specialized track of “data-at-rest encryption” is a risky move, but potentially a brilliant one.

The current mainstream zero-trust market is primarily dominated by cloud service providers and traditional cybersecurity giants, with competition焦点 on identity management, device security, and network micro-segmentation. SaltGrain introduces a new dimension: even if identities are compromised or networks are breached, the data itself remains unusable. This is致命ly attractive to vertical industries handling extremely high-value data—such as financial transactions, intellectual property, medical records, and government secrets. Clients in these fields prioritize security far above convenience and have relatively ample budgets.

The table below analyzes the market segments SaltGrain might target and their competitive态势:

However, the challenges NTT faces are equally巨大. It is not a traditional enterprise software vendor; its brand定位 in the minds of CIOs and CISOs is closer to “network operator” or “research institution” rather than “security solution expert.” Building sales channels, partner ecosystems, and market education all require time and massive investment. Scale Academy’s “milestone and funding gate” model is precisely designed to address these commercialization challenges in a more agile, risk-controlled manner.

Looking further ahead, this competition may evolve into a clash of different security philosophies: one represented by cloud giants advocating “control access channels,” and the other by technology-driven players like NTT advocating “protect the data itself.” Future enterprise security architectures will likely be a融合 of both.

From Lab to Market: Can Scale Academy Truly Replicate Success?

Viewing SaltGrain as the litmus test for Scale Academy is highly appropriate. Its success or failure will directly validate the feasibility of NTT’s commercialization model. The “milestones, funding gates, hard decisions” mentioned by Indart sound more like venture capital terminology than the language of a large corporate R&D department. This indicates NTT is attempting to引入 the discipline and flexibility of the startup world to revitalize its vast research assets.

The success of this model hinges on several aspects: First, the眼光 for technology selection. There are countless interesting ideas in the lab, but which have genuine market potential? This requires judgment combining technical depth and market嗅觉. Second, the ability for cross-departmental collaboration. Scale Academy needs to bridge researchers, product managers, engineers, and business development teams, breaking down internal silos. Finally, tolerance for failure and decisiveness. Establishing “hard decision points” means having the courage to terminate projects that fail to meet expectations, which is not easy within a large corporate culture that prioritizes stability.

We can understand the ideal operational cycle of Scale Academy through a simple flowchart:

flowchart TD
    A[NTT Internal Research Project Pool] --> B{Scale Academy Screening<br>Technical Maturity & Market Potential};
    B -- Selected --> C[Establish Incubation Project<br>Set Initial Milestones];
    C --> D[Productization Development<br>Market Validation & Partner Building];
    D --> E{Achieved Key Milestones?};
    E -- Yes --> F[Receive Next-Phase Funding<br>Launch to Market or Spin Off];
    E -- No --> G[Project Termination<br>Resource Reallocation];
    F --> H[Success Case Feedback<br>Optimize Screening Model];
    G --> H;

If Scale Academy can successfully bring SaltGrain to market and gain recognition from early标杆 customers, then it could become a repeatable blueprint for incubating NTT’s research成果 in other areas, such as bio-digital twins or optical quantum computing. Conversely, if SaltGrain fails, it would not only打击 NTT’s ambitions in the security market but could also raise internal doubts about this “semi-internal startup” model.

Implications for Taiwan’s Tech Industry: What Should We Focus On?

For Taiwan’s industry, which is at the core of the global tech supply chain, NTT’s动向 is by no means irrelevant. Our semiconductor manufacturing, electronics OEMs, and even emerging enterprise software companies should glean several key启示:

1. Quantum safety is no longer a “future issue”: Taiwan possesses the world’s most advanced chip manufacturing capabilities, and the computational cores of future quantum computers同样 require hardware foundations. Paying attention to advancements at the algorithmic level, like attribute-based encryption, helps our hardware design (e.g., security co-processors, PQC acceleration chips) interface with them, creating new value. The industry should begin assessing the “quantum-safe readiness” of its own products and services.

2. Commercialization model innovation is equally important: Taiwan has excellent engineering R&D capabilities, but transforming technology into competitive products and business models is often a bottleneck. The Scale Academy model, which combines internal incubation with venture capital discipline, is值得参考 for our research institutions (like ITRI, III) and even large tech companies. The key lies in establishing market-oriented mechanisms that allow for trial and error but maintain strict discipline.

3. Finding niches in the data security赛道: The global data security market is vast and细分. Taiwanese enterprises may find it difficult to compete comprehensively with giants on platform-level solutions, but they can深耕 in specific verticals (e.g., semiconductor manufacturing data protection, medical image secure exchange) or specific technical components (e.g., providing high-performance ABE libraries, secure key management solutions), becoming indispensable parts of the ecosystem.

In summary, NTT Research’s pivot is an industry experiment worth持续观察. It concerns how a giant reinvents itself, how an esoteric technology走向普及, and更关乎 what methods we will choose to safeguard the cornerstone of the digital world before the quantum era arrives. Whether SaltGrain, this “grain of salt,” can truly bring order to the chaotic world of data security, time will tell. But one thing is certain: this commercialization charge initiated from the lab has already sounded the horn.

FAQ

How is Scale Academy different from traditional corporate accelerators? Scale Academy focuses on transforming NTT’s internally mature foundational research technologies into products, rather than recruiting external startup teams. Its operation includes strict milestone and funding gate reviews, aiming to establish a repeatable commercialization model.

What is the core technical advantage of the SaltGrain platform? SaltGrain employs attribute-based encryption technology, embedding access policies directly into the encrypted data itself, achieving full lifecycle data protection,摆脱 reliance on network perimeter defenses, and providing more granular zero-trust data control.

Is quantum-safe encryption too early for general enterprises? Considering data lifecycles and future quantum computer threats, starting to布局 quantum-safe encryption is no longer too early, especially for institutions handling high-value or regulated data like finance, healthcare, and government, which should view it as a mid-to-long-term strategic investment.

What are the main challenges facing the commercialization of attribute-based encryption technology? Main challenges include performance bottlenecks due to technical complexity, integration difficulties with existing IT infrastructure, high market education costs, and the need to establish全新的 trust and compliance standards.

What impact does NTT’s move have on the competitive landscape of tech giants? By productizing深奥 cryptography research through Scale Academy, NTT may open a new front in the high-end enterprise security market, challenging existing cloud giants’ identity-management-centric zero-trust solutions and shifting competition toward the data-at-rest security layer.

Further Reading

1. NTT Research official website introduction to the Cryptography & Information Security Lab: https://www.ntt-research.com/labs/c