A quantum key distribution (QKD) network is an infrastructure that allows the realization of the key distribution cryptographic primitive over long distances and at high rates with information-theoretic security.In this work, we consider QKD networks based on trusted repeaters from a topology viewpoint, and present a set of analytical models that can be used to optimize the spatial distribution of QKD devices and nodes in specific network configurations in order to guarantee a certain level of service to network users, at a minimum cost.We give details on new methods and original results regarding such cost minimization arguments applied to QKD networks.These results are likely to become of high importance when the deployment of QKD networks will be addressed by future quantum telecommunication operators.They will therefore have a strong impact on the design and requirements of the next generation of QKD devices.
A quantum key distribution (QKD) network is an infrastructure that allows the realization of the key distribution cryptographic primitive over long distances and at high rates with information-theoretic security.In this work, we consider QKD networks based on trusted repeaters from a topology viewpoint, and present a set of analytical models that can be used to optimize the spatial distribution of QKD devices and nodes in specific network configurations in order to guarantee a certain level of service to network users, at a minimum cost.We give details on new methods and original results regarding such cost minimization arguments applied to QKD networks.These results are likely to become of high importance when the deployment of QKD networks will be addressed by future quantum telecommunication operators.They will therefore have a strong impact on the design and requirements of the next generation of QKD devices.
A global Quantum Key Distribution (QKD) network, as the one developed in the European project SECOQC [1] is an infrastructure capable of realizing long-distance secret key establishment with information-theoretic security. Due to the specificity of their physical layer, the structure and the principle of operation of QKD networks will however significantly differ from the solutions adopted for “classical ” networks. The deployment of QKD networks is indeed far from being straightforward: it implies the con-ception of a network architecture connecting multiple users that may possibly be very far away from each other, all of this while QKD links are currently point-to-point only and intrinsically limited in distance. We will describe the logical architecture we have adopted for QKD networks with the SECOQC project. It is based on the original concept of maintaining a dedicated “network of secrets ” in order to distribute and manage the secret key material produced by QKD devices. We will alo present specific issues related to the development of a stack of network protocols adapted to the specific constraints of such infrastructures [2]. We have also considered QKD networks from a topology viewpoint and study analytically how cost minimization arguments impact on the optimal working points of individual QKD links [3]. We show in particular that, in the perspective of QKD networks, individual QKD links should be operated at an optimal working distance that can be significantly shorter than the maximum distance imposed by detector dark counts. We explain why such results motivate the research of new experimental compromise in practical QKD systems, and illustrate that point by considering the example of the recently developped DPSK QKD system [4].
Secure communication makes the widespread use of telecommunication networks and services possible. With the constant progress of computing and mathematics, new cryptographic methods are being diligently developed. Quantum Key Distribution (QKD) is a promising technology that provides an Information-Theoretically Secure (ITS) solution to the secret-key agreement problem between two remote parties. QKD networks based on trusted relay nodes are built to provide service to a larger number of parties at arbitrary distances. They function as an add-on technology to traditional networks, generating, managing, distributing, and supplying ITS cryptographic keys. Since key resources are limited, integrating QKD network services into critical infrastructures necessitates effective key management. As a result, this article provides a comprehensive review of key management approaches for trusted-relay QKD networks. They are analyzed to facilitate the identification of potential strategies and accelerate the future development of QKD networks.
Quantum key distribution (QKD) has become a promising option for transmitting sensitive data due to the increased maturity of QKD devices and the threat scalable quantum computers imposes on asymmetric public-key cryptosystems. By utilizing existing infrastructure, e.g., amplifier huts and dark fibers, the cost and complexity of deploying QKD networks (QKDNs) can be reduced. In this study, we develop a topology optimization algorithm that minimizes the cost of the QKDN deployment and maximizes the key capacity between any pair of nodes. We present three deployment upgrade strategies for facilitating the encryption of increasing throughput of QKD-secured optical transport networks and enabling a pay-as-you-grow approach. Comparing different strategies in a capacity-planning study allows operators to assess the scalability of deployments and upgrades. Depending on the availability requirements, our results compare the cost of protection measures. We confirm that adding trusted nodes is the most cost-efficient upgrading strategy based on our analysis.
The technological maturity of Quantum Key Distribution (QKD) products have generated high demand for secure key distribution in transmitting sensitive data. To provide this service, long-haul network operators are exploring strategies for network-wide deployment of QKD devices while utilizing existing infrastructure. One approach is to place trusted nodes at existing in-line amplifier huts in the network. In this study, we present a near-optimal fiber span aggregation algorithm, which effectively minimizes the number of trusted nodes between Points-of-Presences (PoPs) in the network. In this study, we evaluate six different topological QKD network deployments and eight different technological QKD network deployments in terms of the total secure key rate, as well as the number of QKD fiber pairs deployed. Our results indicate that the span aggregation algorithm increases the distance between each trusted node by up to 20%, thereby reducing the overall number of trusted nodes. Capacity planning for various topologies and technology deployments on simulated Secure Application Entity (SAE) requests is undertaken. Our proposed capacity planning shows that a baseline deployment with span aggregation using a QKD device with a cut-off distance of 140 km can save up to 3 times the number of QKD deployed fibers as compared to a minimum spanning tree-based low-cost deployment.
Quantum Key Distribution (QKD) has demonstrated unique and significant advantages in secure communication. In particular, Measurement-Device-Independent QKD (MDI-QKD), which is independent of measurement devices, increases data transmission distances and addresses the issue of low security in trusted relays. Therefore, in this work, we investigate QKD networks based on trusted and untrusted relays over optical backbone networks, providing a cost-optimal solution for the deployment and implementation of QKD networks. Specifically, this paper describes the QKD network and defines a new cost model, which not only fully considers the diverse impact factors of deployment costs but also meets the requirements for sharing network elements in response to different QKD chain requests. Based on cost model, this paper further proposes a cost-optimal heuristic algorithm for hybrid QKD network deployment, which can provide an economical and secure deployment solution for QKD networks. Extensive simulation experiments are conducted and the experimental results show that the proposed method outperforms current mainstream QKD network deployment algorithms in both deployment cost and security. Moreover, as the network scale increases, the advantages of our algorithm become more pronounced. Compared to mainstream algorithms, our method achieve an improvement of 17.7% -64.3% in cost savings and 1.19 to 3.24 times in security levels.
With the growing complexity of quantum key distribution (QKD) network structures, aforehand topology design is of great significance to support a large-number of nodes over a large-spatial area. However, the exclusivity of quantum channels, the limitation of key generation capabilities, the variety of QKD protocols and the necessity of untrusted-relay selection, make the optimal topology design a very complicated task. In this research, a hybrid QKD network is studied for the first time from the perspective of topology, by analyzing the topological differences of various QKD protocols. In addition, to make full use of hybrid networking, an analytical model for optimal topology calculation is proposed, to reach the goal of best secure communication service by optimizing the deployment of various QKD devices and the selection of untrusted-relays under a given cost limit. Plentiful simulation results show that hybrid networking and untrusted-relay selection can bring great performance advantages, and then the universality and effectiveness of the proposed analytical model are verified.