Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:1907.08963 · IEEE/ACM Transactions on Networking

Quantum Network: Security Assessment and Key Management

Hongyi Zhou, Kefan Lv, Longbo Huang, Xiongfeng Ma

Published Jan 10, 2022• 55 citations
arXivHTMLPDF

Abstract

As an extension of quantum key distribution, secure communication among multiple users is a basic task in a quantum network. When the quantum network structure becomes complicated with a large number of users, it is important to investigate network issues, including security, key management, latency, reliability, scalability, and cost. In this work, we utilize the classical network theory and graph theory to address two critical issues in a quantum network, security and key management. First, we design a communication scheme with the highest security level that trusts a minimum number of intermediate nodes. Second, when the quantum key is a limited resource, we design key management and data scheduling schemes to optimize the utility of data transmission. Our results can be directly applied to the current metropolitan and free-space quantum network implementations and can potentially be a standard approach for future quantum network designs.

DOI
10.1109/tnet.2021.3136943

Related papers

Security assessment and key management in a quantum network.

Hongyi Zhou, Kefan Lv, Longbo Huang +1 more

Quantum key distribution allows secure key distribution between remote communication parties. In a quantum network, multiple users are connected by quantum links for key distribution and classical links for encrypted data transmission. When the quantum network structure becomes complicated with a large number of users, it is important to investigate network issues, including security, key management, latency, reliability, scalability, and cost. In this work, we utilize the classical network theory and graph theory to establish a framework for a quantum network, addressing two critical issues, security and key management. First, we design a communication scheme with the highest security level that trusts a minimum number of intermediate nodes. Second, when the quantum key is a limited resource, we design key management and data scheduling schemes to optimize the utility of data transmission. Our results can be directly applied to the current metropolitan and free-space quantum network implementations and can potentially be a standard approach for future quantum network designs.

•Jul 21, 2019•5 citations

A Quantum-Classical Codesign Framework for Security Enhanced Quantum Networks

He Li

Secure quantum communication networks with multiple quantum key distribution (QKD) links have witnessed a booming development in the past decade. When the quantum network structure becomes complicated with a large number of users, it is important to investigate security issues, particularly in terms of quantum key distillation and key management, which are required to be performed at trusted nodes within the quantum network. In this work, we propose a novel cross-layer security enhancement framework based on key authentication and graph theory in quantum networks. We first build an efficient and adaptive framework for the integration of quantum key distillation and quantum key management. We then utilize final quantum keys to build a secure authentication between quantum key distribution links and key management parties. We finally evaluate our framework with cross-layer security enhancement techniques, to allow efficient key scheduling and distribution in quantum networks. Our framework can be directly integrated into current metropolitan and free-space quantum network infrastructure, and potentially be a standard classical-quantum codesign method for quantum network architecture explorations.

Information Communication Technologies Conference (ICTC)•May 10, 2024•4 citations

Recent Developments in Quantum Network Cybersecurity: Exploiting Authentication Protocols to Secure Multi-User Quantum Communication

Abhilash Narayanan, Shiva Shankar Mummidi, Ramanan Sathiaseelan +3 more

A novel approach to secure data transmission, quantum communication draws on fundamental principles of quantum physics. It ensures that the transmitted information is private and accurate. To provide security, quantum networks implement physical constraints such as the no-cloning rule and quantum entanglement. In contrast, computational complexity is employed by classical networks. However, with the proliferation of multiuser quantum networks, identity verification has become more challenging. People with malicious intentions might easily disrupt services in long-distance quantum networks by impersonating legitimate nodes and sharing entangled resources and quantum channels. This highlights the absolute necessity of secure authentication systems tailored to quantum environments. Enhancements to recent quantum authentication systems have been made utilizing techniques that are resistant to quantum computing. Researchers are looking into quantum digital signatures, entanglement-assisted protocols, and quantum key distribution (QKD) authentication to make multi-party communications more secure. In order to prevent attacks where a user establishes a fraudulent identity or account, these strategies can be applied to quantum networks. This study takes a look at current quantum authentication systems and gives them the once-over, focusing on how well they could handle multiple users. The article delves into the evolution of authentication systems to accommodate the distributed model, where nodes can function as senders, receivers, or relays. We aim to strike a compromise between practicality and security in our lightweight, low-latency protocols. Additionally, the paper discusses quantum-specific issues, such as side-channel attacks and device malfunctions, and how authentication techniques can help prevent them. Finally, this study demonstrates that authentication is the critical component of secure quantum communication for multiple users. The most secure quantum key distribution methods are still vulnerable to attacks from inside or outside the system if proper authentication is not in place.

IEEE International Conference on ICT in Business Industry & Government (ICTBIG)•Dec 12, 2025•0 citations

Quantum Key Distribution: An Optimization Approach for the Management Plane

Giannis Savva, Konstantinos Manousakis, Matthias Gunkel +1 more

As the number of attacks increases in optical networks, security at the management layer (ML) of these networks is of paramount importance to ensure that critical network management information is securely transmitted between ML node(s) and the rest of the network nodes. This work considers the problem of developing a quantum key distribution (QKD) framework for the management layer of an optical network, so that a set of management nodes can securely communicate and exchange keys with the network nodes. An integer linear program (ILP) is formulated for the design of a management layer - quantum key distribution (ML-QKD) network, aiming to maximize the transmission rates provided to network and management nodes, by optimally selecting the placement of the management node(s) and QKD systems. Performance results for several scenarios with a different number of available management nodes and QKD systems, demonstrate that the proposed formulation can design an optimal ML-QKD network.

International Conference on Communications•May 16, 2022•3 citations

Quantum Key Distribution Networks - Key Management: A Survey

Emir Dervisevic, Amina Tanković, Ehsan Fazel +4 more

Secure communication makes the widespread use of telecommunication networks and services possible. With the constant progress of computing and mathematics, new cryptographic methods are being diligently developed. Quantum Key Distribution (QKD) is a promising technology that provides an Information-Theoretically Secure (ITS) solution to the secret-key agreement problem between two remote parties. QKD networks based on trusted relay nodes are built to provide service to a larger number of parties at arbitrary distances. They function as an add-on technology to traditional networks, generating, managing, distributing, and supplying ITS cryptographic keys. Since key resources are limited, integrating QKD network services into critical infrastructures necessitates effective key management. As a result, this article provides a comprehensive review of key management approaches for trusted-relay QKD networks. They are analyzed to facilitate the identification of potential strategies and accelerate the future development of QKD networks.

arXiv:2408.04580•ACM Computing Surveys•Apr 19, 2025•76 citations

Scalable Authentication and Optimal Flooding in a Quantum Network

Naomi R. Solomons, Alasdair I. Fletcher, Djeylan Aktas +11 more

The global interest in quantum networks stems from the security guaranteed by the laws of physics.The deployment of quantum networks means facing the challenges of scaling up the physical hardware and, more importantly, of scaling up all other network layers and optimally utilizing network resources.Here, we consider two related protocols and their experimental demonstrations on an eight-user quantum network test bed, and discuss their usefulness with the aid of example use cases.First, we consider an authentication-transfer protocol to manage a fundamental limitation of quantum communication-the need for a preshared key between every pair of users linked together on the quantum network.By temporarily trusting some intermediary nodes for a short period of time (< 35 min in our network), we can generate and distribute these initial authentication keys with a very high level of security.Second, when end users quantify their trust in intermediary nodes, our flooding protocol can be used to improve both end-to-end communication speeds and increase security against malicious nodes.

arXiv:2101.12225•PRX Quantum•Apr 18, 2022•22 citations
As an extension of quantum key distribution, secure communication among multiple users is a basic task in a quantum network. When the quantum network structure becomes complicated with a large number of users, it is important to investigate network issues, including security, key management, latency, reliability, scalability, and cost. In this work, we utilize the classical network theory and graph theory to address two critical issues in a quantum network, security and key management. First, we design a communication scheme with the highest security level that trusts a minimum number of intermediate nodes. Second, when the quantum key is a limited resource, we design key management and data scheduling schemes to optimize the utility of data transmission. Our results can be directly applied to the current metropolitan and free-space quantum network implementations and can potentially be a standard approach for future quantum network designs.
Quantum key distribution allows secure key distribution between remote communication parties. In a quantum network, multiple users are connected by quantum links for key distribution and classical links for encrypted data transmission. When the quantum network structure becomes complicated with a large number of users, it is important to investigate network issues, including security, key management, latency, reliability, scalability, and cost. In this work, we utilize the classical network theory and graph theory to establish a framework for a quantum network, addressing two critical issues, security and key management. First, we design a communication scheme with the highest security level that trusts a minimum number of intermediate nodes. Second, when the quantum key is a limited resource, we design key management and data scheduling schemes to optimize the utility of data transmission. Our results can be directly applied to the current metropolitan and free-space quantum network implementations and can potentially be a standard approach for future quantum network designs.
Secure quantum communication networks with multiple quantum key distribution (QKD) links have witnessed a booming development in the past decade. When the quantum network structure becomes complicated with a large number of users, it is important to investigate security issues, particularly in terms of quantum key distillation and key management, which are required to be performed at trusted nodes within the quantum network. In this work, we propose a novel cross-layer security enhancement framework based on key authentication and graph theory in quantum networks. We first build an efficient and adaptive framework for the integration of quantum key distillation and quantum key management. We then utilize final quantum keys to build a secure authentication between quantum key distribution links and key management parties. We finally evaluate our framework with cross-layer security enhancement techniques, to allow efficient key scheduling and distribution in quantum networks. Our framework can be directly integrated into current metropolitan and free-space quantum network infrastructure, and potentially be a standard classical-quantum codesign method for quantum network architecture explorations.
A novel approach to secure data transmission, quantum communication draws on fundamental principles of quantum physics. It ensures that the transmitted information is private and accurate. To provide security, quantum networks implement physical constraints such as the no-cloning rule and quantum entanglement. In contrast, computational complexity is employed by classical networks. However, with the proliferation of multiuser quantum networks, identity verification has become more challenging. People with malicious intentions might easily disrupt services in long-distance quantum networks by impersonating legitimate nodes and sharing entangled resources and quantum channels. This highlights the absolute necessity of secure authentication systems tailored to quantum environments. Enhancements to recent quantum authentication systems have been made utilizing techniques that are resistant to quantum computing. Researchers are looking into quantum digital signatures, entanglement-assisted protocols, and quantum key distribution (QKD) authentication to make multi-party communications more secure. In order to prevent attacks where a user establishes a fraudulent identity or account, these strategies can be applied to quantum networks. This study takes a look at current quantum authentication systems and gives them the once-over, focusing on how well they could handle multiple users. The article delves into the evolution of authentication systems to accommodate the distributed model, where nodes can function as senders, receivers, or relays. We aim to strike a compromise between practicality and security in our lightweight, low-latency protocols. Additionally, the paper discusses quantum-specific issues, such as side-channel attacks and device malfunctions, and how authentication techniques can help prevent them. Finally, this study demonstrates that authentication is the critical component of secure quantum communication for multiple users. The most secure quantum key distribution methods are still vulnerable to attacks from inside or outside the system if proper authentication is not in place.
As the number of attacks increases in optical networks, security at the management layer (ML) of these networks is of paramount importance to ensure that critical network management information is securely transmitted between ML node(s) and the rest of the network nodes. This work considers the problem of developing a quantum key distribution (QKD) framework for the management layer of an optical network, so that a set of management nodes can securely communicate and exchange keys with the network nodes. An integer linear program (ILP) is formulated for the design of a management layer - quantum key distribution (ML-QKD) network, aiming to maximize the transmission rates provided to network and management nodes, by optimally selecting the placement of the management node(s) and QKD systems. Performance results for several scenarios with a different number of available management nodes and QKD systems, demonstrate that the proposed formulation can design an optimal ML-QKD network.
Secure communication makes the widespread use of telecommunication networks and services possible. With the constant progress of computing and mathematics, new cryptographic methods are being diligently developed. Quantum Key Distribution (QKD) is a promising technology that provides an Information-Theoretically Secure (ITS) solution to the secret-key agreement problem between two remote parties. QKD networks based on trusted relay nodes are built to provide service to a larger number of parties at arbitrary distances. They function as an add-on technology to traditional networks, generating, managing, distributing, and supplying ITS cryptographic keys. Since key resources are limited, integrating QKD network services into critical infrastructures necessitates effective key management. As a result, this article provides a comprehensive review of key management approaches for trusted-relay QKD networks. They are analyzed to facilitate the identification of potential strategies and accelerate the future development of QKD networks.
The global interest in quantum networks stems from the security guaranteed by the laws of physics.The deployment of quantum networks means facing the challenges of scaling up the physical hardware and, more importantly, of scaling up all other network layers and optimally utilizing network resources.Here, we consider two related protocols and their experimental demonstrations on an eight-user quantum network test bed, and discuss their usefulness with the aid of example use cases.First, we consider an authentication-transfer protocol to manage a fundamental limitation of quantum communication-the need for a preshared key between every pair of users linked together on the quantum network.By temporarily trusting some intermediary nodes for a short period of time (< 35 min in our network), we can generate and distribute these initial authentication keys with a very high level of security.Second, when end users quantify their trust in intermediary nodes, our flooding protocol can be used to improve both end-to-end communication speeds and increase security against malicious nodes.