Challenges facing the deployment of quantum key distribution (QKD) systems in critical infrastructure protection applications include the optical loss-key rate tradeoff, addition of network clients, and interoperability of vendor-specific QKD hardware. Here, we address these challenges and present results from a recent field demonstration of three QKD systems on a real-world electric utility optical fiber network.
Challenges facing the deployment of quantum key distribution (QKD) systems in critical infrastructure protection applications include the optical loss-key rate tradeoff, addition of network clients, and interoperability of vendor-specific QKD hardware. Here, we address these challenges and present results from a recent field demonstration of three QKD systems on a real-world electric utility optical fiber network.
As the limitations of classical cryptographic systems become increasingly evident in the face of advancing quantum algorithms, Quantum Key Distribution (QKD) emerges as a vital paradigm for securing information in next-generation networks. This paper explores the theoretical foundations and protocol architectures underpinning QKD, including BB84, E91, and newer hybrid approaches designed for scalable integration into existing infrastructures. Performance metrics such as key generation rate, error thresholds, and resistance to various attack models are critically examined across both fiber-optic and free-space implementations. Furthermore, the study delves into real-world deployment challenges—ranging from synchronization errors and quantum channel noise to cost-efficiency and interoperability with classical systems. By offering a comparative analysis and proposing optimization strategies, this work aims to pave the way for robust quantum-secure communication protocols suited for large-scale, heterogeneous network environments.
Quantum Key Distribution (QKD) has progressed from a theoretical cryptographic concept to an emerging secure communication infrastructure technology. While early work focused on protocol security and physical-layer feasibility, current research increasingly addresses scalable network deployment, hardware acceleration, and integration with classical communication systems. As QKD expands from point-to-point links to metropolitan, backbone, and hybrid satellite–terrestrial networks, new engineering challenges arise in topology design, entropy generation, real-time key distillation, and multi-vendor interoperability. This survey provides an infrastructure-oriented review of QKD networks, examining architectural models, quantum randomness as a root of trust, FPGA and system-on-chip (SoC) based acceleration techniques, and programmable control-plane integration. Key management system architectures and standardized interfaces are analyzed to highlight their roles in enabling scalable, interoperable deployments. The paper also synthesizes major standardization efforts and deployment initiatives shaping carrier-grade QKD infrastructures. Finally, open engineering challenges, including scalability, control-plane integration, certification harmonization, and hybridization with post-quantum cryptography, are identified, positioning QKD as a foundational component of next-generation secure communication systems.
The advent of cryptographically relevant quantum computers poses an existential threat to classical public-key infrastructure. Quantum Key Distribution (QKD) addresses this challenge by providing information-theoretic security for key establishment, independently of any computational hardness assumption. In this work, the deployment and experimental validation of a metropolitan-scale quantum-secure network between data centers in Milan is reported. The network operates over installed fiber infrastructure and implements a layered architecture integrating QKD hardware, standards-compliant Key Management (KM), and centralized Software-Defined Networking (SDN) orchestration. Dynamic path reconfiguration via active optical switching and trusted-node routing allow automated fail-over solutions. Application-layer validation across diverse protocols and workloads confirms the seamless interoperability of all system components. These results establish the technical and operational readiness of metropolitan QKD networks for production deployment, and offer a replicable blueprint for building quantum-secure communication infrastructure at metropolitan scale.
Quantum Key Distribution (QKD) constitutes one of the most profound practical applications of quantum mechanics, enabling two parties to exchange cryptographic keys whose security is guaranteed by the fundamental laws of physics rather than the assumed computational hardness of mathematical problems. As quantum computing capabilities continue to advance, classical public-key infrastructure faces an existential threat, rendering QKD a critical component of post-quantum secure communication architectures. This paper presents a comprehensive survey of QKD spanning foundational protocols, rigorous security proofs, hardware implementation challenges, deployment experiences across metropolitan fiber networks, and recent satellite-based experiments. We analyze the BB84, E91, B92, SARG04, continuous-variable, measurement-device-independent (MDI-QKD), and twin-field (TF-QKD) protocols in depth, examining their security assumptions, achievable key rates, and practical limitations. Particular attention is given to side-channel vulnerabilities in realistic implementations, decoy-state methods for mitigating photon-number-splitting attacks, and finite-key security analysis. We review key performance benchmarks from commercial systems and discuss integration with classical network infrastructure. The paper concludes by identifying open challenges in quantum repeater development, satellite QKD scalability, and standardization efforts essential for large-scale deployment.
Abstract Quantum key distribution (QKD) provides in principle unconditional security of key sharing based on the laws of physics only. In the last decade, several experimental and commercial QKD networks have been built and operated worldwide. Demonstrational applications of QKD in financial institutions, government networks, and critical infrastructures such as the power grid have been initially explored. However, large-scale deployment and full-scale commercialization of QKD networks still faces some technological and standardisation challenges. In this paper, recent developments and in-field deployments of QKD networks are reviewed and advancements in QKD standardisation are also discussed.