Quantum key distribution (QKD) which enables the secure distribution of symmetric keys between two legitimate parties is of great importance in future network security. Access network that connects multiple end-users with one network backbone can be combined with QKD to build security for end-users in a scalable and cost-effective way. Though previous QKD access networks are all implemented in the upstream direction, in this paper, we prove that downstream access network can also be constructed by using continuous-variable (CV) QKD. The security of the CV-QKD downstream access network is analyzed in detail, where we show the security analysis is secure against other parties in the network. The security analysis we proved corresponds to the downstream access network where only passive beamsplitter is sufficient to distribute the quantum signals and no other active controls are demanded. Moreover, standard CV-QKD systems can be directly fitted in the downstream access network, which makes it more applicable for practical implementations. Numerous simulation results are provided to demonstrate the performance of the CV-QKD downstream access network, where up to 64 end-users are shown to be feasible to access the network. Our work provides the security analysis framework for realizing QKD in the downstream access network which will boost the diversity for constructing practical QKD networks.
Quantum key distribution (QKD) which enables the secure distribution of symmetric keys between two legitimate parties is of great importance in future network security. Access network that connects multiple end-users with one network backbone can be combined with QKD to build security for end-users in a scalable and cost-effective way. Though previous QKD access networks are all implemented in the upstream direction, in this paper, we prove that downstream access network can also be constructed by using continuous-variable (CV) QKD. The security of the CV-QKD downstream access network is analyzed in detail, where we show the security analysis is secure against other parties in the network. The security analysis we proved corresponds to the downstream access network where only passive beamsplitter is sufficient to distribute the quantum signals and no other active controls are demanded. Moreover, standard CV-QKD systems can be directly fitted in the downstream access network, which makes it more applicable for practical implementations. Numerous simulation results are provided to demonstrate the performance of the CV-QKD downstream access network, where up to 64 end-users are shown to be feasible to access the network. Our work provides the security analysis framework for realizing QKD in the downstream access network which will boost the diversity for constructing practical QKD networks.
Quantum key distribution (QKD), which enables the secure distribution of symmetric keys between two legitimate parties, is highly useful in future network security. An access network that connects multiple end users with one network backbone can be combined with QKD to build security for end users in a scalable and cost-effective way. In this paper, we show that a downstream-access network can be implemented using continuous-variable (CV) QKD. The security analysis is conducted independently with other network nodes, which greatly relax the trustfulness requirement on the network nodes. The security is then obtained against other network parties even when the quantum signals are broadcast throughout the network. The passive beam splitter is sufficient to deterministically distribute the quantum signals, and standard CV QKD systems can be directly fitted in the downstream-access network, which makes it more applicable for practical implementations. Numerous simulation results are provided to demonstrate the performance of the CV QKD downstream-access network, where up to 64 end users are shown to be feasible to access the network. We provide the security-analysis framework for realizing CV QKD in the downstream-access network, which will boost the diversity for constructing practical CV QKD networks.
Quantum secure communication technology, grounded in the principles of quantum mechanics, has revolutionized traditional cryptographic methods, which predominantly rely on mathematical algorithms and logical transformations. Quantum key distribution (QKD) facilitates the secure sharing of symmetric keys between legitimate parties, ensuring the integrity and confidentiality of information in communication channels. Among various QKD schemes, continuous variable quantum key distribution (CV-QKD) has emerged as a viable alternative to the more established discrete variable quantum key distribution (DV-QKD). CV-QKD boasts several advantages, including straightforward deployment, reduced operational costs, and stable signal quality, positioning it as a significant component of the quantum communication landscape. Quantum noise stream cipher (QNSC) represents a technique that employs redundant data streams to encrypt plaintext. Notably, QNSC shares structural similarities with the optical path used in quantum key distribution, allowing for compatibility with existing QKD infrastructure. Furthermore, the keys generated through quantum key distribution ensure absolute security, enabling them to substitute the data streams produced by pseudo-random sequences traditionally used in classical encryption schemes. This substitution enhances the overall security framework of the quantum noise stream encryption approach. The quantum access network (QAN) extends quantum key distribution capabilities from point-to-point connections to point-to-multipoint configurations, thereby becoming an essential component of contemporary network architectures. By interlinking multiple end users with a network backbone, quantum access networks can seamlessly integrate with quantum key distribution protocols. This integration offers a cost-effective and scalable solution for user access to the network. Extensive experimental verifications have demonstrated the viability of downstream access networks, indicating that the merging of quantum access network structures with quantum stream encryption technologies can yield a comprehensive quantum experimental platform. On this platform, security keys are derived through quantum key distribution, which subsequently facilitates the encryption of plaintext information. Notably, experimental validations involving eight users have been successfully executed on this platform, underscoring its practical applicability and effectiveness.
Nowadays, network speeds are increasing rapidly and network security is a growing concern. Quantum key distribution (QKD) can provide unconditionally secure keys at the physical layer for communication networks. The implementation of high-speed QKD quantum networks is important for the security of modern high-speed networks. Here, for the first time, we realized a four-user high-speed downstream access network experiment. The repetition frequency of the system is 100 MHz, considering block size of108, four users achieved secret key rates of 430 kbps, 450 kbps, 150 kbps, and 130 kbps at channel attenuations of 4.4 dB, 4.2 dB, 5.6 dB, and 5.8 dB, respectively. In addition, we find that the block size, the number of users, and the channel attenuation have a significant impact on the system performance in real systems. When the block size is108and the number of user nodes is four, the maximum channel attenuation that can be supported is about 6 dB. Our experimental results demonstrate the feasibility of multi-user downstream CV-QKD access networks, further advancing the practical application of quantum networks in real-world environments.
An quantum access network, connecting multiple end users and a backbone network in a scalable and cost-effective way with tree or star structures, is suitable to combine with continuous-variable quantum key distribution for network security. Under the realistic condition, in a passive optical network in optical distribution network achieved by a practical passive beam splitter, it is hard to divide the signal into 1/n parts evenly. To well quantify the impact of the imperfection, we modify the formula for secret key rate calculation with the imperfection effect and conduct numerical simulations. The results indicate that if the communication parties neglect this imperfection, Eve can attack the entire network and attain information without the parties’ awareness.
To address the demand for low-cost deployment in quantum key distribution (QKD) networks, this study explores the implementation of unidimensional (UD) modulation continuous-variable quantum key distribution (CV-QKD) protocols within downstream access networks. The UD CV-QKD protocol employs a single modulator for information encoding, offering benefits such as reduced implementation cost and lower random number consumption, which collectively decrease the overall setup expense of QKD systems. Through systematic performance analysis, it is demonstrated that the proposed UD modulation downstream access network scheme exhibits strong scalability and practical applicability. When supporting 32 users, the system maintains secure communication over transmission distances of up to 50 km. As the number of users increases to 64, performance declines slightly; however, the system still achieves a 35 km transmission distance, which remains suitable for many metropolitan access applications. Even in high-density access scenarios involving 128 users, the system sustains a positive key rate within a transmission range of 20 km. Furthermore, this study evaluates the protocol’s practical security under source intensity errors and finite-size effects. These results provide meaningful guidance for deploying low-cost, high-security quantum communication access networks and contribute to advancing QKD technologies toward scalable, real-world implementations.
Quantum networks provide opportunities and challenges across a range of intellectual and technical frontiers, including quantum computation, communication, and others. Unlike traditional communication networks, quantum networks utilize quantum bits rather than classical bits to store and transmit information. Quantum key distribution (QKD) relying on the principles of quantum mechanics is a key component in quantum networks and enables two parties to produce a shared random secret key, thereby ensuring the security of data transmission. In this work, we propose a cost-effective quantum downstream access network structure in which each user can get their corresponding key information through terminal distribution. Based on this structure, we demonstrate the first four-end-users quantum downstream access network in continuous variable QKD with a local local oscillator. In contrast to point-to-point continuous variable QKD, the network architecture reevaluates the security of each user and accounts for it accordingly, and each user has a lower tolerance for excess noise as the overall network expands with more users. Hence, the feasibility of the experiment is based on the analysis of the theoretical model, noise analysis, and multiple techniques such as the particle filter and adaptive equalization algorithm used to suppress excess noise. The results show that each user can get a low level of excess noise and can achieve secret key rates of 546 kbps, 535 kbps, 522.5 kbps, and 512.5 kbps under a transmission distance of 10 km, respectively, with the finite-size block of 1×10 8 . This not only verifies the good performance but also provides the foundation for the future multi-user quantum downstream access networks.