Untrusted node networks initially implemented by measurement-device-independent quantum key distribution (MDI-QKD) protocol are a crucial step on the roadmap of the quantum Internet. Considering extensive QKD implementations of trusted node networks, a workable upgrading tactic of existing networks toward MDI networks needs to be explicit. Here, referring to the nonstandalone (NSA) network of 5G, we propose an NSA-MDI scheme as an evolutionary selection for existing phase-encoding BB84 networks. Our solution can upgrade the BB84 networks and terminals that employ various phase-encoding schemes to immediately support MDI without hardware changes. This cost-effective upgrade effectively promotes the deployment of MDI networks as a step of untrusted node networks while taking full advantage of existing networks. In addition, the diversified demands on security and bandwidth are satisfied, and network survivability is improved.
Untrusted node networks initially implemented by measurement-device-independent quantum key distribution (MDI-QKD) protocol are a crucial step on the roadmap of the quantum Internet. Considering extensive QKD implementations of trusted node networks, a workable upgrading tactic of existing networks toward MDI networks needs to be explicit. Here, referring to the nonstandalone (NSA) network of 5G, we propose an NSA-MDI scheme as an evolutionary selection for existing phase-encoding BB84 networks. Our solution can upgrade the BB84 networks and terminals that employ various phase-encoding schemes to immediately support MDI without hardware changes. This cost-effective upgrade effectively promotes the deployment of MDI networks as a step of untrusted node networks while taking full advantage of existing networks. In addition, the diversified demands on security and bandwidth are satisfied, and network survivability is improved.
Quantum key distribution (QKD) can serve large numbers of users with unconditional secure communication, in which measurement-device-independent (MDI) QKD protocol can conveniently enhance realistic security by eliminating all detector side channels. In multi-user scenarios, MDI-QKD networks should meet the requirements of reliability and robustness. Around the issues, we complete a series of work on performance improvement, low-cost deployment, and robust networking. First is to answer how to change the trusted node to the untrusted node with low cost, here we propose and demonstrate an MDIQKD which is compatible with phase encoding BB84 networks, allowing for economical deployment of MDI-QKD networks and reconciliation between high key rate and high realistic security in the same network. Then we make the MDI networks more robust. We design an MDI-QKD networking scheme for multi-user access where more than two users can generate keys synchronously regardless of aligning reference frames and compensating channel disturbance on polarization. Third, we find a general method to distil secure keys from quantum discord, which is different to the previous entanglement-based frameworks of MDI-QKD, allowing imperfect preparation and measurement of quantum states. The series of work can help the practical application of MDI-QKD networks, and promote the development of quantum networks.
Quantum key distribution (QKD) networks are promising to serve large numbers of users with information-theoretic secure communication. In QKD networks, the detection-safe protocol, termed measurement-device-independent (MDI) QKD, can naturally enhance realistic security by supporting untrusted measurement nodes. However, the environmental disturbances to quantum states degrade the performance of multi-user communication. Here we propose an MDI-QKD networking scheme with robustness against environmental disturbance and adaptability to multi-user access, where more than two users can generate keys simultaneously regardless of aligning reference frames and compensating channel disturbance on polarization. To achieve this, we introduce the reference-frame-independent protocol as well as a polarization-compensation-free method, design a multi-user measurement unit, and combine it with original two-user units. The scheme is experimentally demonstrated for the improvement of network robustness and adaptability in multi-user scenarios, and the time and device costs of disturbance compensation can be saved from O ( N ) to O ( 1 ) for an N-user network.
Measurement-device-independent quantum key distribution (MDI-QKD) can be immune to all detector side-channel attacks and guarantee the information-theoretical security even with uncharacterized single photon detectors. MDI-QKD has been demonstrated in both laboratories and field-tests by using attenuated lasers combined with the decoy-state technique. However, it is a critical assumption that the sources used by legitimate participants are trusted in MDI-QKD. Hence, it is possible that a potential security risk exists. Here we propose a new scheme of polarization-encoding-based MDI-QKD with a single untrusted source, by which the complexity of the synchronization system can be reduced and the success rate of the Bell-state measurement can be improved. Meanwhile, the decoy-state method is employed to avoid the security issues introduced by a non-ideal single photon source. We also derive a security analysis of the proposed system. In addition, it seems to be a promising candidate for the implementation for QKD network in the near future.
Quantum Key Distribution (QKD) has demonstrated unique and significant advantages in secure communication. In particular, Measurement-Device-Independent QKD (MDI-QKD), which is independent of measurement devices, increases data transmission distances and addresses the issue of low security in trusted relays. Therefore, in this work, we investigate QKD networks based on trusted and untrusted relays over optical backbone networks, providing a cost-optimal solution for the deployment and implementation of QKD networks. Specifically, this paper describes the QKD network and defines a new cost model, which not only fully considers the diverse impact factors of deployment costs but also meets the requirements for sharing network elements in response to different QKD chain requests. Based on cost model, this paper further proposes a cost-optimal heuristic algorithm for hybrid QKD network deployment, which can provide an economical and secure deployment solution for QKD networks. Extensive simulation experiments are conducted and the experimental results show that the proposed method outperforms current mainstream QKD network deployment algorithms in both deployment cost and security. Moreover, as the network scale increases, the advantages of our algorithm become more pronounced. Compared to mainstream algorithms, our method achieve an improvement of 17.7% -64.3% in cost savings and 1.19 to 3.24 times in security levels.
Measurement-device-independent quantum key distribution (MDI-QKD) protocol was proposed to remove all the detector side channel attacks, while its security relies on the trusted encoding systems. Here we propose a one-sided MDI-QKD (1SMDI-QKD) protocol, which enjoys detection loophole-free advantage, and at the same time weakens the state preparation assumption in MDI-QKD. The 1SMDI-QKD can be regarded as a modified MDI-QKD, in which Bob's encoding system is trusted, while Alice's is uncharacterized. For the practical implementation, we also provide a scheme by utilizing coherent light source with an analytical two decoy state estimation method. Simulation with realistic experimental parameters shows that the protocol has a promising performance, and thus can be applied to practical QKD applications.
Measurement-device-independent quantum key distribution (MDI-QKD) can eliminate detector side channels and prevent all attacks on detectors. The future of MDI-QKD is a quantum network that provides service to many users over untrusted relay nodes. In a real quantum network, the losses of various channels are different and users are added and deleted over time. To adapt to these features, we propose a protocol that allows users to independently choose their optimal intensity settings to compensate for different channel losses. Such a protocol enables a scalable high-rate MDI-QKD network that can easily be applied for channels of different losses and allows users to be dynamically added/deleted at any time without affecting the performance of existing users.