We investigate the problem of fast and secure packet routing in multi-hop Quantum Key Distribution (QKD) networks. We consider a practical trusted-node setup where a QKD protocol randomly generates symmetric private key pairs over each QKD-enabled link in a network. Packets are first encrypted with the available quantum keys and then transmitted on a point-to-point basis. A fundamental problem in this setting is the design of a secure and capacity-achieving routing policy that takes into account the time-varying availability of the encryption keys and diverse physical-layer link capacities. To address this problem, we propose a new secure throughput-optimal policy called Tandem Queue Decomposition (TQD). The TQD policy is designed by incorporating the QKD process into the Universal Max Weight (UMW) routing policy. We show that the TQD policy achieves the entire secure capacity region for a broad class of traffic, including unicast, broadcast, multicast, and anycast. The TQD policy operates by reducing the problem to the generalized network flow problem without the key availability constraints over a transformed network. The throughput-optimality of the TQD policy is established using the Lyapunov stability theory by carefully analyzing the interdependent queueing process and the key-storage dynamics. Finally, we demonstrate the practical efficiency of the TQD policy over the existing routing algorithms by numerically comparing their performance on a realistic simulator built on top of the state-of-the-art OMNeT++ network simulator platform.
We investigate the problem of fast and secure packet routing in multi-hop Quantum Key Distribution (QKD) networks. We consider a practical trusted-node setup where a QKD protocol randomly generates symmetric private key pairs over each QKD-enabled link in a network. Packets are first encrypted with the available quantum keys and then transmitted on a point-to-point basis. A fundamental problem in this setting is the design of a secure and capacity-achieving routing policy that takes into account the time-varying availability of the encryption keys and diverse physical-layer link capacities. To address this problem, we propose a new secure throughput-optimal policy called Tandem Queue Decomposition (TQD). The TQD policy is designed by incorporating the QKD process into the Universal Max Weight (UMW) routing policy. We show that the TQD policy achieves the entire secure capacity region for a broad class of traffic, including unicast, broadcast, multicast, and anycast. The TQD policy operates by reducing the problem to the generalized network flow problem without the key availability constraints over a transformed network. The throughput-optimality of the TQD policy is established using the Lyapunov stability theory by carefully analyzing the interdependent queueing process and the key-storage dynamics. Finally, we demonstrate the practical efficiency of the TQD policy over the existing routing algorithms by numerically comparing their performance on a realistic simulator built on top of the state-of-the-art OMNeT++ network simulator platform.
This paper considers the problem of secure packet routing at the maximum achievable rate in a Quantum key distribution (QKD) network. Assume that a QKD protocol generates symmetric private keys for secure communication over each link in a multi-hop network. The quantum key generation process, which is affected by noise, is assumed to be modeled by a stochastic counting process. Packets are first encrypted with the available quantum keys for each hop and then transmitted on a point-to-point basis over the communication links. A fundamental problem that arises in this setting is to design a secure and capacity-achieving routing policy that accounts for the time-varying availability of the quantum keys for encryption and finite link capacities for transmission. In this paper, by combining the QKD protocol with the Universal Max Weight (UMW) routing policy [1] – [3], we design a new secure throughput-optimal routing policy, called Tandem Queue Decomposition (TQD). TQD solves the problem of secure routing efficiently for a wide class of traffic, including unicast, broadcast, and multicast. One of our main contributions in this paper is to show that the problem can be reduced to the usual generalized network flow problem on a transformed network without the key availability constraints. Simulation results show that the proposed policy incurs a substantially smaller delay as compared to the state-of-the-art routing and key management policies. The proof of throughput-optimality of the proposed policy makes use of the Lyapunov stability theory along with a careful treatment of the key-storage dynamics.
Quantum Key Distribution (QKD) networks enable unconditionally secure key exchange using quantum mechanical principles. However, routing cryptographic keys across multi-hop quantum networks introduces challenges unique to quantum communication. This survey analyzes and classifies 26 routing strategies proposed between 2013 and 2024 for terrestrial, satellite, and hybrid QKD infrastructures. Dynamic, key-aware routing algorithms have been shown to reduce service rejection rates by 25-40% compared to static shortest-path methods by incorporating real-time key pool availability and link error rates. Multi-path strategies improve resilience against trusted-node compromise by distributing keys across disjoint routes, albeit with an increase in key consumption of 30-60%. SDN-based orchestration frameworks emerge as essential enablers of flexible, QoS-aware routing for hybrid networks integrating terrestrial fibers and intermittent satellite links. Critical research directions include reducing dependence on trusted nodes through quantum repeaters or post-quantum cryptography, developing standardized key management interfaces for interoperability, and adopting AI-driven predictive routing for adapting to fluctuating network states. This comprehensive synthesis of routing algorithms, performance trade-offs, and unresolved issues offers practical guidance for engineering secure, adaptable, and large-scale QKD networks capable of meeting real-world deployment demands.
Quantum key distribution (QKD) is an encrypted communication technique based on the principles of quantum mechanics that ensures communication security by exploiting the properties of quantum states. Currently, the transmission efficiency of the QKD system is low. Trusted relay technology is used to solve this problem and achieve long-distance transmission. However, trusted relaying alone cannot decrypt the issues of poor link stability and the low utilization of key resources. To further optimize the system performance, we propose a dynamic routing algorithm. One of the improvement schemes includes the following: firstly, an adjustable-size quantum key pool (QKP) is designed, which can dynamically adjust the size of the refreshing pool according to the actual demand. Secondly, the utilization of key resources is improved by using the residual quantum key model to dynamically obtain the remaining key amount in the QKP and set the key amount threshold. We calculate the link-blocking probability and track the blocking intensity and blocking entry by combining the Poisson process, thus realizing the evaluation of the link stability. Finally, the number of remaining keys in the QKP and the link-blocking probability combine with the random wandering model as the basis of the route selection for the QKD dynamic routing algorithm to achieve efficient key path selection. We validated the algorithm by comparing it with other algorithms on the Mininet simulation platform, and the algorithm proved to have a better performance in terms of congestion avoidance, delay reduction, and improved QKD efficiency. This scheme provides a novel and efficient way to solve the problems in existing QKD systems. It effectively improves the transmission efficiency and strengthens the system’s security by dynamically obtaining the critical volume, accurately evaluating the link state, and selecting the optimal critical path.
There is a need to ensure unconditionally secure communications between different sites of an organization. We use quantum key distribution (QKD) protocol to provide a continuous stream of secret key bits to each communicating pair for message encryption through one-time-pad (OTP) cryptography. Due to long distance between different sites, trusted nodes are used to relay each service key in a hop-by-hop manner from one end node to another end node of a communicating pair. In a QKD network, routes for key relaying can be affected by availability of relay key bits at trusted nodes. Also, relay key allocation among different routes can impact security. We consider the scenario of supporting multiple communicating pairs, where each pair demands delivery of a certain service key rate across the QKD network, and trusted nodes may not have sufficient relay key rates to perform bitwise encryption to protect the service key. Hence, there is a need to allocate the limited relay key bits to meet all service key delivery demands while considering its effects on security. We propose to perform jointly routing and relay key allocation to minimize attack success probability. We have formulated the joint problem as an optimization and further proposed an efficient algorithm to find the optimal solutions. We have evaluated the proposed algorithm to confirm its ability and efficiency in finding optimal routes and relay key allocations. For the specific network topology that we have adopted, results show that the minimum number of required trusted nodes increases linearly when end nodes are added to the system. Furthermore, we can achieve a higher security level by adding more trusted nodes in a QKD network. But increasing the number of trusted nodes beyond the minimum requirement may not continue to reduce significantly the attack success probability.
With exponential growth and associated milestones set in quantum information and quantum computing (QC) technologies, QC is becoming a threat to existing key encryption strategies that leverage asymmetric cryptographic algorithms like RSA (Rivest, Shamir, Adleman) encryption. Since these algorithms form the backbone of Internet communication, it becomes essential to utilize secure quantum methods for key generation and distribution. The quantum key distribution (QKD) networks have since been extensively researched and implemented with various communication protocols, primarily utilizing the Quantum Entanglement and Quantum Key Correction paradigms. Efficient routing is one of the significant problems in classical and hybrid networks. It is important to propose novel hybrid and efficient routing protocols based on modern optimization approaches to design secure, fidelitous, and efficient quantum information networks. We perform this optimization by generating a cost function to implement quantum optimization algorithms, namely the Quantum Approximate Optimization Algorithm (QAOA). We further draw a comparison with the state-of-the-art graph theory-based optimization techniques. The primary objective of this paper is to fabricate a robust quantum communication network and to subsequently analyze the effectiveness of quantum based techniques to carry out network routing and link optimization, generating scope for the utilization of quantum architecture to enhance security in Q KD networks.
Quantum key distribution (QKD) protocols generate a same secret key at two nodes which are at different locations. Such key is used to encrypt and decrypt messages for unconditionally secure communications through a classical channel. Originally, QKD protocols are designed to work between two nodes which are directly connected through a point-to-point quantum channel. Currently, commercial QKD systems have limited range and key rate. To increase key rate and extend range, the key generated by QKD at one end node is relayed hop-by-hop to the other end node through multiple trusted nodes. In a QKD network with multiple pairs of communicating nodes, routing deals with the issue of deciding for each pair, which trusted nodes are used to form a path connecting the end nodes. This paper presents an overview of QKD and highlights the differences between QKD routing as compared to classical routing. The challenges of QKD routing are presented. Existing works dealing with the challenges are surveyed. This paper ends with a discussion on remaining research issues.