Quantum computing is an emerging paradigm that has shown great promise in accelerating large-scale scientific, optimization, and machine-learning workloads. With most quantum computing solutions being offered over the cloud, it has become imperative to protect confidential and proprietary quantum code from being accessed by untrusted and/or adversarial agents. In response to this challenge, we propose SPYCE, which is the first known solution to obfuscate quantum code and output to prevent the leaking of any confidential information over the cloud. SPYCE implements a lightweight, scalable, and effective solution based on the unique principles of quantum computing to achieve this task.
Quantum computing is an emerging paradigm that has shown great promise in accelerating large-scale scientific, optimization, and machine-learning workloads. With most quantum computing solutions being offered over the cloud, it has become imperative to protect confidential and proprietary quantum code from being accessed by untrusted and/or adversarial agents. In response to this challenge, we propose SPYCE, which is the first known solution to obfuscate quantum code and output to prevent the leaking of any confidential information over the cloud. SPYCE implements a lightweight, scalable, and effective solution based on the unique principles of quantum computing to achieve this task.
Recent quantum software engineering efforts have made significant progress in testing and debugging quantum algorithms -however, providing confidentiality and privacy to quantum software in the cloud remains an unexplored critical area.OpaQue is the first solution to obfuscate quantum software and output to prevent the leaking of confidential information over the cloud.OpaQue implements a lightweight, scalable, and effective solution based on the unique principles of quantum computing to achieve this task.
The cloud-based environments in which today's and future quantum computers will operate, raise concerns about the security and privacy of user's intellectual property. Quantum circuits submitted to cloud-based quantum computer providers represent sensitive or proprietary algorithms developed by users that need protection. Further, input data is hard-coded into the circuits, and leakage of the circuits can expose users' data. To help protect users' circuits and data from possibly malicious quantum computer cloud providers, this work presented the first hardware architecture for a trusted execution environment for quantum computers. To protect the user's circuits and data, the quantum computer control pulses are obfuscated with decoy control pulses. While digital data can be encrypted, analog control pulses cannot and this paper proposed the novel decoy pulse approach to obfuscate the analog control pulses. The proposed decoy pulses can easily be added to the software by users. Meanwhile, the hardware components of the architecture proposed in this paper take care of eliminating, i.e. attenuating, the decoy pulses inside the superconducting quantum computer's dilution refrigerator before they reach the qubits. The hardware architecture also contains tamper-resistant features to protect the trusted hardware and users' information. The work leverages a new metric of variational distance to analyze the impact and scalability of hardware protection. The variational distance of the circuits protected with our scheme, compared to unprotected circuits, is in the range of only 0.16 to 0.26. This work demonstrates that protection from possibly malicious cloud providers is feasible and all the hardware components needed for the proposed architecture are available today.
Quantum computing resources are now becoming easily accessible from various cloud providers. Although still in the Noisy Intermediate Scale Quantum regime, quantum computers hold promise to be able to execute novel algorithms and create invaluable data. However, just as with any other type of computing resource, they may be vulnerable to security attacks and should have defenses built into their design. This paper explores a particular threat of untrusted cloud providers, and how to protect user's quantum programs and data from the untrusted cloud provider. By leveraging trusted hardware in the quantum computer, a new obfuscation-based protection is developed based on switching of control pulses between different drive and control channels of the quantum computer. This work demonstrates that simple hardware modifications can enable dynamic, run-time pulse switching, which makes it extremely difficult for the cloud provider to decode what actual circuit is executed on the quantum computer. This work presents a basic architecture that employs pulse switching, and an extended architecture that includes use of dummy qubits for increased protection. The overhead of the proposed changes, as well as attack complexity for different types of user circuits and obfuscation levels is evaluated in this work.
The Early Fault-Tolerant (EFT) era is emerging, where modest Quantum Error Correction (QEC) can enable quantum utility before full-scale fault tolerance. Quantum optimization is a leading candidate for early applications, but protecting these workloads is critical since they will run on expensive cloud services where providers could learn sensitive problem details. Experience with classical computing systems has shown that treating security as an afterthought can lead to significant vulnerabilities. Thus, we must address the security implications of quantum computing before widespread adoption. However, current Secure Quantum Computing (SQC) approaches, although theoretically promising, are impractical in the EFT era: blind quantum computing requires large-scale quantum networks, and quantum homomorphic encryption depends on full QEC. We propose application-specific SQC, a principle that applies obfuscation at the application layer to enable practical deployment while remaining agnostic to algorithms, computing models, and hardware architectures. We present Enigma, the first realization of this principle for quantum optimization. Enigma integrates three complementary obfuscations: ValueGuard scrambles coefficients, StructureCamouflage inserts decoys, and TopologyTrimmer prunes variables. These techniques guarantee recovery of original solutions, and their stochastic nature resists repository-matching attacks. Evaluated against seven state-of-the-art AI models across five representative graph families, even combined adversaries, under a conservatively strong attacker model, identify the correct problem within their top five guesses in only 4.4% of cases. The protections come at the cost of problem size and T-gate counts increasing by averages of 1.07x and 1.13x, respectively, with both obfuscation and decoding completing within seconds for large-scale problems.
Despite rapid progress in quantum computing in the last decade, the limited usability of quantum computers remains a major roadblock toward its wider adoption. Current noisy intermediate-scale quantum (NISQ) computers produce highly erroneous program outputs for quantum-advantage-proven algorithms - that is, algorithms that are infeasible or orders of magnitude slower on classical supercomputing and high-performance computing (HPC) clusters. Unfortunately, currently, quantum computing programmers lack robust system software tools and methods to make meaningful use of erroneous program executions on quantum computers. This lack of capability is the core motivation behind the fundamental question this dissertation poses: "Can we build system software tools for programmers to make the quantum program execution and output meaningful on NISQ machines?" This dissertation answers this question in the affirmative - experimentally demonstrating on real-system quantum computers that it is possible to extract near-accurate program output from noisy executions on today's erroneous quantum computers, ironically using classical HPC resources and knowledge. This dissertation demonstrates how to achieve this goal without requiring user intervention, domain knowledge about quantum algorithms, or additional quantum hardware support. Unfortunately, as this dissertation uncovers, progressing toward making quantum computers usable is a double-edged sword. In the near future, only a few entities in the world may have access to powerful quantum computers, and these quantum computers will be used to solve previously-unsolved large-scale optimization problems, possibly without an explicit trust model between the service provider and the customer. Therefore, this dissertation envisions that the solutions to such large-scale optimization problems will be considered sensitive and will need to be protected. This dissertation takes the first few steps toward preparing us for that future - by developing a novel method that intelligently obfuscates near-accurate program output and quantum circuit structure to preserve a customer's privacy under a specified computation model and resource availability. The approaches introduced in this dissertation open up new research avenues for hybrid quantum-classical computing. This dissertation also aims to lower the barrier to entry for quantum computing research for the experimental computer systems and HPC community by open-sourcing multiple novel datasets and software frameworks implemented for real-system quantum computers.--Author's abstract
The rapid advancement of quantum computing technology presents an opportunity to revolutionize cloud computing platforms, enabling the execution of complex workloads that are beyond the reach of classical systems. This paper explores the potential of quantum-enhanced cloud platforms, focusing on bridging classical and quantum computing to support future workloads. We examine the integration of quantum processors with classical cloud infrastructure, highlighting the challenges and benefits of hybrid architectures that combine the strengths of both paradigms. Key topics include quantum resource management, quantum programming models, and the development of algorithms that leverage quantum speedup for optimization, machine learning, and data analysis. Additionally, we address the scalability, security, and interoperability concerns that must be overcome for effective deployment in real-world cloud environments. By offering insights into the convergence of classical and quantum computing, this paper provides a roadmap for the evolution of cloud platforms capable of supporting next-generation applications and workloads.