This paper aims to address the challenge of designing secure and high-performance quantum key distribution networks (QKDNs), which are essential for encrypted communication in the era of quantum computing. Focusing on the control and management (CM) layer essential for monitoring and routing, the study emphasizes centrally managed software-defined networking (SDN). We begin by analyzing QKDN routing characteristics needed for evaluating two existing architectures and proposed new CM layer implementation. Following the theoretical analysis, we conduct a discrete-event-based simulation in which the proposed architecture is compared to an existing one, which serves as a performance baseline. The results provide recommendations based on use cases for which different architectures show superiority and offer valuable insights into the development and evaluation of CM architectures for QKDNs.
This paper aims to address the challenge of designing secure and high-performance quantum key distribution networks (QKDNs), which are essential for encrypted communication in the era of quantum computing. Focusing on the control and management (CM) layer essential for monitoring and routing, the study emphasizes centrally managed software-defined networking (SDN). We begin by analyzing QKDN routing characteristics needed for evaluating two existing architectures and proposed new CM layer implementation. Following the theoretical analysis, we conduct a discrete-event-based simulation in which the proposed architecture is compared to an existing one, which serves as a performance baseline. The results provide recommendations based on use cases for which different architectures show superiority and offer valuable insights into the development and evaluation of CM architectures for QKDNs.
Quantum cryptography provides an effective approach to address the security challenges in communication network posed by Shor's factorization, Grover's search, and other new algorithms. We propose an architecture of QoS-oriented quantum key distribution network (QKDN) based on network slicing and software-defined network (SDN). The network slices with different QoS levels can be constructed according to users' requirements. The throughput, latency and other QoS metrics requirement can be obtained by allowing for centralized control management and more flexible resource allocation using the scheme of SDN. Simulation results show that slicing scheme in QKDN can flexibly orchestrate resources to meet QoS of the services and can also be easily integrated with existing communication networks.
As an important support for quantum communication, quantum key distribution (QKD) networks have achieved a relatively mature level of development, and they face higher requirements for multi-user end-to-end networking capabilities. Thus, QKD networks need an effective management plane to control and coordinate with the QKD resources. As a promising technology, software defined networking (SDN) can separate the control and management of QKD networks from the actual forwarding of the quantum keys. This paper systematically introduces QKD networks enabled by SDN, by elaborating on its overall architecture, related interfaces, and protocols. Then, three-use cases are provided as important paradigms with their corresponding schemes and simulation performances.
Software-defined networking (SDN) has emerged as a promising paradigm for managing and controlling network resources efficiently. However, ensuring the security of data packets transmitted within an SDN environment remains a critical challenge. Traditional networking relies on static configurations, while SDN offers dynamic control and programmability, revolutionizing network management. In SDN, the application layer employs tools like OpenDaylight and Mininet for network management and testing. The control layer, managed by controllers such as Floodlight or ONOS, orchestrates traffic flow among switches. In the infrastructure layer, Quantum Key Distribution (QKD) with the BB84 protocol ensures secure communication. Together, these layers enable agile, programmable, and secure networking paradigms. This paper proposes integrating quantum key distribution (QKD) into SDN architectures to bolster packet-level security. By leveraging quantum entanglement and uncertainty, a secure communication channel between SDN controllers and switches is established, resilient to quantum attacks. Evaluation through simulations and real-world experiments demonstrates efficacy in mitigating security threats while minimizing overhead and latency, advancing SDN security IEEE 802.1X capabilities and leveraging quantum technologies for cybersecurity.
Recent developments in quantum key distribution (QKD) demonstrate the maturity of securing sensitive data against the emerging quantum computing threat. For QKD-secured long-haul and meshed optical transport networks (OTNs), quantum key management systems (QKMSs) are essential to overcome current distance limitations of available QKD devices. In this work, we present and compare two implementations of QKMSs, analyzing their scalability with an emulated QKD network (QKDN) utilizing recorded performance metrics from deployed QKD devices. First, we use a state-of-the-art Internet routing scheme, i.e., open shortest path first (OSPF), demonstrating that key management entities (KMEs) can solve the key routing problem utilizing distributed routing. Second, we apply software-defined networking (SDN) to implement centralized routing with a SDN controller. This paper compares distributed with centralized key routing regarding scalability, throughput, and latency. Both schemes facilitate up to six key relays between any pair of nodes in parallel with average key relay durations per hop below 300 ms given the Nobel-Germany topology and any-to-any demand matrix. With a network-wide joint key routing optimization in the SDN controller, up to 16.7% higher demands can be served compared to distributed key routing. Within the inherent compatibility of our study to network-function virtualization (NFV), we guideline future integration of QKMSs into deployed OTNs.
Abstract Network management has been significantly transformed by software‐defined networking (SDN), which consolidates control and improves adaptability. As a result of this paradigm shift, security concerns have emerged concurrently. Within SDN environments, maintaining service path integrity is of utmost importance because malicious entities can exploit network flows to gain access to data, resulting in security breaches. Thus, QKD networks require a management plane that can control and manage the QKD resources. Quantum key distribution networks can be controlled and managed separately by SDN, allowing quantum key forwarding to be separated from their control and management. The paper provides an overview of QKD networks enabled by SDN, along with an overview of its architecture, interfaces, and protocols. This paper elaborates on the overall architecture and related interfaces and protocols of QKD networks assisted by SDN. Then, three important paradigms for simulation are presented using three use cases.
Software-Defined Networking (SDN) is an emerging networking paradigm that decouples the control and data plane in order to enable programmable and flexible networks, optimizing its applications and advancing computer systems. It does so through its architecture, a key part of which is a centralized network management through open interfaces that revolutionizes the way in which networks are designed and makes them more agile and versatile to the evolving needs of modern and future applications services. This also means, however, that there is now a centralized point of attack that is a major vulnerability, threatening the security of the entire network. With such an advanced network paradigm, it requires a security system that will mitigate these risks and warrant long-term security. In attempts to allow secure communications within the network, this research proposes the implementation of Quantum Key Distribution (QKD), leveraging quantum mechanics to secure the network against any computational advancements in the future. QKD is a recent cryptographic system that includes a traditional-computational channel and a physical-quantum channel to generate and distribute keys between parties. It uses the principles of quantum mechanics including entanglement and superposition to ensure that the physical layer cannot be compromised computationally. QKD provides confidentiality and privacy of information and communication. Moreover, it is resistant to technological advancements. The implications of QKD significantly enhance SDN security through its protection against attacks, efficient key distribution, reliable network orchestration, and data integrity, creating an architecture that establishes stable communication channels that are resistant to cyber threats.