A quantum key distribution network enables pairs of users to generate independent secret keys by leveraging the principles of quantum physics. For end-to-end secure communication, a user pair's secret key must remain secure against any third parties, including both external eavesdroppers and other network users. However, isolating a given user pair from the remaining users while maintaining a high key rate is challenging when all users are intrinsically correlated, particularly in continuous-variable networks. This results in either a low key rate or incomplete end-to-end security. Here, we introduce a multiuser security framework, offering a general and comprehensive end-to-end key rate formula, against the worst-case scenario where an eavesdropper fully exploits the user crosstalk. Building on this framework, we propose a multiuser protocol that achieves the theoretical upper limit in all practical deployments within a 100 km range. Applied to a three-node network, it achieves an Mbps-level per-user key rate and an overall network key rate reaching 90% of the upper limit. The proposed solution supports scalable implementations using telecom-compatible components, while the method for obtaining the accessible information in the network is broadly applicable and can be extended to various multipartite quantum information systems.
A quantum key distribution network enables pairs of users to generate independent secret keys by leveraging the principles of quantum physics. For end-to-end secure communication, a user pair's secret key must remain secure against any third parties, including both external eavesdroppers and other network users. However, isolating a given user pair from the remaining users while maintaining a high key rate is challenging when all users are intrinsically correlated, particularly in continuous-variable networks. This results in either a low key rate or incomplete end-to-end security. Here, we introduce a multiuser security framework, offering a general and comprehensive end-to-end key rate formula, against the worst-case scenario where an eavesdropper fully exploits the user crosstalk. Building on this framework, we propose a multiuser protocol that achieves the theoretical upper limit in all practical deployments within a 100 km range. Applied to a three-node network, it achieves an Mbps-level per-user key rate and an overall network key rate reaching 90% of the upper limit. The proposed solution supports scalable implementations using telecom-compatible components, while the method for obtaining the accessible information in the network is broadly applicable and can be extended to various multipartite quantum information systems.
Building scalable and secure quantum networks with many users has a high application potential but also holds many practical challenges. A significant stride in this pursuit involves extending quantum key distribution, an information-theoretically secure method for establishing cryptographic keys between two distant users, from a point-to-point protocol implemented on direct optical connections to a quantum access network. Yet, realizations of quantum access networks have, so far, relied on probabilistic or time-sharing strategies. Here, we show theoretically and experimentally that a solution without these constraints can come from the exclusive features of continuous-variable systems. Based on coherent states, we propose continuous-variable quantum passive-optical-network (CV-QPON) protocols, enabling deterministic and simultaneous secret key generation among all network users. We achieve this by leveraging the inherent wave-like property of coherent states split at a beam splitter and electric-field quadrature measurements. We show two protocols with different trust levels assigned to the network users and experimentally demonstrate key generation in a quantum access network with 8 users, each with an 11 km span of access link. Depending on the trust assumptions about users, we reach 1.5 Mbits/s and 2.1 Mbits/s of total network key generation. Demonstrating the potential to expand the network's capacity to accommodate tens of users at a high rate, our CV-QPON protocols offer a pathway toward establishing low-cost, high-rate, and scalable quantum access networks using standard telecom technologies and directly exploiting the existing access network infrastructure.
In recent years, continuous-variable quantum key distribution (CV-QKD) has become a promising paradigm for enabling secure communication among multiple end users sharing the same telecommunication backbone. CV-QKD with reverse reconciliation naturally enables scalability from conventional point-to-point links to quantum access networks based on passive quantum broadcasting channels. Here, we report an experimental demonstration on an active 1:4 multi-user CV quantum network (QN) in the finite-size regime. With 1.25⋅109 coherent states exchanged on each 11km quantum channel, the highest performance for secret key generation totaling 1.9⋅10−1 bits/channel use. Furthermore, we investigate adaptable CV-QN protocols that comprehensively allow network operation in various security and key rates requirements of individual users. The results establish the practical security of CV-QN compatible with existing telecommunication for broad deployment, and allowing additional degree of freedom for connected end users in existing infrastructures.
Establishing scalable, secure quantum networks requires advancing beyond conventional point-to-point quantum key distribution (QKD) protocols toward point-to-multipoint QKD protocols. Here, we generalize a well-established discrete-modulated continuous-variable (CV) QKD protocol from the point-to-point to the point-to-multipoint setting. We present a comprehensive security analysis across different scenarios and derive secret key rates for loss-only and noisy channels, both in the asymptotic and the composable finite-size regime. Experimentally, we validate the protocol in a passive optical network with 10 km access links, achieving a composable secure key rate of 2.185×10 −3 bits per symbol (0.273 Mbit/s) against independent and identically distributed collective attacks. Our results demonstrate that discrete-modulated CV-QKD can support access networks with multiple users while relying solely on cost-efficient, off-the-shelf telecommunication components, paving the way toward practical, scalable, and secure quantum networks.
Quantum networks provide opportunities and challenges across a range of intellectual and technical frontiers, including quantum computation, communication, and others. Unlike traditional communication networks, quantum networks utilize quantum bits rather than classical bits to store and transmit information. Quantum key distribution (QKD) relying on the principles of quantum mechanics is a key component in quantum networks and enables two parties to produce a shared random secret key, thereby ensuring the security of data transmission. In this work, we propose a cost-effective quantum downstream access network structure in which each user can get their corresponding key information through terminal distribution. Based on this structure, we demonstrate the first four-end-users quantum downstream access network in continuous variable QKD with a local local oscillator. In contrast to point-to-point continuous variable QKD, the network architecture reevaluates the security of each user and accounts for it accordingly, and each user has a lower tolerance for excess noise as the overall network expands with more users. Hence, the feasibility of the experiment is based on the analysis of the theoretical model, noise analysis, and multiple techniques such as the particle filter and adaptive equalization algorithm used to suppress excess noise. The results show that each user can get a low level of excess noise and can achieve secret key rates of 546 kbps, 535 kbps, 522.5 kbps, and 512.5 kbps under a transmission distance of 10 km, respectively, with the finite-size block of 1×10 8 . This not only verifies the good performance but also provides the foundation for the future multi-user quantum downstream access networks.
To establish a scalable and secure quantum network, a critical milestone is advancing from basic point-to-point quantum key distribution (QKD) systems to the development of inherently multi-user protocols designed to maximize network capacity. Here, we propose a quantum passive optical network (QPON) protocol based on continuous-variable (CV) systems, particularly the quadrature of the coherent state, which enables deterministic, simultaneous, and high-rate secret key generation among all network users. We implement two protocols with different trust levels assigned to the network users and experimentally demonstrate key generation in a quantum access network with 8 users, each with an 11 km span of access link. Depending on the trust assumptions about the users, we reach 1.5 and 2.1 Mbits/s of total network key generation (or 0.4 and 1.0 Mbits/s with finite-size channels estimation). Demonstrating the potential to expand the network's capacity to accommodate tens of users at a high rate, our CV-QPON protocols open up new possibilities in establishing low-cost, high-rate, and scalable secure quantum access networks serving as a stepping stone towards a quantum internet.
Quantum key distribution (QKD), which enables the secure distribution of symmetric keys between two legitimate parties, is highly useful in future network security. An access network that connects multiple end users with one network backbone can be combined with QKD to build security for end users in a scalable and cost-effective way. In this paper, we show that a downstream-access network can be implemented using continuous-variable (CV) QKD. The security analysis is conducted independently with other network nodes, which greatly relax the trustfulness requirement on the network nodes. The security is then obtained against other network parties even when the quantum signals are broadcast throughout the network. The passive beam splitter is sufficient to deterministically distribute the quantum signals, and standard CV QKD systems can be directly fitted in the downstream-access network, which makes it more applicable for practical implementations. Numerous simulation results are provided to demonstrate the performance of the CV QKD downstream-access network, where up to 64 end users are shown to be feasible to access the network. We provide the security-analysis framework for realizing CV QKD in the downstream-access network, which will boost the diversity for constructing practical CV QKD networks.