Quantum Key Distribution (QKD) can distribute keys with guaranteed security but remains susceptible to key exchange interruption due to physical-layer threats, such as high-power jamming attacks. To address this challenge, we first introduce a novel metric, namely Maximum Number of Affected Requests (maxNAR), to quantify the worst-case impact of a single physical-layer attack, and then we investigate a new problem of Routing and Wavelength Assignment with Minimal Attack Radius (RWA-MAR). We formulate the problem using an Integer Linear Programming (ILP) model and propose a scalable heuristic to efficiently minimize maxNAR. Our approach incorporates key caching through Quantum Key Pools (QKPs) to enhance resilience and optimize resource utilization. Moreover, we model the impact of different QKD network architectures, employing Optical Bypass (OB) for optical switching of quantum channels and Trusted Relay (TR) for secure key forwarding. Moreover, a tunable parameter is designed in the heuristic to guide the preference for OB or TR, offering enhanced adaptability and dynamic control in diverse network scenarios. Simulation results show our method significantly outperforms the baseline in terms of security and scalability.
Quantum Key Distribution (QKD) can distribute keys with guaranteed security but remains susceptible to key exchange interruption due to physical-layer threats, such as high-power jamming attacks. To address this challenge, we first introduce a novel metric, namely Maximum Number of Affected Requests (maxNAR), to quantify the worst-case impact of a single physical-layer attack, and then we investigate a new problem of Routing and Wavelength Assignment with Minimal Attack Radius (RWA-MAR). We formulate the problem using an Integer Linear Programming (ILP) model and propose a scalable heuristic to efficiently minimize maxNAR. Our approach incorporates key caching through Quantum Key Pools (QKPs) to enhance resilience and optimize resource utilization. Moreover, we model the impact of different QKD network architectures, employing Optical Bypass (OB) for optical switching of quantum channels and Trusted Relay (TR) for secure key forwarding. Moreover, a tunable parameter is designed in the heuristic to guide the preference for OB or TR, offering enhanced adaptability and dynamic control in diverse network scenarios. Simulation results show our method significantly outperforms the baseline in terms of security and scalability.
Quantum key distribution (QKD) supports secret key exchange to enable data exchange with guaranteed security but remains vulnerable to key exchange interruption caused by physical-layer threats, such as high-power jamming attacks. In particular, in a fiber-based QKD network equipped with optical switching capabilities, a high-power jamming signal injected into a single link can be optically switched and propagated to other links, resulting in the interruption of key exchange on multiple links. To address this challenge, we introduce a novel metric, the maximum number of affected requests (maxNAR), which quantifies the worst-case impact of a single physical-layer attack. Based on this, we investigate a new problem: Routing and Wavelength Assignment with Minimal Attack Radius (RWA-MAR). The objective of RWA-MAR is to assign routes and wavelengths to QKD requests so that the maximum number of requests disrupted by any single physical-layer attack is minimized. We first formulate the problem using an integer linear programming (ILP) model to minimize maxNAR. Due to computational limitations of ILP, we develop a scalable solution that dynamically balances security (minimizing maxNAR) and resource efficiency. The DRL solution is designed to utilize key caches (defined as QKP) to minimize the maxNAR, as the QKP can save the keys for future use. Extensive simulations across diverse topologies and workloads show that our approach achieves a significant reduction in maxNAR (over 50%) compared to the baseline. Meanwhile, our approach maintains reasonable resource efficiency in key delivery, marking a step toward robust and attack-aware QKD network design.
Quantum Key Distribution (QKD) is currently being explored as a solution to the threats posed to current cryptographic protocols by the evolution of quantum computers and algorithms. However, single-photon quantum signals used for QKD permit to achieve key rates strongly limited by link performance (e.g., loss and noise) and propagation distance, especially in multi-node QKD networks, making it necessary to design a scheme to efficiently and timely distribute keys to the various nodes. In this work, we introduce the new problem of joint Routing, Channel, Key-rate and Time-slot Assignment (RCKTA), which is addressed with four different network settings, i.e., allowing or not the use of optical bypass (OB) and trusted relay (TR). We first prove the NP-hardness of the RCKTA problem for all network settings and formulate it using a Mixed Integer Linear Programming (MILP) model that combines both quantum channels and quantum key pool (QKP) to provide an optimized solution in terms of number of accepted key rate requests and key storing rate. To deal with problem complexity, we also propose a heuristic algorithm based on an auxiliary graph, and show that it is able to obtain near-optimal solutions in polynomial time. Results show that allowing OB and TR achieves an acceptance ratio of 39% and 14% higher than that of OB and TR, respectively. Remarkably, these acceptance ratios are obtained with up to 46% less QKD modules (transceivers) compared to TR and only few (less than 1 per path) additional QKD modules than OB.
Quantum Key Distribution (QKD) is a recent technology for secure distribution of symmetric keys, which is currently being deployed to increase communications security against quantum attacks. However, the key rate achievable over a weak quantum signal is limited by the link performance (e.g., loss and noise) and propagation distance, especially in multi-node QKD networks, making it necessary to design a scheme to efficiently and timely distribute keys to the various nodes. In this work, we formulate, using a Mixed Integer Linear Programming (MILP) model, a novel Routing, Channel, and Key-rate Assignment (RCKA) problem for QKD with Quantum Key Pool (QKP), which exploits the opportunity of using trusted relays and optical bypass. Our formulation accounts for the possibility to build a quantum key distribution path that combines both quantum channels and trusted relays to increase the acceptance ratio of key rate requests. Leveraging different versions of the proposed MILP model, we evaluate several strategies exploiting different combinations of trusted relays and optical bypass for the RCKA problem. Results show how different trade-offs between security and resource-efficiency (expressed in terms of acceptance ratio of key rate requests vs. key storing rate in QKP) can be achieved when adopting trusted-relay and/or optical-bypass technologies. Trusted relays can provide a higher acceptance ratio when the number of QKD modules (transmitters or receivers) is sufficiently large, while optical bypass, which does not require the implementation of expensive trusted relays, is preferable when the number of QKD modules is a limiting factor.
Data transmission with optical fiber is vulnerable to eavesdropping. Moreover, conventional key distribution technology suffers from increasing computational power and upgraded attack algorithms. To address these issues, quantum key distribution (QKD), a quantum technology that secures secret information (such as a cryptographic key) exchange between two parties, can be used to guarantee secure data transmission. Integrating QKD into existing wavelength division multiplexing optical networks has been verified through a series of experiments, which contribute to ensuring network security and saving fiber resources. This paper addresses the resource assignment problem in QKD-enabled optical networks. First, a QKD-enabled optical network architecture is introduced. A small fraction of wavelength channels are segmented into multiple time slots with optical time division multiplexing technology to construct quantum key channels (QKChs) and measuring-basis channels, and then the remaining wavelengths can construct traditional data channels. Second, a static routing, wavelength, and time-slot assignment (RWTA) strategy is proposed and verified by the integer linear programming formulation and a heuristic algorithm. In the RWTA, QKChs are assigned for service requests according to the security levels specified by relevant key-updating periods. Thus, the secret keys for data encryption can update periodically to enhance security. Simulation results indicate that there is a trade-off between security (i.e., security levels and security-level types) and resource utilization.
Nowadays, critical sectors in government, finance, and military are facing increasingly high security challenges. However, traditional public-key crypto-systems based on computational complexity are likely to suffer from upgrade computational power. Quantum key distribution (QKD) is a promising technology to effectively address the challenge by providing secret keys due to the laws of quantum physics. Limited by the transmission distance of quantum communications, remote parties have to share secret keys by exchanging keys through the trusted relay nodes hop by hop. However, if relaying hop by hop is still used in metro quantum-optical networks (MQON), a large amount of key resources will be wasted since the distance between any two nodes is short. Therefore, the problem of how to distribute quantum keys with lower waste of key resources over MQON is urgent. In order to solve this problem, we design a novel quantum node structure that is able to bypass itself. Also, by extending the connectivity graph, auxiliary graphs are constructed to describe the adjacency of quantum nodes in different levels influenced by the physical distance. Based on the novel node, two routing, wavelength and time-slot assignment algorithms are proposed, in which some middle nodes can be bypassed to reduce the resource consumption as long as the distance between the two parties meets the requirement of quantum key distribution. Simulations have been conducted to verify the performance of the proposed algorithms in terms of blocking probability, resource utilization, number of bypassed nodes, and security rate per service. Numerical results illustrate that our algorithms perform better on resource utilization than a traditional scheme without bypass. Furthermore, a tradeoff between the keys saved and blocking probability is analyzed and discussed in our paper.
Quantum key distribution (QKD) has potential of providing long-term security as it is based on the fundamental principles of quantum mechanics. Security of information transmitted through optical networks has attracted attention recently due to its vulnerability to attacks post quantum computers. Hence, the integration of QKD into optical networks can significantly improve the security of existing and future optical networks. In QKD-secured optical networks, the quantum channel and the classical channel are integrated into a single optical fiber to reduce the deployment cost of the network infrastructure. However, due to limited network resources in a single optical fiber, the efficient provisioning of network resources (wavelengths and time slots) and blocking are two major issues in such networks. In this work, a resource assignment strategy with scheduling, namely, resource assignment with scheduling (RA-WS) has been proposed for utilization of network resources efficiently. In the RA-WS strategy, the QKD lightpath requests (QLPRs) have been served according to the proposed scheduling criterion. Moreover, the proposed scheduling criterion for routing, wavelength and time-slot assignment (RWTA) can reduce the effect of QLPRs blocking because of the limited network resources. The performance of the proposed RA-WS strategy has been analyzed in terms of blocking probability (BP), success probability of update secret key (SPUSK), and time-slot utilization ratio (TSUR) with different reserved wavelengths for quantum signal channel (QSCh), i.e.,WQand different time slots (ntr). Simulations performed on NSFNET network topology indicate that the RA-WS strategy performs better than the baseline strategy, i.e., resource assignment without scheduling (RA-WOS) in terms of all the considered metrics.