Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Multimedia Tools and Applications

Authentication in virtual private networks based on quantum key distribution methods

Marcin Niemiec, Petr Machník

Published Oct 13, 2014• 10 citations
Publisher

Abstract

Quantum physics has a major influence on modern computer science and communications. New quantum-based solutions continue to be proposed by researchers. However, only a few techniques are possible to implement in practice. One of them is quantum key distribution, which ensures the confidentiality of digital data. This article introduces a new concept: quantum distribution of pre-shared keys. This approach provides end-users with very secure authentication, impossible to achieve using currently-available techniques. Secure authentication is a key requirement in virtual private networks (VPN)—popular protection in computer networks. The authors simulated quantum-based distribution of a shared secret in a typical VPN connection. Using a dedicated simulator, all individual steps of the quantum key distribution process were presented. Based on the created secret, a secure IPsec tunnel in a StrongSwan environment was established between AGH (Poland) and VSB (Czech Republic). It allows end-users to communicate at very high security levels.

DOI
10.1007/s11042-014-2299-1

Related papers

Recent Developments in Quantum Network Cybersecurity: Exploiting Authentication Protocols to Secure Multi-User Quantum Communication

Abhilash Narayanan, Shiva Shankar Mummidi, Ramanan Sathiaseelan +3 more

A novel approach to secure data transmission, quantum communication draws on fundamental principles of quantum physics. It ensures that the transmitted information is private and accurate. To provide security, quantum networks implement physical constraints such as the no-cloning rule and quantum entanglement. In contrast, computational complexity is employed by classical networks. However, with the proliferation of multiuser quantum networks, identity verification has become more challenging. People with malicious intentions might easily disrupt services in long-distance quantum networks by impersonating legitimate nodes and sharing entangled resources and quantum channels. This highlights the absolute necessity of secure authentication systems tailored to quantum environments. Enhancements to recent quantum authentication systems have been made utilizing techniques that are resistant to quantum computing. Researchers are looking into quantum digital signatures, entanglement-assisted protocols, and quantum key distribution (QKD) authentication to make multi-party communications more secure. In order to prevent attacks where a user establishes a fraudulent identity or account, these strategies can be applied to quantum networks. This study takes a look at current quantum authentication systems and gives them the once-over, focusing on how well they could handle multiple users. The article delves into the evolution of authentication systems to accommodate the distributed model, where nodes can function as senders, receivers, or relays. We aim to strike a compromise between practicality and security in our lightweight, low-latency protocols. Additionally, the paper discusses quantum-specific issues, such as side-channel attacks and device malfunctions, and how authentication techniques can help prevent them. Finally, this study demonstrates that authentication is the critical component of secure quantum communication for multiple users. The most secure quantum key distribution methods are still vulnerable to attacks from inside or outside the system if proper authentication is not in place.

IEEE International Conference on ICT in Business Industry & Government (ICTBIG)•Dec 12, 2025•0 citations

Improving VPN Security Performance Based on One-Time Password Technique Using Quantum Keys

Montida Pattaranantakul, Paramin Sangwongngam, Keattisak Sripimanwat

Network encryption technology has become an essential factor for organizational security. Virtual Private Network (VPN) or VPN encryption technology is the most popular technique used to prevent unauthorized users access to private network. This technique normally relies on mathematical function in order to generate periodic key. As a result, it may decrease security performance and vulnerable system, if high performance computing make rapid progress to reverse mathematicaln calculation to find out the next secret key pattern.The main contribution of this paper emphasizes on improving VPN performance by adopting quantum keys as a seed value into one-time password technique to encompasses the whole process of authentication, data confidentiality and security key management methodology in order to protect against eavesdroppers during data transmission over insecure network.

Information Technology Journal•Jan 1, 2012•0 citations

Experimental Authentication of Quantum Key Distribution with Post-quantum Cryptography

Liujun Wang, Kaiyi Zhang, Jiayong Wang +9 more

Quantum key distribution (QKD) can provide information theoretically secure key exchange even in the era of quantum computer. However, QKD requires the classical channel to be authenticated, and the current method is pre-sharing symmetric keys. For a QKD network of $n$ users, this method requires $C_n^2 = n(n-1)/2$ pairs of symmetric keys to realize pairwise interconnection. In contrast, with the help of mature public key infrastructure (PKI) and post-quantum cryptography (PQC) with quantum resistant security, each user only needs to apply for a digital certificate from certificate authority (CA) to achieve efficient and secure authentication for QKD. We only need to assume the short-term security of the PQC algorithm to achieve the long-term security of the distributed keys. Here, we experimentally verified the feasibility, efficiency and stability of the PQC algorithm in QKD authentication, and demonstrated the advantages when new users join the QKD network. Using PQC authentication we only need to believe the CA is safe, rather than all trusted relays. QKD combined with PQC authentication will greatly promote and extend the application prospects of quantum safe communication.

arXiv:2009.04662•Sep 10, 2020•6 citations

VPN Protection with QKD-Derived Keys Using Standard Interfaces

Jaime S. Buruaga, Hans H. Brunner, Fred Fung +6 more

Quantum Key Distribution is a mechanism for obtaining a symmetric key that has been proved to be completely secure against quantum attacks. However, QKD technology is highly dependent on the low level implementation of the vendor. This work proposes the use of QKD-derived key material using high level standard interfaces to transparently protect services based on extending the protection of Virtual Private Networks to possible attacks based on quantum computing.

International Conference on Transparent Optical Networks•Jul 2, 2023•2 citations

Experimental authentication of quantum key distribution with post-quantum cryptography

Liujun Wang, Kaiyi Zhang, Jiayong Wang +9 more

Abstract Quantum key distribution (QKD) can provide information theoretically secure key exchange even in the era of quantum computers. However, QKD requires the classical channel to be authenticated, the current method for which is pre-sharing symmetric keys. For a QKD network of n users, this method requires $${C}_{n}^{2}=n(n-1)/2$$ C n 2 = n ( n − 1 ) / 2 pairs of symmetric keys to realize pairwise interconnection. In contrast, with the help of a mature public key infrastructure (PKI) and post-quantum cryptography (PQC) with quantum-resistant security, each user only needs to apply for one digital certificate from a certificate authority (CA) to achieve efficient and secure authentication for QKD. We need to assume only the short-term security of the PQC algorithm to achieve long-term security of the distributed keys. Here, we experimentally verified the feasibility, efficiency, and stability of the PQC algorithm in QKD authentication, and demonstrated the advantages when new users join the QKD network. Using the PQC public-key infrastructure, the nodes need to mutually trust only the CA to authenticate each other. QKD combined with PQC authentication will greatly promote and extend the application prospects of quantum-safe communication.

npj Quantum Information•May 6, 2021•154 citations

Using QKD-exchanged keys for encryption of VPN

Fortunato Gabriele Lo Giudice, Floriano De Rango, Miroslav Vozn̆ák +1 more

The paper aims to highlight how symmetric cryptographic key generation via Quantum Key Distribution-based technology can be used to secure protected communications within a private network. Within a testbed of the 5G network installed in the campus of the Technical University of Ostrava, the quantum key distribution (QKD) technology and encryptors are implemented to demonstrate secure 5G network concepts such as network function virtualization (NFV) and network management software-defined networking (SDN). Specifically, two APIs are programmed with all the necessary steps for two Secure Application Entities to secure a new symmetric key that is in turn generated by two Key Manager Entities via a protocol called "Coherent One-Way".

Telecommunications Forum (TELFOR)•Nov 15, 2022•2 citations
Quantum physics has a major influence on modern computer science and communications. New quantum-based solutions continue to be proposed by researchers. However, only a few techniques are possible to implement in practice. One of them is quantum key distribution, which ensures the confidentiality of digital data. This article introduces a new concept: quantum distribution of pre-shared keys. This approach provides end-users with very secure authentication, impossible to achieve using currently-available techniques. Secure authentication is a key requirement in virtual private networks (VPN)—popular protection in computer networks. The authors simulated quantum-based distribution of a shared secret in a typical VPN connection. Using a dedicated simulator, all individual steps of the quantum key distribution process were presented. Based on the created secret, a secure IPsec tunnel in a StrongSwan environment was established between AGH (Poland) and VSB (Czech Republic). It allows end-users to communicate at very high security levels.
A novel approach to secure data transmission, quantum communication draws on fundamental principles of quantum physics. It ensures that the transmitted information is private and accurate. To provide security, quantum networks implement physical constraints such as the no-cloning rule and quantum entanglement. In contrast, computational complexity is employed by classical networks. However, with the proliferation of multiuser quantum networks, identity verification has become more challenging. People with malicious intentions might easily disrupt services in long-distance quantum networks by impersonating legitimate nodes and sharing entangled resources and quantum channels. This highlights the absolute necessity of secure authentication systems tailored to quantum environments. Enhancements to recent quantum authentication systems have been made utilizing techniques that are resistant to quantum computing. Researchers are looking into quantum digital signatures, entanglement-assisted protocols, and quantum key distribution (QKD) authentication to make multi-party communications more secure. In order to prevent attacks where a user establishes a fraudulent identity or account, these strategies can be applied to quantum networks. This study takes a look at current quantum authentication systems and gives them the once-over, focusing on how well they could handle multiple users. The article delves into the evolution of authentication systems to accommodate the distributed model, where nodes can function as senders, receivers, or relays. We aim to strike a compromise between practicality and security in our lightweight, low-latency protocols. Additionally, the paper discusses quantum-specific issues, such as side-channel attacks and device malfunctions, and how authentication techniques can help prevent them. Finally, this study demonstrates that authentication is the critical component of secure quantum communication for multiple users. The most secure quantum key distribution methods are still vulnerable to attacks from inside or outside the system if proper authentication is not in place.
Network encryption technology has become an essential factor for organizational security. Virtual Private Network (VPN) or VPN encryption technology is the most popular technique used to prevent unauthorized users access to private network. This technique normally relies on mathematical function in order to generate periodic key. As a result, it may decrease security performance and vulnerable system, if high performance computing make rapid progress to reverse mathematicaln calculation to find out the next secret key pattern.The main contribution of this paper emphasizes on improving VPN performance by adopting quantum keys as a seed value into one-time password technique to encompasses the whole process of authentication, data confidentiality and security key management methodology in order to protect against eavesdroppers during data transmission over insecure network.
Quantum key distribution (QKD) can provide information theoretically secure key exchange even in the era of quantum computer. However, QKD requires the classical channel to be authenticated, and the current method is pre-sharing symmetric keys. For a QKD network of nnn users, this method requires Cn2=n(n−1)/2C_n^2 = n(n-1)/2Cn2​=n(n−1)/2 pairs of symmetric keys to realize pairwise interconnection. In contrast, with the help of mature public key infrastructure (PKI) and post-quantum cryptography (PQC) with quantum resistant security, each user only needs to apply for a digital certificate from certificate authority (CA) to achieve efficient and secure authentication for QKD. We only need to assume the short-term security of the PQC algorithm to achieve the long-term security of the distributed keys. Here, we experimentally verified the feasibility, efficiency and stability of the PQC algorithm in QKD authentication, and demonstrated the advantages when new users join the QKD network. Using PQC authentication we only need to believe the CA is safe, rather than all trusted relays. QKD combined with PQC authentication will greatly promote and extend the application prospects of quantum safe communication.
Abstract Quantum key distribution (QKD) can provide information theoretically secure key exchange even in the era of quantum computers. However, QKD requires the classical channel to be authenticated, the current method for which is pre-sharing symmetric keys. For a QKD network of n users, this method requires Cn2=n(n−1)/2{C}_{n}^{2}=n(n-1)/2Cn2​=n(n−1)/2 C n 2 = n ( n − 1 ) / 2 pairs of symmetric keys to realize pairwise interconnection. In contrast, with the help of a mature public key infrastructure (PKI) and post-quantum cryptography (PQC) with quantum-resistant security, each user only needs to apply for one digital certificate from a certificate authority (CA) to achieve efficient and secure authentication for QKD. We need to assume only the short-term security of the PQC algorithm to achieve long-term security of the distributed keys. Here, we experimentally verified the feasibility, efficiency, and stability of the PQC algorithm in QKD authentication, and demonstrated the advantages when new users join the QKD network. Using the PQC public-key infrastructure, the nodes need to mutually trust only the CA to authenticate each other. QKD combined with PQC authentication will greatly promote and extend the application prospects of quantum-safe communication.
The paper aims to highlight how symmetric cryptographic key generation via Quantum Key Distribution-based technology can be used to secure protected communications within a private network. Within a testbed of the 5G network installed in the campus of the Technical University of Ostrava, the quantum key distribution (QKD) technology and encryptors are implemented to demonstrate secure 5G network concepts such as network function virtualization (NFV) and network management software-defined networking (SDN). Specifically, two APIs are programmed with all the necessary steps for two Secure Application Entities to secure a new symmetric key that is in turn generated by two Key Manager Entities via a protocol called "Coherent One-Way".