This paper emphasizes the development of network monitoring appliance for monitoring network health, network resources and for further analysis of Quantum Key Distribution (QKD) performance where QKD devices located in different locations. It provides tools and services for end users who enable to view real time QKD performance statistics on the network. As it is very important to keep track of each key parameter involved with device status and QKD temporal evolution to perform traffic analysis and to determine the error probability during the phase of key generation. The system has been developed from a Network Health Analysis and Monitoring system (NetHAM) [1] implemented under an open source platform, offered more features both graphical statistics display and user friendly interface. In addition, this paper proposed a conformance passive monitoring method to analysis the QKD performance. The log from QKD layer has been converted to well organized database format before storing it in the database server. The relevant information will be invoked for network topology display, link and device status that would be helpful for end user can easily view the QKD performance with frequently updated through the dynamic graphical display and for further historical data analysis.
This paper emphasizes the development of network monitoring appliance for monitoring network health, network resources and for further analysis of Quantum Key Distribution (QKD) performance where QKD devices located in different locations. It provides tools and services for end users who enable to view real time QKD performance statistics on the network. As it is very important to keep track of each key parameter involved with device status and QKD temporal evolution to perform traffic analysis and to determine the error probability during the phase of key generation. The system has been developed from a Network Health Analysis and Monitoring system (NetHAM) [1] implemented under an open source platform, offered more features both graphical statistics display and user friendly interface. In addition, this paper proposed a conformance passive monitoring method to analysis the QKD performance. The log from QKD layer has been converted to well organized database format before storing it in the database server. The relevant information will be invoked for network topology display, link and device status that would be helpful for end user can easily view the QKD performance with frequently updated through the dynamic graphical display and for further historical data analysis.
Monitoring mechanisms are essential in modern telecommunications networks, ensuring reliability, performance, and security by continuously tracking network health and status. These mechanisms enable real-time anomaly detection and response, allowing for fast intervention and dynamic optimization of network resources. To advance Quantum Key Distribution (QKD) networks toward becoming a mainstream service within current telecommunication infrastructures, comprehensive monitoring mechanisms must be available. This paper explores the integration of such a monitoring approach for QKD. Leveraging a recently proposed model that utilizes virtualization to create an abstraction layer over the highly heterogeneous array of quantum and classical hardware, this monitoring mechanism offers significant advantages. These include the continuous provisioning of real-time data and traffic statistics on network segments, as well as the detection of potential attacks or failures on critical network elements, enabling dynamic, data-driven routing, operations, and management. The proposed monitoring strategy, which incorporates both passive and active measurements, enables proactive and immediate actions when any network irregularity is detected. Beyond detailing the monitoring mechanism, we demonstrate its feasibility through a virtual environment test, validating its effectiveness in a controlled setting.
Quantum Key Distribution (QKD) offers a revolutionary approach to secure communication, leveraging the principles of quantum mechanics to generate and distribute cryptographic keys that are immune to eavesdropping. As QKD systems become more widely adopted, the need for robust monitoring and management solutions has become increasingly crucial. The Cerberis3 QKD system from ID Quantique addresses this challenge by providing a comprehensive monitoring and visualization platform. The system’s advanced features, including central configuration, SNMP integration, and the graphical visualization of key performance metrics, enable network administrators to ensure their QKD infrastructure’s reliable and secure operation. Monitoring critical parameters such as Quantum Bit Error Rate (QBER), secret key rate, and link visibility is essential for maintaining the integrity of the quantum channel and optimizing the system’s performance. The Cerberis3 system’s ability to interface with encryption vendors and support complex network topologies further enhances its versatility and integration capabilities. By addressing the unique challenges of quantum monitoring, the Cerberis3 system empowers organizations to leverage the power of QKD technology, ensuring the security of their data in the face of emerging quantum computing threats. This article explores the Cerberus3 system’s features and its role in overcoming the monitoring challenges inherent to QKD deployments.
Similar to the Internet, Quantum Key Distribution (QKD) networks typically have diverse participants, such as users, operators, and infrastructure builders. In order to achieve loose functional coupling, a multi-layer structure is frequently indispensable. Nevertheless, once the architecture of the QKD network is designed, further expansion and modification prove to be extremely challenging. To address this issue, a QKD network architecture based on virtual Quantum Key Distribution (VQKD) is proposed. In this architecture, all devices at both ends that are capable of providing consistent quantum keys are regarded as a pair of quantum key distribution devices. The bottom layer is real QKD, while all other layers are virtual QKD. All real and virtual QKDs provide quantum keys to the upper layers. This network structure is an iterative one, and theoretically, the number of layers in a quantum key distribution network can be infinitely increased based on actual needs. In this paper, we present a practical application case. This case addresses the actual needs of network operators, network service providers, and those involved in user network construction. We have designed a three-layer quantum secure communication network exchange structure that is suitable for network infrastructure developers, network operators, and those involved in user network construction. Network infrastructure developers, network operators, and users can carry out network construction, network operation, and user network construction at different network layers, realizing a loosely coupled hierarchical design of quantum secure communication networks. This model can dynamically increase or decrease the number of quantum network exchange layers based on actual needs, without affecting the network exchange of quantum secure communication networks, demonstrating strong versatility and adaptability.
As a practical method, the passive scheme is useful to monitor the photon statistics of an untrusted source in a ``Plug Play'' quantum key distribution (QKD) system. In a passive scheme, three kinds of monitor mode can be adopted: average photon number (APN) monitor, photon number analyzer (PNA), and photon number distribution (PND) monitor. In this paper, the security analysis is rigorously given for the APN monitor, while for the PNA, the analysis, including statistical fluctuation and random noise, is addressed with a confidence level. The results show that the PNA can achieve better performance than the APN monitor and can asymptotically approach the theoretical limit of the PND monitor. Also, the passive scheme with the PNA works efficiently when the signal-to-noise ratio (RSN) is not too low and so is highly applicable to solve the untrusted source problem in the QKD system.
The access network segment represents the end point for the provision of quantum key distribution (QKD) services, offering secure communication to the end users. Yet the integration of QKD into legacy passive optical networks (PONs) is very challenging due to the high losses of the passive optical distribution network (ODN) and the presence of upstream and downstream classical channels belonging to many coexisting PON standards, which are the source of scattered Raman noise photons. In this study we evaluate the sustainability of discrete variable QKD services in access networks supporting one or more PON standards, evidencing the necessity of ODN architectures able to enhance the QKD performance and facilitate the key-exchange over the legacy PON links.
The access network portion of a telecommunications system in the last years demands ever-increasing bandwidth to serve not only residential and commercial customers but also other telecommunications operators, as is the case with back-haul in mobile infrastructure.To achieve this, technologies using fiber optics as a transmission medium are being developed.Passive Optical Network (PON) protocols such as ITU-T G.9804.1 provides new schemes of multiplexing that improve higher speed offered both in the downstream channel (operator to user) and in the upstream channel (user to operator).In some cases a symmetrical optical link is required to support new services, applications and terminals from users side because their profiles and demands has changed in the last decade with new challenges to maintain network parameters within the established contracted values.On the other hand, information security has also been a topic of interest in recent years, so quantum cryptography offers an alternative to increase robustness compared to the mechanisms available in electronic systems that could be vulnerable to the development of quantum computing.Although quantum cryptography protocols were defined in the last century, their application is of interest today, as they can exploit the properties of photons to make it more difficult for an intruder to obtain the private key of an information system that uses optical fiber as a transmission medium.This work shows the computational application of the BB84 quantum key distribution (QKD) protocol on an operating model of a 50G passive optical network, demonstrating both the cryptography performance and network quality parameters such as the bit error rate (BER) and the eye diagram.