Secure networks composed of optical networks and quantum key distribution (QKD) are considered in this paper. A network layer structure is defined to focus on issues important with respect to the QKD network layer that controls QKD links and supplies a secure key for message transmission. A multiple-user QKD network layer can be constructed with timing synchronization, secure key sharing between indirectly connected nodes with switched QKD systems and key relays, and key management to control the volume of key generation and supply in response to the demand from optical network nodes.
Secure networks composed of optical networks and quantum key distribution (QKD) are considered in this paper. A network layer structure is defined to focus on issues important with respect to the QKD network layer that controls QKD links and supplies a secure key for message transmission. A multiple-user QKD network layer can be constructed with timing synchronization, secure key sharing between indirectly connected nodes with switched QKD systems and key relays, and key management to control the volume of key generation and supply in response to the demand from optical network nodes.
Quantum Key Distribution (QKD) networks allow multiple users to generate and share secret quantum keys with unconditional security. Although many schemes of QKD networks have been presented, they are only concentrated on the system realization and physical implementations. For the complete practical quantum network, a succinct theoretic model that systematically describes the working processes from physical schemes to key process protocols, from network topology to key management, and from quantum communication to classical communication is still absent. One would hope that research and experience have shown that there are certain succinct model in the design of communication network. With demonstration of the different QKD links and the four primary types of quantum networks including probability multiplexing, wavelength multiplexing, time multiplexing and quantum multiplexing, we suggest a layer model for QKD networks which will be compatible with different implementations and protocols. We divide it into four main layers by their functional independency while defining each layer's services and responsibilities in detail, orderly named quantum links layer, quantum networks layer, quantum key distribution protocols process layer, and keys management layer. It will be helpful for the systematic design and construction of real QKD networks.
Secure communication makes the widespread use of telecommunication networks and services possible. With the constant progress of computing and mathematics, new cryptographic methods are being diligently developed. Quantum Key Distribution (QKD) is a promising technology that provides an Information-Theoretically Secure (ITS) solution to the secret-key agreement problem between two remote parties. QKD networks based on trusted relay nodes are built to provide service to a larger number of parties at arbitrary distances. They function as an add-on technology to traditional networks, generating, managing, distributing, and supplying ITS cryptographic keys. Since key resources are limited, integrating QKD network services into critical infrastructures necessitates effective key management. As a result, this article provides a comprehensive review of key management approaches for trusted-relay QKD networks. They are analyzed to facilitate the identification of potential strategies and accelerate the future development of QKD networks.
Abstract The fundamental architecture and functions of secure key management in a quantum key distribution (QKD) network with enhanced universal interfaces for smooth key sharing between arbitrary two nodes and enabling multiple secure communication applications are proposed. The proposed architecture consists of three layers: a quantum layer, key management layer and key supply layer. We explain the functions of each layer, the key formats in each layer and the key lifecycle for enabling a practical QKD network. A quantum key distribution-advanced encryption standard (QKD-AES) hybrid system and an encrypted smartphone system were developed as secure communication applications on our QKD network. The validity and usefulness of these systems were demonstrated on the Tokyo QKD Network testbed.
As the number of attacks increases in optical networks, security at the management layer (ML) of these networks is of paramount importance to ensure that critical network management information is securely transmitted between ML node(s) and the rest of the network nodes. This work considers the problem of developing a quantum key distribution (QKD) framework for the management layer of an optical network, so that a set of management nodes can securely communicate and exchange keys with the network nodes. An integer linear program (ILP) is formulated for the design of a management layer - quantum key distribution (ML-QKD) network, aiming to maximize the transmission rates provided to network and management nodes, by optimally selecting the placement of the management node(s) and QKD systems. Performance results for several scenarios with a different number of available management nodes and QKD systems, demonstrate that the proposed formulation can design an optimal ML-QKD network.
It is well known that optical access networks are able to provide high data rates over long distances and to a reasonable number of users. Security and privacy are always a challenge for public accessible network infrastructures. Especially in time-division multiplexing passive optical networks (TDM-PONs), in which the downstream signal is broadcasted to all users connected via the same wavelength channel in a shared fiber link, privacy can be a critical concern. Although encryption at the application layer can provide a high level of security, this can be achieved only if the encryption key distribution is perfectly save. On the other hand, encryption on the physical layer such as quantum cryptography or, more precisely, quantum key distribution (QKD) is a very promising approach to achieve secure communication. However, there remain several issues that have to be solved before the quantum cryptography reaches the maturity level needed for a cost effective implementation in practical networks. In this paper, we address quantum key distribution (QKD) over passive optical access networks, which is an enabling technology required to cost efficiently deploy practical quantum encrypted data communication in the access area. We study different methods to integrate QKD systems in conventional optical access networks and quantitatively evaluate their suitability for a potential implementation.
The quantum key distribution (QKD) method allows for the safe creation of encryption keys between trusted entities for secure communication. The suggested system is designed to enable secure communication between multiple parties (a single sender, Alice, and multiple receivers, Bobs) connected via a public channel susceptible to interception. It enables Alice to privately share encryption keys with each Bob over dedicated quantum channels, which can then be used to decrypt messages sent over the public network. The procedure involves Alice generating optical signals with randomly assigned properties such as intensity, phase, polarization, and frequencies. Alice randomly sends either signal states carrying information or decoy states with different frequencies to the receivers (Bobs) over the quantum channels. She also sends a synchronization signal for timing alignment with the quantum signals over the optical links. At the receiving end, the synchronization pulse timestamps the incoming quantum signals. Each Bob then randomly alters the frequencies of the received quantum signals and randomly measures their phase or polarization. The key is created from the frequency, phase, or polarization information of the quantum signals, resulting in longer keys. Key management agents manage the securely QKD-generated keys to encrypt information before sending it to the intended receivers. Essentially, this framework establishes authenticated, private communication by using QKD over dedicated ultra-secure quantum links to distribute decryption keys, ensuring that only intended users can access the content. The approach is designed to ensure end-to-end secure communication across the network.