A global Quantum Key Distribution (QKD) network, as the one developed in the European project SECOQC [1] is an infrastructure capable of realizing long-distance secret key establishment with information-theoretic security. Due to the specificity of their physical layer, the structure and the principle of operation of QKD networks will however significantly differ from the solutions adopted for “classical ” networks. The deployment of QKD networks is indeed far from being straightforward: it implies the con-ception of a network architecture connecting multiple users that may possibly be very far away from each other, all of this while QKD links are currently point-to-point only and intrinsically limited in distance. We will describe the logical architecture we have adopted for QKD networks with the SECOQC project. It is based on the original concept of maintaining a dedicated “network of secrets ” in order to distribute and manage the secret key material produced by QKD devices. We will alo present specific issues related to the development of a stack of network protocols adapted to the specific constraints of such infrastructures [2]. We have also considered QKD networks from a topology viewpoint and study analytically how cost minimization arguments impact on the optimal working points of individual QKD links [3]. We show in particular that, in the perspective of QKD networks, individual QKD links should be operated at an optimal working distance that can be significantly shorter than the maximum distance imposed by detector dark counts. We explain why such results motivate the research of new experimental compromise in practical QKD systems, and illustrate that point by considering the example of the recently developped DPSK QKD system [4].
A global Quantum Key Distribution (QKD) network, as the one developed in the European project SECOQC [1] is an infrastructure capable of realizing long-distance secret key establishment with information-theoretic security. Due to the specificity of their physical layer, the structure and the principle of operation of QKD networks will however significantly differ from the solutions adopted for “classical ” networks. The deployment of QKD networks is indeed far from being straightforward: it implies the con-ception of a network architecture connecting multiple users that may possibly be very far away from each other, all of this while QKD links are currently point-to-point only and intrinsically limited in distance. We will describe the logical architecture we have adopted for QKD networks with the SECOQC project. It is based on the original concept of maintaining a dedicated “network of secrets ” in order to distribute and manage the secret key material produced by QKD devices. We will alo present specific issues related to the development of a stack of network protocols adapted to the specific constraints of such infrastructures [2]. We have also considered QKD networks from a topology viewpoint and study analytically how cost minimization arguments impact on the optimal working points of individual QKD links [3]. We show in particular that, in the perspective of QKD networks, individual QKD links should be operated at an optimal working distance that can be significantly shorter than the maximum distance imposed by detector dark counts. We explain why such results motivate the research of new experimental compromise in practical QKD systems, and illustrate that point by considering the example of the recently developped DPSK QKD system [4].
The performances of Quantum Key Distribution (QKD) systems have notably progressed since the early experimental demonstrations and several recent works indicate that the pace of this progression is very likely to be maintained -if not increased- in the future years. In parallel to this fast progression of QKD techniques, commercial products are also being developed, making QKD deployment for securization of some specific “real” data networks more and more likely to occur. It is the goal to the European project Secoqc to deploy a secure long-distance network based on quantum cryptography. It implies the conception of a specific architecture able to connect multiple users that may possibly be very far away from each other while QKD links are currently ″point-to-point only″and intrinsically limited in distance.
Quantum key distribution (QKD) is a cryptographic primitive, which offers an extremely high security standard known as unconditional or information-theoretic security, relying on intrinsically quantum properties of communication (light) signals. A general trusted relay technique was adopted and developed by the Integrated EU-project SECOQC. What makes the SECOQC approach unique is on the one hand the introduction of an integrated network design, specifically tailored for the distribution of secrets, which is logically completely independent from the communication network employed by the corresponding security application layer. On the other hand, from a structural design point of view, there is a clear system separation into two basic components: a quantum key generation one, realized by a QKD link, i.e. a pair of QKD devices connected by quantum channel, and a classical secret maintenance and distribution one, realized by a dedicated "node device" with a universal interface between these two components. The main deliverable of SECOQC is the implementation and operation of a test network in Vienna and lower Austria. The paper focuses on the design approach developed in SECOQC and the implementation status of the prototype.
A quantum key distribution (QKD) network is an infrastructure that allows the realization of the key distribution cryptographic primitive over long distances and at high rates with information-theoretic security.In this work, we consider QKD networks based on trusted repeaters from a topology viewpoint, and present a set of analytical models that can be used to optimize the spatial distribution of QKD devices and nodes in specific network configurations in order to guarantee a certain level of service to network users, at a minimum cost.We give details on new methods and original results regarding such cost minimization arguments applied to QKD networks.These results are likely to become of high importance when the deployment of QKD networks will be addressed by future quantum telecommunication operators.They will therefore have a strong impact on the design and requirements of the next generation of QKD devices.
Quantum key distribution (QKD) constitutes a symmetric secret key negotiation protocol capable of maintaining information-theoretic security. Given the recent advances in QKD networks, they have evolved from academic research to some preliminary applications. A QKD network consists of two or more QKD nodes interconnected by optical fiber or free space links. The secret keys are negotiated between any pair of QKD nodes, and then they can be delivered to multiple users in various areas for ensuring long-term protection and forward secrecy. We commence by introducing the QKD basics, followed by reviewing the development of QKD networks and their implementation in practice. Subsequently, we describe the general QKD network architecture, its elements, as well as its interfaces and protocols. Next, we provide an in-depth overview of the associated physical layer and network layer solutions, followed by the standardization efforts as well as the application scenarios associated with QKD networks. Finally, we discuss the potential future research directions and provide design guidelines for QKD networks.
Quantum Key Distribution (QKD) networks allow multiple users to generate and share secret quantum keys with unconditional security. Although many schemes of QKD networks have been presented, they are only concentrated on the system realization and physical implementations. For the complete practical quantum network, a succinct theoretic model that systematically describes the working processes from physical schemes to key process protocols, from network topology to key management, and from quantum communication to classical communication is still absent. One would hope that research and experience have shown that there are certain succinct model in the design of communication network. With demonstration of the different QKD links and the four primary types of quantum networks including probability multiplexing, wavelength multiplexing, time multiplexing and quantum multiplexing, we suggest a layer model for QKD networks which will be compatible with different implementations and protocols. We divide it into four main layers by their functional independency while defining each layer's services and responsibilities in detail, orderly named quantum links layer, quantum networks layer, quantum key distribution protocols process layer, and keys management layer. It will be helpful for the systematic design and construction of real QKD networks.