© 2026 Aqora Quantum S.A.S.

Terms Privacy Legal Notice

Optics Express

Key on demand (KoD) for software-defined optical networks secured by quantum key distribution (QKD)

Yuan Cao, Yongli Zhao, Carlos Colman-Meixner, Xiaosong Yu, Jie Zhang

Published Oct 16, 2017• 104 citations

Abstract

Software-defined optical networking (SDON) will become the next generation optical network architecture. However, the optical layer and control layer of SDON are vulnerable to cyberattacks. While, data encryption is an effective method to minimize the negative effects of cyberattacks, secure key interchange is its major challenge which can be addressed by the quantum key distribution (QKD) technique. Hence, in this paper we discuss the integration of QKD with WDM optical networks to secure the SDON architecture by introducing a novel key on demand (KoD) scheme which is enabled by a novel routing, wavelength and key assignment (RWKA) algorithm. The QKD over SDON with KoD model follows two steps to provide security: i) quantum key pools (QKPs) construction for securing the control channels (CChs) and data channels (DChs); ii) the KoD scheme uses RWKA algorithm to allocate and update secret keys for different security requirements. To test our model, we define a security probability index which measures the security gain in CChs and DChs. Simulation results indicate that the security performance of CChs and DChs can be enhanced by provisioning sufficient secret keys in QKPs and performing key-updating considering potential cyberattacks. Also, KoD is beneficial to achieve a positive balance between security requirements and key resource usage.

DOI: 10.1364/oe.25.026453

Related papers

Software defined optical networks secured by quantum key distribution (QKD)

Yongli Zhao, Yuan Cao, Xiaosong Yu +1 more

Optical network security is attracting increasing research interest. Currently, software defined optical network (SDON) has been proposed to increase network intelligence, which is gradually moving towards industrialization. However, new threats are emerging, e.g., control messages transferred via the control channels are vulnerable to eavesdropping and interception. Data encryption is an effective way to enhance the security of connection as well as control messages transferred in SDON. Noticeably, quantum key distribution (QKD) is being considered as a secure mechanism to provision keys for confidential data encryption, which is a potential technique to protect communications from security attacks in SDONs. How to utilize QKD to enhance the SDON security is emerging as a new issue. This paper proposes a novel QKD-enabled SDON architecture, and discusses some open issues and challenges such as resource allocation, security level, trusted repeater node placement and resiliency under such an architecture. Moreover, this paper also proposes an algorithmic solution to resource allocation issue and describes some illustrative simulation results.

IEEE/CIC International Conference on Communications in China (ICCC)•Oct 1, 2017•4 citations

Quantum Key Distribution (QKD) over Software-Defined Optical Networks

Yongli Zhao, Yuan Cao, Xiaosong Yu +1 more

Optical network security is attracting increasing research interest. Currently, software-defined optical network (SDON) has been proposed to increase network intelligence (e.g., flexibility and programmability) which is gradually moving toward industrialization. However, a variety of new threats are emerging in SDONs. Data encryption is an effective way to secure communications in SDONs. However, classical key distribution methods based on the mathematical complexity will suffer from increasing computational power and attack algorithms in the near future. Noticeably, quantum key distribution (QKD) is now being considered as a secure mechanism to provision information-theoretically secure secret keys for data encryption, which is a potential technique to protect communications from security attacks in SDONs. This chapter introduces the basic principles and enabling technologies of QKD. Based on the QKD enabling technologies, an architecture of QKD over SDONs is presented. Resource allocation problem is elaborated in detail and is classified into wavelength allocation, time-slot allocation, and secret key allocation problems in QKD over SDONs. Some open issues and challenges such as survivability, cost optimization, and key on demand (KoD) for QKD over SDONs are discussed.

IntechOpen eBooks•Feb 7, 2019•18 citations

Resource Assignment Strategy in Optical Networks Integrated With Quantum Key Distribution

Yuan Cao, Yongli Zhao, Xiaosong Yu +1 more

Data transmission with optical fiber is vulnerable to eavesdropping. Moreover, conventional key distribution technology suffers from increasing computational power and upgraded attack algorithms. To address these issues, quantum key distribution (QKD), a quantum technology that secures secret information (such as a cryptographic key) exchange between two parties, can be used to guarantee secure data transmission. Integrating QKD into existing wavelength division multiplexing optical networks has been verified through a series of experiments, which contribute to ensuring network security and saving fiber resources. This paper addresses the resource assignment problem in QKD-enabled optical networks. First, a QKD-enabled optical network architecture is introduced. A small fraction of wavelength channels are segmented into multiple time slots with optical time division multiplexing technology to construct quantum key channels (QKChs) and measuring-basis channels, and then the remaining wavelengths can construct traditional data channels. Second, a static routing, wavelength, and time-slot assignment (RWTA) strategy is proposed and verified by the integer linear programming formulation and a heuristic algorithm. In the RWTA, QKChs are assigned for service requests according to the security levels specified by relevant key-updating periods. Thus, the secret keys for data encryption can update periodically to enhance security. Simulation results indicate that there is a trade-off between security (i.e., security levels and security-level types) and resource utilization.

Journal of Optical Communications and Networking•Oct 16, 2017•77 citations

Resource allocation in software-defined optical networks secured by quantum key distribution

Yuan Cao, Yongli Zhao, Xiaosong Yu +4 more

A resource allocation scheme consisting of joint assignment of routing, wavelength and time-slot is proposed to construct different channels in software-defined optical networks secured by quantum key distribution (QKD). Security level is considered by key-updating period.

Opto-Electronics and Communications Conference (OECC)•Jul 1, 2017•8 citations

Experimental Demonstration of End-to-End Key on Demand Service Provisioning over Quantum Key Distribution Networks with Software Defined Networking

Yuan Cao, Yongli Zhao, Xiaosong Yu +4 more

We experimentally demonstrate end-to-end key on demand (KoD) service provisioning over quantum key distribution networks with software defined networking (SDN), achieving efficient and flexible on-demand secret-key rate allocation for end-to-end data security.

Optical Fiber Communication Conference•Jan 1, 2019•7 citations

KaaS: Key as a Service over Quantum Key Distribution Integrated Optical Networks

Yuan Cao, Yongli Zhao, Jianquan Wang +3 more

In the Internet Age, optical networks are vulnerable to numerous cyberattacks, and conventional key distribution methods suffer from the increased computational power. QKD can distribute information-theoretically secure secret keys between two parties based on the principles of quantum mechanics. Integrating QKD into optical networks can leverage existing fiber infrastructures with wavelength division multiplexing for the practical deployment of secret keys, and accordingly employ the secret keys for optical-layer security enhancement. Then, how to efficiently deploy and employ secret keys over QKD-integrated optical networks are emerging as two challenges. This article proposes a framework of key as a service (KaaS, i.e., providing secret keys as a service in a timely and accurate manner to satisfy the security requirements) to jointly overcome these two challenges. To enable the typical functions (i.e., secret-key deployment and employment) in KaaS, two secret-key virtualization steps, that is, key pool (KP) assembly and virtual key pool (VKP) assembly, are introduced. Also, we illustrate a new QKD-integrated optical network architecture from a holistic view, where the control layer is implemented by software defined networking for efficient network management. A time-shared KP assembly strategy and an on-demand VKP assembly strategy are presented for KaaS implementation. The success probabilities of KP assembly and VKP assembly are defined to evaluate the benefits of KaaS for efficiently deploying and employing secret keys as well as for security enhancement over QKD-integrated optical networks.

IEEE Communications Magazine•Mar 8, 2019•71 citations

Software-defined optical networking (SDON) will become the next generation optical network architecture. However, the optical layer and control layer of SDON are vulnerable to cyberattacks. While, data encryption is an effective method to minimize the negative effects of cyberattacks, secure key interchange is its major challenge which can be addressed by the quantum key distribution (QKD) technique. Hence, in this paper we discuss the integration of QKD with WDM optical networks to secure the SDON architecture by introducing a novel key on demand (KoD) scheme which is enabled by a novel routing, wavelength and key assignment (RWKA) algorithm. The QKD over SDON with KoD model follows two steps to provide security: i) quantum key pools (QKPs) construction for securing the control channels (CChs) and data channels (DChs); ii) the KoD scheme uses RWKA algorithm to allocate and update secret keys for different security requirements. To test our model, we define a security probability index which measures the security gain in CChs and DChs. Simulation results indicate that the security performance of CChs and DChs can be enhanced by provisioning sufficient secret keys in QKPs and performing key-updating considering potential cyberattacks. Also, KoD is beneficial to achieve a positive balance between security requirements and key resource usage.

Optical network security is attracting increasing research interest. Currently, software defined optical network (SDON) has been proposed to increase network intelligence, which is gradually moving towards industrialization. However, new threats are emerging, e.g., control messages transferred via the control channels are vulnerable to eavesdropping and interception. Data encryption is an effective way to enhance the security of connection as well as control messages transferred in SDON. Noticeably, quantum key distribution (QKD) is being considered as a secure mechanism to provision keys for confidential data encryption, which is a potential technique to protect communications from security attacks in SDONs. How to utilize QKD to enhance the SDON security is emerging as a new issue. This paper proposes a novel QKD-enabled SDON architecture, and discusses some open issues and challenges such as resource allocation, security level, trusted repeater node placement and resiliency under such an architecture. Moreover, this paper also proposes an algorithmic solution to resource allocation issue and describes some illustrative simulation results.

Optical network security is attracting increasing research interest. Currently, software-defined optical network (SDON) has been proposed to increase network intelligence (e.g., flexibility and programmability) which is gradually moving toward industrialization. However, a variety of new threats are emerging in SDONs. Data encryption is an effective way to secure communications in SDONs. However, classical key distribution methods based on the mathematical complexity will suffer from increasing computational power and attack algorithms in the near future. Noticeably, quantum key distribution (QKD) is now being considered as a secure mechanism to provision information-theoretically secure secret keys for data encryption, which is a potential technique to protect communications from security attacks in SDONs. This chapter introduces the basic principles and enabling technologies of QKD. Based on the QKD enabling technologies, an architecture of QKD over SDONs is presented. Resource allocation problem is elaborated in detail and is classified into wavelength allocation, time-slot allocation, and secret key allocation problems in QKD over SDONs. Some open issues and challenges such as survivability, cost optimization, and key on demand (KoD) for QKD over SDONs are discussed.

Data transmission with optical fiber is vulnerable to eavesdropping. Moreover, conventional key distribution technology suffers from increasing computational power and upgraded attack algorithms. To address these issues, quantum key distribution (QKD), a quantum technology that secures secret information (such as a cryptographic key) exchange between two parties, can be used to guarantee secure data transmission. Integrating QKD into existing wavelength division multiplexing optical networks has been verified through a series of experiments, which contribute to ensuring network security and saving fiber resources. This paper addresses the resource assignment problem in QKD-enabled optical networks. First, a QKD-enabled optical network architecture is introduced. A small fraction of wavelength channels are segmented into multiple time slots with optical time division multiplexing technology to construct quantum key channels (QKChs) and measuring-basis channels, and then the remaining wavelengths can construct traditional data channels. Second, a static routing, wavelength, and time-slot assignment (RWTA) strategy is proposed and verified by the integer linear programming formulation and a heuristic algorithm. In the RWTA, QKChs are assigned for service requests according to the security levels specified by relevant key-updating periods. Thus, the secret keys for data encryption can update periodically to enhance security. Simulation results indicate that there is a trade-off between security (i.e., security levels and security-level types) and resource utilization.

In the Internet Age, optical networks are vulnerable to numerous cyberattacks, and conventional key distribution methods suffer from the increased computational power. QKD can distribute information-theoretically secure secret keys between two parties based on the principles of quantum mechanics. Integrating QKD into optical networks can leverage existing fiber infrastructures with wavelength division multiplexing for the practical deployment of secret keys, and accordingly employ the secret keys for optical-layer security enhancement. Then, how to efficiently deploy and employ secret keys over QKD-integrated optical networks are emerging as two challenges. This article proposes a framework of key as a service (KaaS, i.e., providing secret keys as a service in a timely and accurate manner to satisfy the security requirements) to jointly overcome these two challenges. To enable the typical functions (i.e., secret-key deployment and employment) in KaaS, two secret-key virtualization steps, that is, key pool (KP) assembly and virtual key pool (VKP) assembly, are introduced. Also, we illustrate a new QKD-integrated optical network architecture from a holistic view, where the control layer is implemented by software defined networking for efficient network management. A time-shared KP assembly strategy and an on-demand VKP assembly strategy are presented for KaaS implementation. The success probabilities of KP assembly and VKP assembly are defined to evaluate the benefits of KaaS for efficiently deploying and employing secret keys as well as for security enhancement over QKD-integrated optical networks.