Secure keys in optical networks integrated with quantum key distribution (QKD) are virtualized to construct secure VONs (SVONs). The QKD-integrated optical network virtualization architecture and SVON embedding algorithm are proposed.
With the development of optical networks integrated with quantum key distribution (QKD), the security of data transmission in virtual optical network has attracted increasing attention from researchers. In the existing security virtual optical network embedding (VONE) over elastic optical networks (EONs) integrated with QKD, the shortest path algorithm is used to reduce the consumption of security keys. In this paper, the concept and theory of computation and key distribution equilibrium (CKDE) is proposed. An integer linear programming model and a heuristic algorithm based on CKDE are presented for VONE over EONs integrated with QKD, where a node rank based on CKDE is introduced and the minimal element method is used to find a solution of VONE. Simulation experiments demonstrate that the proposed model and algorithm outperform existing approaches in terms of acceptance ratios, system revenues, and resource utilization. Specifically, the proposed algorithm achieves improvements of at least 35.1% in acceptance ratios and 49.6% in both system revenues and key resource utilizations compared to other heuristic algorithms.
In the Internet Age, optical networks are vulnerable to numerous cyberattacks, and conventional key distribution methods suffer from the increased computational power. QKD can distribute information-theoretically secure secret keys between two parties based on the principles of quantum mechanics. Integrating QKD into optical networks can leverage existing fiber infrastructures with wavelength division multiplexing for the practical deployment of secret keys, and accordingly employ the secret keys for optical-layer security enhancement. Then, how to efficiently deploy and employ secret keys over QKD-integrated optical networks are emerging as two challenges. This article proposes a framework of key as a service (KaaS, i.e., providing secret keys as a service in a timely and accurate manner to satisfy the security requirements) to jointly overcome these two challenges. To enable the typical functions (i.e., secret-key deployment and employment) in KaaS, two secret-key virtualization steps, that is, key pool (KP) assembly and virtual key pool (VKP) assembly, are introduced. Also, we illustrate a new QKD-integrated optical network architecture from a holistic view, where the control layer is implemented by software defined networking for efficient network management. A time-shared KP assembly strategy and an on-demand VKP assembly strategy are presented for KaaS implementation. The success probabilities of KP assembly and VKP assembly are defined to evaluate the benefits of KaaS for efficiently deploying and employing secret keys as well as for security enhancement over QKD-integrated optical networks.
Secure networks composed of optical networks and quantum key distribution (QKD) are considered in this paper. A network layer structure is defined to focus on issues important with respect to the QKD network layer that controls QKD links and supplies a secure key for message transmission. A multiple-user QKD network layer can be constructed with timing synchronization, secure key sharing between indirectly connected nodes with switched QKD systems and key relays, and key management to control the volume of key generation and supply in response to the demand from optical network nodes.
Similar to the Internet, Quantum Key Distribution (QKD) networks typically have diverse participants, such as users, operators, and infrastructure builders. In order to achieve loose functional coupling, a multi-layer structure is frequently indispensable. Nevertheless, once the architecture of the QKD network is designed, further expansion and modification prove to be extremely challenging. To address this issue, a QKD network architecture based on virtual Quantum Key Distribution (VQKD) is proposed. In this architecture, all devices at both ends that are capable of providing consistent quantum keys are regarded as a pair of quantum key distribution devices. The bottom layer is real QKD, while all other layers are virtual QKD. All real and virtual QKDs provide quantum keys to the upper layers. This network structure is an iterative one, and theoretically, the number of layers in a quantum key distribution network can be infinitely increased based on actual needs. In this paper, we present a practical application case. This case addresses the actual needs of network operators, network service providers, and those involved in user network construction. We have designed a three-layer quantum secure communication network exchange structure that is suitable for network infrastructure developers, network operators, and those involved in user network construction. Network infrastructure developers, network operators, and users can carry out network construction, network operation, and user network construction at different network layers, realizing a loosely coupled hierarchical design of quantum secure communication networks. This model can dynamically increase or decrease the number of quantum network exchange layers based on actual needs, without affecting the network exchange of quantum secure communication networks, demonstrating strong versatility and adaptability.
Optical network security is attracting increasing research interest. Currently, software defined optical network (SDON) has been proposed to increase network intelligence, which is gradually moving towards industrialization. However, new threats are emerging, e.g., control messages transferred via the control channels are vulnerable to eavesdropping and interception. Data encryption is an effective way to enhance the security of connection as well as control messages transferred in SDON. Noticeably, quantum key distribution (QKD) is being considered as a secure mechanism to provision keys for confidential data encryption, which is a potential technique to protect communications from security attacks in SDONs. How to utilize QKD to enhance the SDON security is emerging as a new issue. This paper proposes a novel QKD-enabled SDON architecture, and discusses some open issues and challenges such as resource allocation, security level, trusted repeater node placement and resiliency under such an architecture. Moreover, this paper also proposes an algorithmic solution to resource allocation issue and describes some illustrative simulation results.
Optical network security is attracting increasing research interest. Currently, software-defined optical network (SDON) has been proposed to increase network intelligence (e.g., flexibility and programmability) which is gradually moving toward industrialization. However, a variety of new threats are emerging in SDONs. Data encryption is an effective way to secure communications in SDONs. However, classical key distribution methods based on the mathematical complexity will suffer from increasing computational power and attack algorithms in the near future. Noticeably, quantum key distribution (QKD) is now being considered as a secure mechanism to provision information-theoretically secure secret keys for data encryption, which is a potential technique to protect communications from security attacks in SDONs. This chapter introduces the basic principles and enabling technologies of QKD. Based on the QKD enabling technologies, an architecture of QKD over SDONs is presented. Resource allocation problem is elaborated in detail and is classified into wavelength allocation, time-slot allocation, and secret key allocation problems in QKD over SDONs. Some open issues and challenges such as survivability, cost optimization, and key on demand (KoD) for QKD over SDONs are discussed.