ITM Web of Conferences

A Quantum Cryptography Communication Network Based on Software Defined Network

Hongliang Zhang, Dongxiao Quan, Changhua Zhu, Zhigang Li

Published Jan 1, 2018• 8 citations

Abstract

With the development of the Internet, information security has attracted great attention in today’s society, and quantum cryptography communication network based on quantum key distribution (QKD) is a very important part of this field, since the quantum key distribution combined with one-time-pad encryption scheme can guarantee the unconditional security of the information. The secret key generated by quantum key distribution protocols is a very valuable resource, so making full use of key resources is particularly important. Software definition network (SDN) is a new type of network architecture, and it separates the control plane and the data plane of network devices through OpenFlow technology, thus it realizes the flexible control of the network resources. In this paper, a quantum cryptography communication network model based on SDN is proposed to realize the flexible control of quantum key resources in the whole cryptography communication network. Moreover, we propose a routing algorithm which takes into account both the hops and the end-to-end availible keys, so that the secret key generated by QKD can be used effectively. We also simulate this quantum cryptography communication network, and the result shows that based on SDN and the proposed routing algorithm the performance of this network is improved since the effective use of the quantum key resources.

DOI: 10.1051/itmconf/20181701008

Related papers

Quantum-Key-Distribution (QKD) Networks Enabled by Software-Defined Networks (SDN)

Hua Wang, Yongli Zhao, Avishek Nag

As an important support for quantum communication, quantum key distribution (QKD) networks have achieved a relatively mature level of development, and they face higher requirements for multi-user end-to-end networking capabilities. Thus, QKD networks need an effective management plane to control and coordinate with the QKD resources. As a promising technology, software defined networking (SDN) can separate the control and management of QKD networks from the actual forwarding of the quantum keys. This paper systematically introduces QKD networks enabled by SDN, by elaborating on its overall architecture, related interfaces, and protocols. Then, three-use cases are provided as important paradigms with their corresponding schemes and simulation performances.

Applied SciencesMay 21, 201932 citations

Network Slicing-Based and QoS-Oriented Software-Defined Quantum Key Distribution Network

Xingqian Wang, Tianyue Chen, Yue Du +2 more

Quantum cryptography provides an effective approach to address the security challenges in communication network posed by Shor's factorization, Grover's search, and other new algorithms. We propose an architecture of QoS-oriented quantum key distribution network (QKDN) based on network slicing and software-defined network (SDN). The network slices with different QoS levels can be constructed according to users' requirements. The throughput, latency and other QoS metrics requirement can be obtained by allowing for centralized control management and more flexible resource allocation using the scheme of SDN. Simulation results show that slicing scheme in QKDN can flexibly orchestrate resources to meet QoS of the services and can also be easily integrated with existing communication networks.

International Conference on Ubiquitous Communication (Ucom)Jul 7, 20231 citation

Scalable Quantum Key Distribution via Software-Defined Network over USNET

Hardeer Kaur, Jai Sukh Paul Singh

The ability to protect information has always played an important role in the evolution of civilizations, and even in the history of mankind as a whole. Safe and reliable communications have become an essential component of people’s lives in the era of modern digital technologies, when all spheres and areas of activity, from defense and government to business and social communications, are unthinkable without real-time data exchange. Classical methods of cryptographic protection have long been used to ensure the security of data transmission, but with the explosive growth in computing power and the emerging development of quantum computers, many traditional solutions have become vulnerable. Quantum Key Distribution (QKD) is a popular research area at the moment, due to its use of the laws of quantum mechanics, and thus it is possible to provide a completely secure level of encryption. But traditional quantum communication protocols have their limitations, including low key generation rates, scalability problems in large networks, and vulnerabilities to various forms of cyberattacks in the network layer. Therefore, in this work we propose a new adaptive quantum key distribution algorithm using software-defined networking (SDN) technology. The main idea of the proposed approach is to introduce some level of redundancy in the key generation stage, which increases the throughput, robustness, and adaptability of multi-node quantum networks. In addition, the SDN control layer allows dynamic routing and resource management and quick response to changes in the network state, making the system more resistant to denial-of-service and eavesdropping attacks. Evaluating our solution in comparison with BB84, we show that the new algorithm provides better performance without losing its security level, making the work a step towards creating a working quantum-secure communication system.

International Symposium on Advanced Electrical and Communication Technologies (ISAECT)Dec 18, 20250 citations

Enabling Quantum Key Distribution Networks via Software-Defined Networking

Alejandro Aguado, Vı́ctor López, Juan P. Brito +3 more

Quantum Key Distribution (QKD) is one of the major cryptographic solutions to tackle the security threats associated to future computational advances, in particular those coming from quantum computing. At the most simple level, QKD can be seen as a highly secure source of symmetric secret keys in two separated places. Nonetheless, the lack of standardization and the strong requirements from the physical layer makes this technology very difficult to integrate in existing infrastructure.However, the success of QKD networks radically depends on the degree in which they can be adopted in the existing infrastructure, and it is a must that it happens via standard protocols and interfaces. The flexibility of novel network paradigms, like Software-Defined Networking (SDN), allows for a faster adoption of new concepts, hardware and services in telecommunications networks. This paradigm can be used for quantum communications, allowing for a fast and scalable deployment of quantum technologies and services in the telecommunications network to a degree that was simply impossible in previous schemes, where the different network devices and their connections should be modified, one by one, to create a quantum communications channel.This tutorial provides an introduction to existing QKD technologies and networks, followed by a descriptive explanation on how SDN principles can be utilized to abstract and integrate QKD systems as part of the network management. This will help to reduce the time-to-market for quantum technologies, and also will make quantum cryptography available as a service to be capitalized by the network operators.

International Conference on Optical Network Design and Modeling (ONDM)May 1, 202032 citations

QKD Protocol To Enhance The Southbound Security Of Software Defined Network

Min Nie, Hui Xie, Rongyu Wei

The combination of quantum encryption and internet technology has become an inevitable development trend. To improve the security performance of communication between control layer and forwarding layer in the software defined network (SDN), we propose a security scheme based on quantum encryption technology. The proposed scheme can realize two-way authentication and quantum key distribution between the controller and the switch. The security performance analysis shows that this scheme can effectively prevent eavesdropping attacks, man-in-the-middle attacks and replay attacks. It effectively improves the southbound security of SDN and provides a theoretical basis for the healthy development of SDN.

International Conference on Computer Engineering and Application (ICCEA)Mar 1, 20202 citations

Improved Security of SDN based on Hybrid Quantum Key Distribution Protocol

Suadad S. Mahdi, Alharith A. Abdullah

Network programming provides new security solutions for traditional networks. However, software-defined networking still suffers from security issues. An important one is the weaknesses related to the OpenFlow channel between network devices and controller, as the network can be attacked via the OpenFlow channel and exploit communications with the control plane. Our work proposes a solution to provide adequate security for OpenFlow messages in software-defined networks by using a hybrid key consisting of classical and quantum key distribution protocols to provide double security depending on the quantum's computational complexity and physical properties. To achieve this goal, the hybrid key is used with transport layer security protocol to provide confidentiality, integrity and quantum authentication to secure software-defined network connections between the control and data planes. We experimentally based on the SDN-testbed to show the workflow of exchanging quantum and classical keys between the control plane and network devices in the data plane, and our results showed the effectiveness of the hybrid key to enhance the security of the transport layer security protocol. Thereby achieving adequate security for controller communications with the data plane against classical and quantum computer attacks by conducting security analysis and clarifying the efficiency of the proposal in terms of the average required time.

Mar 15, 202214 citations