Optical network security is attracting increasing research attention, as loss of confidentiality of data transferred through an optical network could impact a huge number of users and services. Data encryption is an effective way to enhance optical network security. In particular, QKD is being investigated as a secure mechanism to provide keys for data encryption at the endpoints of an optical network. In a QKD-enabled optical network, apart from TDChs, two additional channels, called QSChs and PIChs, are required to support secure key synchronization. How to allocate network resources to QSChs, PIChs, and TDChs is emerging as a novel problem for the design of a security-guaranteed optical network. This article addresses the resource allocation problem in optical networks secured by QKD. We first discuss a possible architecture for a QKD-enabled optical network, where an SDN controller is in charge of allocating the three types of channels (TDCh, QSCh, and PICh) over different wavelengths exploiting WDM. To save wavelength resources, we propose to adopt OTDM to allocate multiple QSChs and PIChs over the same wavelength. An RWTA algorithm is designed to allocate wavelength and time slot resources for the three types of channels. Different security levels are included in the RWTA algorithm by considering different key updating periods (i.e., the period after which the secure key between two endpoints has to be updated). Illustrative simulation results show the effects of different security-level configuration schemes on resource allocation.
Optical network security is attracting increasing research attention, as loss of confidentiality of data transferred through an optical network could impact a huge number of users and services. Data encryption is an effective way to enhance optical network security. In particular, QKD is being investigated as a secure mechanism to provide keys for data encryption at the endpoints of an optical network. In a QKD-enabled optical network, apart from TDChs, two additional channels, called QSChs and PIChs, are required to support secure key synchronization. How to allocate network resources to QSChs, PIChs, and TDChs is emerging as a novel problem for the design of a security-guaranteed optical network. This article addresses the resource allocation problem in optical networks secured by QKD. We first discuss a possible architecture for a QKD-enabled optical network, where an SDN controller is in charge of allocating the three types of channels (TDCh, QSCh, and PICh) over different wavelengths exploiting WDM. To save wavelength resources, we propose to adopt OTDM to allocate multiple QSChs and PIChs over the same wavelength. An RWTA algorithm is designed to allocate wavelength and time slot resources for the three types of channels. Different security levels are included in the RWTA algorithm by considering different key updating periods (i.e., the period after which the secure key between two endpoints has to be updated). Illustrative simulation results show the effects of different security-level configuration schemes on resource allocation.
Optical network security has attracted extensive attentions recently, data encryption is an effective way to enhance the security. Unlike conventional key distribution methods, Quantum key distribution (QKD) is provably-secure. Integrating QKD into optical networks can provide a new paradigm for secure communications. In a QKD integrated optical network, besides the traditional data channels, two additional channels, called quantum-signal channels and public interaction channels, are required to support secure key. Crucially, how to optimally allocate limited wavelength resources to the three channels is emerging as a novel problem. By introducing wavelength division multiplexing (WDM) network and defining the wavelength occupancy factor, this paper designs a dynamic routing, wavelength and time-slot allocation (DRWTA) algorithm for the wavelength allocation in QKD integrated optical network. The simulation results show wavelength scale factor has an adverse effect on the resource utilization rate and the blocking probability. Furthermore, the DRWTA algorithm provides a strategy to allocate wavelength for three types of channels in QKD-WDM networks. The success probability can be improved by exploiting the DRWTA algorithm.
Data transmission with optical fiber is vulnerable to eavesdropping. Moreover, conventional key distribution technology suffers from increasing computational power and upgraded attack algorithms. To address these issues, quantum key distribution (QKD), a quantum technology that secures secret information (such as a cryptographic key) exchange between two parties, can be used to guarantee secure data transmission. Integrating QKD into existing wavelength division multiplexing optical networks has been verified through a series of experiments, which contribute to ensuring network security and saving fiber resources. This paper addresses the resource assignment problem in QKD-enabled optical networks. First, a QKD-enabled optical network architecture is introduced. A small fraction of wavelength channels are segmented into multiple time slots with optical time division multiplexing technology to construct quantum key channels (QKChs) and measuring-basis channels, and then the remaining wavelengths can construct traditional data channels. Second, a static routing, wavelength, and time-slot assignment (RWTA) strategy is proposed and verified by the integer linear programming formulation and a heuristic algorithm. In the RWTA, QKChs are assigned for service requests according to the security levels specified by relevant key-updating periods. Thus, the secret keys for data encryption can update periodically to enhance security. Simulation results indicate that there is a trade-off between security (i.e., security levels and security-level types) and resource utilization.
Currently, with the continuous advancement of network and communication technology, the amount of data carried by the optical network is very huge. The security of high-speed and large-capacity information in optical networks has attracted more and more attention. Quantum key distribution (QKD) provides information-theoretic security based on the laws of quantum mechanics. Introducing QKD into an optical network can greatly improve the security of the optical network. In order to reduce the cost of deployment on QKD infrastructure, quantum signals in QKD and classical signals in optical networks are multiplexed in the same fiber by wavelength-division manner. Moreover, due to the limited wavelength resources in an optical fiber, time-division technology is adopted to construct different kinds of channels in QKD system for efficient utilization of wavelength resources. Under such situation, how to satisfy the security requirements of service requests and complete the efficient scheduling of multi-dimensional resources, i.e., wavelengths and timeslots, is a challenging problem. This paper addresses this problem by considering multi-dimensional routing, wavelength, and timeslot allocation (RWTA) in short-distance quantum key distribution optical networks (QKD-ON), in which any two nodes can directly establish a quantum channel, and the maximum distance between any two nodes is less than the distance that can carry out point-to-point quantum key distribution process. While accommodating services with security requirements in QKD optical networks, to avoid the wavelength time-slot fragmentation caused by the constraints of wavelength consistency and time-slot continuity, we propose a time-window-based security orchestration strategy as well as relative-loss of time continuous compactness based RWTA strategy. We conducted the simulations under various scenarios, e.g., different key updating periods and different distributions on wavelength resources, etc., and the results show that the proposed strategy can achieve better performance compared with the baselines in terms of key success rate, key-updating delay, and blocking probability.
Abstract Quantum key distribution (QKD) optical networks can provide more secure communications. However, with the increase of the QKD path requests and key updates, network blocking problems will become severe. The blocking problems in the network can become more severe because each fiber link has limited resources (such as wavelengths and time slots). In addition, QKD optical networks are also affected by external disturbances such as data interception and eavesdropping, resulting in inefficient network communication. In this paper, we exploit the idea of protection path to enhance the anti-interference ability of QKD optical network. By introducing the concept of security metric, we propose a routing wavelength and time slot allocation algorithm (RWTA) based on protection path, which can lessen the blocking problem of QKD optical network. According to simulation analysis, the security-metric-based RWTA algorithm (SM-RWTA) proposed in this paper can substantially improve the success rate of security key (SK) update and significantly reduce the blocking rate of the network. It can also improve the utilization rate of resources such as wavelengths and time slots. Compared with the non-security-metric-based RWTA algorithm (NSM-RWTA), our algorithm is robust and can enhance the anti-interference ability and security of QKD optical networks.
Resource allocation is the method of providing various available resources to the users in a network. Optical network is the method of the transmission of data through established equipment of optical fiber cables. Optical fibre cable used by different cable industries for communication between digital signal, telecommunication and data cable signals. Because of the low interfering, optical fibre cable has wide variety of applications over copper cable. The previously used techniques, described the distribution of the resource issue over the network for the three kinds of the stations and solution algorithms were proposed to solve the problem. First approach is representing the quantum key distribution that enables two parties to share a random key over the network .Also, different security phases have been demonstrated by updating multiple keys. Proposed algorithm decrease the rate of loss of data during the communication in optical networks. An approach is implemented namely route wavelength and time period arrangement (RWTA) algorithm to assign properties for three kinds of the stations and examine the results based on various structures. The proposed approach is based on two security mechanisms, which are in terms of the quantum key distributions and OSTBC encoding process, to improve the authentication in the network. In addition, quantum key distribution and OSTBC encoding is processed to evaluate the performance of the Quality service channel (QSC) and time division channels (TDC). Finally, it was determined that there is low probability of blocked data and less chances of the key failure in the network.
With the rapid development of optical networks and the increasing amount of data transmission, information security has become a critical concern. Quantum key distribution can theoretically provide security for data encryption key distribution, and its integration into optical networks can enhance overall security. To reduce deployment costs, Wavelength Division Multiplexing is used to combine quantum and classical signals. However, limited wavelength resource necessitate the use of Time Division Multiplexing. How to efficiently allocate the multidimensional resources, such as wavelength, time slots, and encryption keys, has become a key issue in the design of secure optical networks. This paper proposes a Security-Level-based routing, wavelength, and time slot assignment strategy for optical networks. To evaluate the effectiveness of the proposed strategy, we introduce a new metric called Average Key Consumption. This metric allows us to assess key usage efficiency and network performance. We analyze the impact of different Average Key Consumption values on network resource allocation. Simulation results demonstrate that the Security-Level-based routing, wavelength, and time slot assignment strategy outperforms other strategies in handling high security demands.