Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Optical Fiber Communication Conference

Experimental Demonstration of End-to-End Key on Demand Service Provisioning over Quantum Key Distribution Networks with Software Defined Networking

Yuan Cao, Yongli Zhao, Xiaosong Yu, Lijie Cheng, Ziqin Li, Guojun Liu, Jie Zhang

Published Jan 1, 2019• 7 citations
Publisher

Abstract

We experimentally demonstrate end-to-end key on demand (KoD) service provisioning over quantum key distribution networks with software defined networking (SDN), achieving efficient and flexible on-demand secret-key rate allocation for end-to-end data security.
DOI
10.1364/ofc.2019.th1g.4

Related papers

Multi-tenant provisioning over software defined networking enabled metropolitan area quantum key distribution networks

Yuan Cao, Yongli Zhao, Xiaosong Yu +1 more

Quantum key distribution (QKD) has potential to provide long-term security for communications across the Internet. As security-hungry applications dramatically rise nowadays, a growing number of QKD networks are promising to be deployed in the immediate future. Nevertheless, a high-security-demand institution (e.g., a bank) needs to pay a high price to deploy its dedicated QKD network, while a cost-effective way of overcoming this challenge is to make multiple tenants share a QKD network. Each tenant represents a high-security-demand institution and can obtain secret keys on demand from the QKD network infrastructure for security purposes. Hence, how to achieve efficient and flexible multi-tenant provisioning over a QKD network becomes a crucial problem. This work introduces software defined networking (SDN) to address this problem. We experimentally demonstrate multi-tenant provisioning (including tenant establishment, adjustment, and deletion) over SDN-enabled metropolitan area QKD networks. A SDN-enabled metropolitan area QKD network architecture is introduced. We present a workflow, protocol extensions, and an on-demand secret-key resource allocation strategy for multi-tenant provisioning, which are all demonstrated by establishing an experimental testbed in the lab. Experimental results verify the effectiveness and flexibility of our SDN-based approaches for multi-tenant provisioning over metropolitan area QKD networks. Moreover, we conduct the simulation and discover the ways of improving the success probability of multi-tenant provisioning over metropolitan area QKD networks.

Journal of the Optical Society of America B•Jan 14, 2019•23 citations

SDQaaS: software defined networking for quantum key distribution as a service

Yuan Cao, Yongli Zhao, Jianquan Wang +3 more

Quantum key distribution (QKD) holds the potential of providing long-term integrity and confidentiality for data and communications. Currently, many fiber-based QKD systems have been commercialized and several QKD networks have been deployed. Given the high cost and complexity of QKD network deployment, QKD as a service (QaaS) becomes a promising pattern for future QKD networks. The QaaS concept is that multiple users can apply for QKD services to obtain their required secret-key rates (SKRs) from the same QKD network infrastructure instead of deploying their dedicated QKD networks. Accordingly, how to provide efficient and flexible QaaS for fulfilling the SKR requirements of multiple users over a QKD network infrastructure becomes a new challenge. This study introduces the software defined networking (SDN) technique to overcome this challenge, since SDN can add flexibility together with efficient QKD network management. A new framework of SDN for QaaS (SDQaaS) is proposed, where the QaaS functions are developed in the SDN controller. We present the protocol extension, intercommunication workflow, and routing and SKR assignment strategy for QaaS implementation in the SDQaaS framework. We also establish a SDQaaS experimental testbed and perform the numerical simulation to verify our presented approaches. Experimental results demonstrate that our presented approaches can achieve efficient and flexible QaaS over the QKD network. Moreover, simulation results indicate that the success probability of QKD service requests can be increased via lowering the flexibility of SKR requirements for QKD service creation, sacrificing more cost to produce higher SKR over the QKD network, or gradually reducing SKR requirements with the modification of QKD service.

Optics Express•Feb 25, 2019•49 citations

Key on demand (KoD) for software-defined optical networks secured by quantum key distribution (QKD)

Yuan Cao, Yongli Zhao, Carlos Colman-Meixner +2 more

Software-defined optical networking (SDON) will become the next generation optical network architecture. However, the optical layer and control layer of SDON are vulnerable to cyberattacks. While, data encryption is an effective method to minimize the negative effects of cyberattacks, secure key interchange is its major challenge which can be addressed by the quantum key distribution (QKD) technique. Hence, in this paper we discuss the integration of QKD with WDM optical networks to secure the SDON architecture by introducing a novel key on demand (KoD) scheme which is enabled by a novel routing, wavelength and key assignment (RWKA) algorithm. The QKD over SDON with KoD model follows two steps to provide security: i) quantum key pools (QKPs) construction for securing the control channels (CChs) and data channels (DChs); ii) the KoD scheme uses RWKA algorithm to allocate and update secret keys for different security requirements. To test our model, we define a security probability index which measures the security gain in CChs and DChs. Simulation results indicate that the security performance of CChs and DChs can be enhanced by provisioning sufficient secret keys in QKPs and performing key-updating considering potential cyberattacks. Also, KoD is beneficial to achieve a positive balance between security requirements and key resource usage.

Optics Express•Oct 16, 2017•104 citations

Quantum Key Distribution (QKD) over Software-Defined Optical Networks

Yongli Zhao, Yuan Cao, Xiaosong Yu +1 more

Optical network security is attracting increasing research interest. Currently, software-defined optical network (SDON) has been proposed to increase network intelligence (e.g., flexibility and programmability) which is gradually moving toward industrialization. However, a variety of new threats are emerging in SDONs. Data encryption is an effective way to secure communications in SDONs. However, classical key distribution methods based on the mathematical complexity will suffer from increasing computational power and attack algorithms in the near future. Noticeably, quantum key distribution (QKD) is now being considered as a secure mechanism to provision information-theoretically secure secret keys for data encryption, which is a potential technique to protect communications from security attacks in SDONs. This chapter introduces the basic principles and enabling technologies of QKD. Based on the QKD enabling technologies, an architecture of QKD over SDONs is presented. Resource allocation problem is elaborated in detail and is classified into wavelength allocation, time-slot allocation, and secret key allocation problems in QKD over SDONs. Some open issues and challenges such as survivability, cost optimization, and key on demand (KoD) for QKD over SDONs are discussed.

IntechOpen eBooks•Feb 7, 2019•18 citations

Experimental Demonstration of DDoS Mitigation over a Quantum Key Distribution (QKD) Network Using Software Defined Networking (SDN)

E. Hugues-Salas, Foteini Ntavou, Yanni Ou +9 more

We experimentally demonstrate, for the first time, DDoS mitigation of QKD-based networks utilizing a software defined network application. Successful quantum-secured link allocation is achieved after a DDoS attack based on real-time monitoring of quantum parameters

arXiv:1802.05679•Optical Fiber Communication Conference•Jan 1, 2018•24 citations

Demonstration of Hierarchical Digital Twin-enabled End-to-End Key Provisioning in SDN-based Satellite Quantum Key Distribution Networks

Jingjing Liu, Xiaosong Yu, Yongli Zhao +1 more

Hierarchical digital twin-enabled end-to-end key provisioning in satellite quantum key distribution networks is demonstrated on our testbed. The software-defined-networking control loops are enhanced with a predictive digital twin network, resulting in a reduced service blocking rate and seconds-level latency.

Asia Communications and Photonics Conference•Nov 5, 2025•0 citations
Quantum key distribution (QKD) has potential to provide long-term security for communications across the Internet. As security-hungry applications dramatically rise nowadays, a growing number of QKD networks are promising to be deployed in the immediate future. Nevertheless, a high-security-demand institution (e.g., a bank) needs to pay a high price to deploy its dedicated QKD network, while a cost-effective way of overcoming this challenge is to make multiple tenants share a QKD network. Each tenant represents a high-security-demand institution and can obtain secret keys on demand from the QKD network infrastructure for security purposes. Hence, how to achieve efficient and flexible multi-tenant provisioning over a QKD network becomes a crucial problem. This work introduces software defined networking (SDN) to address this problem. We experimentally demonstrate multi-tenant provisioning (including tenant establishment, adjustment, and deletion) over SDN-enabled metropolitan area QKD networks. A SDN-enabled metropolitan area QKD network architecture is introduced. We present a workflow, protocol extensions, and an on-demand secret-key resource allocation strategy for multi-tenant provisioning, which are all demonstrated by establishing an experimental testbed in the lab. Experimental results verify the effectiveness and flexibility of our SDN-based approaches for multi-tenant provisioning over metropolitan area QKD networks. Moreover, we conduct the simulation and discover the ways of improving the success probability of multi-tenant provisioning over metropolitan area QKD networks.
Quantum key distribution (QKD) holds the potential of providing long-term integrity and confidentiality for data and communications. Currently, many fiber-based QKD systems have been commercialized and several QKD networks have been deployed. Given the high cost and complexity of QKD network deployment, QKD as a service (QaaS) becomes a promising pattern for future QKD networks. The QaaS concept is that multiple users can apply for QKD services to obtain their required secret-key rates (SKRs) from the same QKD network infrastructure instead of deploying their dedicated QKD networks. Accordingly, how to provide efficient and flexible QaaS for fulfilling the SKR requirements of multiple users over a QKD network infrastructure becomes a new challenge. This study introduces the software defined networking (SDN) technique to overcome this challenge, since SDN can add flexibility together with efficient QKD network management. A new framework of SDN for QaaS (SDQaaS) is proposed, where the QaaS functions are developed in the SDN controller. We present the protocol extension, intercommunication workflow, and routing and SKR assignment strategy for QaaS implementation in the SDQaaS framework. We also establish a SDQaaS experimental testbed and perform the numerical simulation to verify our presented approaches. Experimental results demonstrate that our presented approaches can achieve efficient and flexible QaaS over the QKD network. Moreover, simulation results indicate that the success probability of QKD service requests can be increased via lowering the flexibility of SKR requirements for QKD service creation, sacrificing more cost to produce higher SKR over the QKD network, or gradually reducing SKR requirements with the modification of QKD service.
Software-defined optical networking (SDON) will become the next generation optical network architecture. However, the optical layer and control layer of SDON are vulnerable to cyberattacks. While, data encryption is an effective method to minimize the negative effects of cyberattacks, secure key interchange is its major challenge which can be addressed by the quantum key distribution (QKD) technique. Hence, in this paper we discuss the integration of QKD with WDM optical networks to secure the SDON architecture by introducing a novel key on demand (KoD) scheme which is enabled by a novel routing, wavelength and key assignment (RWKA) algorithm. The QKD over SDON with KoD model follows two steps to provide security: i) quantum key pools (QKPs) construction for securing the control channels (CChs) and data channels (DChs); ii) the KoD scheme uses RWKA algorithm to allocate and update secret keys for different security requirements. To test our model, we define a security probability index which measures the security gain in CChs and DChs. Simulation results indicate that the security performance of CChs and DChs can be enhanced by provisioning sufficient secret keys in QKPs and performing key-updating considering potential cyberattacks. Also, KoD is beneficial to achieve a positive balance between security requirements and key resource usage.
Optical network security is attracting increasing research interest. Currently, software-defined optical network (SDON) has been proposed to increase network intelligence (e.g., flexibility and programmability) which is gradually moving toward industrialization. However, a variety of new threats are emerging in SDONs. Data encryption is an effective way to secure communications in SDONs. However, classical key distribution methods based on the mathematical complexity will suffer from increasing computational power and attack algorithms in the near future. Noticeably, quantum key distribution (QKD) is now being considered as a secure mechanism to provision information-theoretically secure secret keys for data encryption, which is a potential technique to protect communications from security attacks in SDONs. This chapter introduces the basic principles and enabling technologies of QKD. Based on the QKD enabling technologies, an architecture of QKD over SDONs is presented. Resource allocation problem is elaborated in detail and is classified into wavelength allocation, time-slot allocation, and secret key allocation problems in QKD over SDONs. Some open issues and challenges such as survivability, cost optimization, and key on demand (KoD) for QKD over SDONs are discussed.