As an important support for quantum communication, quantum key distribution (QKD) networks have achieved a relatively mature level of development, and they face higher requirements for multi-user end-to-end networking capabilities. Thus, QKD networks need an effective management plane to control and coordinate with the QKD resources. As a promising technology, software defined networking (SDN) can separate the control and management of QKD networks from the actual forwarding of the quantum keys. This paper systematically introduces QKD networks enabled by SDN, by elaborating on its overall architecture, related interfaces, and protocols. Then, three-use cases are provided as important paradigms with their corresponding schemes and simulation performances.
As an important support for quantum communication, quantum key distribution (QKD) networks have achieved a relatively mature level of development, and they face higher requirements for multi-user end-to-end networking capabilities. Thus, QKD networks need an effective management plane to control and coordinate with the QKD resources. As a promising technology, software defined networking (SDN) can separate the control and management of QKD networks from the actual forwarding of the quantum keys. This paper systematically introduces QKD networks enabled by SDN, by elaborating on its overall architecture, related interfaces, and protocols. Then, three-use cases are provided as important paradigms with their corresponding schemes and simulation performances.
Abstract Network management has been significantly transformed by software‐defined networking (SDN), which consolidates control and improves adaptability. As a result of this paradigm shift, security concerns have emerged concurrently. Within SDN environments, maintaining service path integrity is of utmost importance because malicious entities can exploit network flows to gain access to data, resulting in security breaches. Thus, QKD networks require a management plane that can control and manage the QKD resources. Quantum key distribution networks can be controlled and managed separately by SDN, allowing quantum key forwarding to be separated from their control and management. The paper provides an overview of QKD networks enabled by SDN, along with an overview of its architecture, interfaces, and protocols. This paper elaborates on the overall architecture and related interfaces and protocols of QKD networks assisted by SDN. Then, three important paradigms for simulation are presented using three use cases.
Quantum Key Distribution (QKD) is one of the major cryptographic solutions to tackle the security threats associated to future computational advances, in particular those coming from quantum computing. At the most simple level, QKD can be seen as a highly secure source of symmetric secret keys in two separated places. Nonetheless, the lack of standardization and the strong requirements from the physical layer makes this technology very difficult to integrate in existing infrastructure.However, the success of QKD networks radically depends on the degree in which they can be adopted in the existing infrastructure, and it is a must that it happens via standard protocols and interfaces. The flexibility of novel network paradigms, like Software-Defined Networking (SDN), allows for a faster adoption of new concepts, hardware and services in telecommunications networks. This paradigm can be used for quantum communications, allowing for a fast and scalable deployment of quantum technologies and services in the telecommunications network to a degree that was simply impossible in previous schemes, where the different network devices and their connections should be modified, one by one, to create a quantum communications channel.This tutorial provides an introduction to existing QKD technologies and networks, followed by a descriptive explanation on how SDN principles can be utilized to abstract and integrate QKD systems as part of the network management. This will help to reduce the time-to-market for quantum technologies, and also will make quantum cryptography available as a service to be capitalized by the network operators.
Software Defined Networking is increasingly seen as one of the best choices to create a Quantum Key Distribution (QKD) Network, especially if the aim is also its integration into a standard telecommunications network. The degree of flexibility afforded by this paradigm allows the creation of a network whose control mechanisms can be made aware simultaneously of the capabilities installed at the classical optical transport level as well as those at the quantum level. This is interesting not only to manage the coexistence between a classical and a quantum network sharing the same infrastructure, but also for future applications beyond QKD. This flexibility is due to a formal separation between the control and data forwarding planes. The logically centralized SDN controller gathers all relevant information monitoring the behavior of the hole network. It can act on the programmable quantum or classical devices opening many possibilities to share a common infrastructure, that can reach even the level of a single fiber strand to manage the signals that go through it in a compatible way. The same controller can use this information to manage the fundamental task of a QKD network, namely the key transport. Here we briefly report on the implementation of the SDN-QKD controller used in the Madrid testbed and its use to allow multi-vendor end-to-end key transport between any two nodes in the network.
Software-defined networking (SDN) has emerged as a promising paradigm for managing and controlling network resources efficiently. However, ensuring the security of data packets transmitted within an SDN environment remains a critical challenge. Traditional networking relies on static configurations, while SDN offers dynamic control and programmability, revolutionizing network management. In SDN, the application layer employs tools like OpenDaylight and Mininet for network management and testing. The control layer, managed by controllers such as Floodlight or ONOS, orchestrates traffic flow among switches. In the infrastructure layer, Quantum Key Distribution (QKD) with the BB84 protocol ensures secure communication. Together, these layers enable agile, programmable, and secure networking paradigms. This paper proposes integrating quantum key distribution (QKD) into SDN architectures to bolster packet-level security. By leveraging quantum entanglement and uncertainty, a secure communication channel between SDN controllers and switches is established, resilient to quantum attacks. Evaluation through simulations and real-world experiments demonstrates efficacy in mitigating security threats while minimizing overhead and latency, advancing SDN security IEEE 802.1X capabilities and leveraging quantum technologies for cybersecurity.
Up to now, Quantum Key Distribution (QKD) Network architectures were confined to relatively small networks. Some theoretical and standardization work was carried out at the framework level but its real-world application is still to be proven. Here, we present a novel architecture for QKD Networks, which is based on the SDN approach, and the components needed to scale to large networks. A well-defined functionality of a minimal set of universal modules allows to define the flow of information among them, and this specifies their interfaces and the architecture. We show that this scheme allows to reuse many already proposed interface definitions requiring just minor adaptation and facilitating the real-world deployment. A QKD Network testbed demonstration following these principles is mentioned. We further elaborate on interfaces needed to scale to very large networks, enabling orchestrations of different types or network monitoring tools. The latter have not been considered in depth up to now, but are needed to support automation and advanced capabilities, multidomain networks, slicing, heterogeneity, resource discovery, etc., which will be necessary to scale to large networks. The dynamicity of the quantum level in this scheme allows a significant reduction of the need of QKD devices on the metropolitan scale, an increased robustness of the service, improving its quality and overall network management, showing that the presented architecture is highly appropriate for telecom operators.
Software-Defined Networking (SDN) is an emerging networking paradigm that decouples the control and data plane in order to enable programmable and flexible networks, optimizing its applications and advancing computer systems. It does so through its architecture, a key part of which is a centralized network management through open interfaces that revolutionizes the way in which networks are designed and makes them more agile and versatile to the evolving needs of modern and future applications services. This also means, however, that there is now a centralized point of attack that is a major vulnerability, threatening the security of the entire network. With such an advanced network paradigm, it requires a security system that will mitigate these risks and warrant long-term security. In attempts to allow secure communications within the network, this research proposes the implementation of Quantum Key Distribution (QKD), leveraging quantum mechanics to secure the network against any computational advancements in the future. QKD is a recent cryptographic system that includes a traditional-computational channel and a physical-quantum channel to generate and distribute keys between parties. It uses the principles of quantum mechanics including entanglement and superposition to ensure that the physical layer cannot be compromised computationally. QKD provides confidentiality and privacy of information and communication. Moreover, it is resistant to technological advancements. The implications of QKD significantly enhance SDN security through its protection against attacks, efficient key distribution, reliable network orchestration, and data integrity, creating an architecture that establishes stable communication channels that are resistant to cyber threats.