Optical fibre networks are advancing rapidly to meet growing traffic demands. Security issues, including attack management, have become increasingly important for optical communication networks because of the vulnerabilities associated with tapping light from optical fibre links. Physical layer security often requires restricting access to channels and periodic inspections of link performance. In this paper, we report how quantum communication techniques can be utilized to detect a physical layer attack. We present an efficient method for monitoring the physical layer security of a high-data-rate classical optical communication network using a modulated continuous-variable quantum signal. We describe the theoretical and experimental underpinnings of this monitoring system and the monitoring accuracy for different monitored parameters. We analyse its performance for both unamplified and amplified optical links. The technique represents a novel approach for applying quantum signal processing to practical optical communication networks and compares well with classical monitoring methods. We conclude by discussing the challenges facing its practical application, its differences with respect to existing quantum key distribution methods, and its usage in future secure optical transport network planning.
Optical fibre networks are advancing rapidly to meet growing traffic demands. Security issues, including attack management, have become increasingly important for optical communication networks because of the vulnerabilities associated with tapping light from optical fibre links. Physical layer security often requires restricting access to channels and periodic inspections of link performance. In this paper, we report how quantum communication techniques can be utilized to detect a physical layer attack. We present an efficient method for monitoring the physical layer security of a high-data-rate classical optical communication network using a modulated continuous-variable quantum signal. We describe the theoretical and experimental underpinnings of this monitoring system and the monitoring accuracy for different monitored parameters. We analyse its performance for both unamplified and amplified optical links. The technique represents a novel approach for applying quantum signal processing to practical optical communication networks and compares well with classical monitoring methods. We conclude by discussing the challenges facing its practical application, its differences with respect to existing quantum key distribution methods, and its usage in future secure optical transport network planning.
Optical fibre networks are advancing rapidly to meet growing traffic demands. Security issues, including attack management, have become increasingly important for optical communication networks owing to the vulnerabilities associated with tapping light from optical fibre link. Physical layer security often requires restricting access to the channel and periodic inspection of the link performance. In this thesis, we report how quantum communication techniques can be utilized to detect a physical layer attack. We present an efficient method for monitoring the physical layer security of a high data rate classical optical communication network using a modulated continuous variable quantum signal. We describe the theoretical and experimental underpinnings of this monitoring system, and the monitoring accuracy for different monitored parameters. We analyze its performance in both unamplified and amplified optical links. The technique represents a novel approach in applying quantum signal processing to practical optical communication networks and compares well with classical monitoring methods. We also discuss the challenges in its practical application, its difference with existing quantum key distribution, and its usage in future secure optical transport network planning.
Security issues and attack management of optical communication have come increasingly important. Quantum techniques are explored to secure or protect classical communication. In this paper, we present a method for in-service optical physical layer security monitoring that has vacuum-noise level sensitivity without classical security loopholes. This quantum-based method of eavesdropping detection, similar to that used in conventional pilot tone systems, is achieved by sending quantum signals, here comprised of continuous variable quantum states, i.e. weak coherent states modulated at the quantum level. An experimental demonstration of attack detection using the technique was presented for an ideal fibre tapping attack that taps 1% of the ongoing light in a 10 dB channel, and also an ideal correlated jamming attack in the same channel that maintains the light power with excess noise increased by 0.5 shot noise unit. The quantum monitoring system monitors suspicious changes in the quantum signal with the help of advanced data processing algorithms. In addition, unlike the CV-QKD system which is very sensitive to channel excess noise and receiver system noise, the quantum monitoring is potentially more compatible with current optical infrastructure, as it lowers the system requirements and potentially allows much higher classical data rate communication with links length up to 100 s km.
The physical layer describes how communication signals are encoded and transmitted across a channel. Physical security often requires either restricting access to the channel or performing periodic manual inspections. In this tutorial, we describe how the field of quantum communication offers new techniques for securing the physical layer. We describe the use of quantum seals as a unique way to test the integrity and authenticity of a communication channel and to provide security for the physical layer. We present the theoretical and physical underpinnings of quantum seals including the quantum optical encoding used at the transmitter and the test for non-locality used at the receiver. We describe how the envisioned quantum physical sublayer senses tampering and how coordination with higher protocol layers allows quantum seals to influence secure routing or tailor data management methods. We conclude by discussing challenges in the development of quantum seals, the overlap with existing quantum key distribution cryptographic services, and the relevance of a quantum physical sublayer to the future of communication security.
Dense wavelength division multiplexing optical networks transport a huge aggregate traffic exceeding Tbps per single fiber, and passive optical network technology has been extended to include the residential and enterprise network layer with fiber-to-the premises. Because this network allows for multimedia and extremely high data rates to end-users, optical communications security is important not only on the client and the node management layers, but also on the physical layer. Thus, cyber-security becomes also important in optical networks, including unbreakable cipher keys, cipher key distribution, identification of malicious actors, source authentication, physical link signature, and countermeasure strategies. In this paper we overview the security of the WDM optical network. We discuss advanced cryptographic methods that stem from quantum mechanics, known as quantum cryptography, and we identify specific vulnerabilities. We also look into the security of the next-generation optical network.
Quantum information processing uses the laws of quantum physics to perform tasks that are infeasible or impossible classically. Within this broader programme, quantum communication has emerged as one of the most practically mature sub-fields of quantum information science, with several proposed protocols having already been demonstrated over deployed optical fibre and free-space links. Of the various platforms available for encoding quantum information for communication, the continuous-variable (CV) framework encodes information in the quadratures of the electromagnetic field and is therefore directly compatible with the existing machinery of classical coherent optical communications. The most prominent CV protocol is continuous-variable quantum key distribution (CV-QKD), which establishes an information-theoretically secure cryptographic key between two spatially separated parties. Because CV-QKD reuses much of the hardware of classical coherent telecommunications, including off-the-shelf lasers, modulators, and balanced detectors, it is a leading candidate for the deployment of quantum-secured communication over standard optical fibre networks. The development of CV-QKD has typically proceeded with the underlying physics dictating the engineering. Security proofs, often relying on the Gaussian optimality of collective attacks, set the structure of the protocol, and the practical system is then built to satisfy the assumptions on which those proofs depend. Contributions of this thesis adopt the opposite view, taking the practical engineering of high-rate CV-QKD systems as the starting point and developing the theoretical machinery required to support it. The first contribution is the formalisation of one-round sliced reconciliation with guard-band post-selection as a key distillation scheme designed for real-time, high-throughput operation. Originally introduced experimentally as a means to stabilise bit error rates and enable the use of fixed-rate error correction codes at high symbol rates, guard-band post-selection is shown here to identify the guard-band span as a free parameter that can be tuned to hold the quantum bit error rate approximately constant across a range of channel conditions. However, conditioning on accepted data produces non-Gaussian post-selected statistics that lie outside the reach of standard Gaussian-optimality security arguments, which motivates the remaining two contributions. The second contribution is an asymptotic security analysis of guard-band post-selected CV-QKD against arbitrary collective attacks, no longer restricted to Gaussian adversaries. By using a quantum channel estimate as side information and by lifting reduced-state distances to purification distances via entropic continuity bounds, security is certified against the class of channels lying close to a Gaussian thermal-loss reference, with a key-rate penalty that scales with the energy-constrained diamond distance to that reference. The third contribution is the experimental basis required to apply this framework in practice. A lightweight three-stage protocol for quantum channel estimation is proposed and demonstrated, which repurposes the Gaussian probe constellation already present in the CV-QKD signal and requires no additional hardware or modifications to the underlying protocol. Over single-mode optical fibre at distances from 10 km to 50 km, the protocol produces physically valid process tensor estimates whose energy-constrained diamond distances to a Gaussian reference channel remain on the order of 10^(-3) throughout. Together, these three contributions provide a treatment of post-selected Gaussian-modulated CV-QKD in which the engineering, the security theory, and the channel characterisation are designed to operate together within a deployable system.
It is well known that optical access networks are able to provide high data rates over long distances and to a reasonable number of users. Security and privacy are always a challenge for public accessible network infrastructures. Especially in time-division multiplexing passive optical networks (TDM-PONs), in which the downstream signal is broadcasted to all users connected via the same wavelength channel in a shared fiber link, privacy can be a critical concern. Although encryption at the application layer can provide a high level of security, this can be achieved only if the encryption key distribution is perfectly save. On the other hand, encryption on the physical layer such as quantum cryptography or, more precisely, quantum key distribution (QKD) is a very promising approach to achieve secure communication. However, there remain several issues that have to be solved before the quantum cryptography reaches the maturity level needed for a cost effective implementation in practical networks. In this paper, we address quantum key distribution (QKD) over passive optical access networks, which is an enabling technology required to cost efficiently deploy practical quantum encrypted data communication in the access area. We study different methods to integrate QKD systems in conventional optical access networks and quantitatively evaluate their suitability for a potential implementation.