Abstract In practical quantum key distribution (QKD) systems, a single photon-detector (SPD) is one of the most vulnerable components. Faint after-gate attack is a universal attack against the detector. However, the original faint after-gate attack can be discovered by monitoring the photocurrent. This paper presents a probabilistic generalization of the attack, which we refer to as probabilistic faint after-gate attack, by introducing probability control modules. Previous countermeasures for photocurrent monitoring may fail in detecting the eavesdropper under some specific probabilities. To mitigate this threat, we provide a method to determine the detectable boundary in the limitation of precision of photocurrent monitoring, and investigate the security of QKD systems under such boundaries using the weak randomness model.
Abstract In practical quantum key distribution (QKD) systems, a single photon-detector (SPD) is one of the most vulnerable components. Faint after-gate attack is a universal attack against the detector. However, the original faint after-gate attack can be discovered by monitoring the photocurrent. This paper presents a probabilistic generalization of the attack, which we refer to as probabilistic faint after-gate attack, by introducing probability control modules. Previous countermeasures for photocurrent monitoring may fail in detecting the eavesdropper under some specific probabilities. To mitigate this threat, we provide a method to determine the detectable boundary in the limitation of precision of photocurrent monitoring, and investigate the security of QKD systems under such boundaries using the weak randomness model.
In a practical quantum key distribution(QKD) system, imperfect equipment, especially the single-photon detector,can be eavesdropped on by a blinding attack. However, the original blinding attack may be discovered by directly detecting the current. In this paper, we propose a probabilistic blinding attack model, where Eve probabilistically applies a blinding attack without being caught by using only an existing intuitive countermeasure. More precisely, our countermeasure solves the problem of how to define the bound in the limitation of precision of current detection, and then we prove security of the practical system by considering the current parameter. Meanwhile, we discuss the bound of the quantum bit error rate(QBER) introduced by Eve, by which Eve can acquire information without the countermeasure.
Abstract Quantum key distribution (QKD), rooted in quantum mechanics, offers information-theoretic security. However, practical systems open security threats due to imperfections, notably bright-light blinding attacks targeting single-photon detectors. Here, we propose a concise, robust defense strategy for protecting single-photon detectors in QKD systems against blinding attacks. Our strategy uses a dual approach: detecting the bias current of the avalanche photodiode (APD) to defend against continuous-wave blinding attacks, and monitoring the avalanche amplitude to protect against pulsed blinding attacks. By integrating these two branches, the proposed solution effectively identifies and mitigates a wide range of bright light injection attempts, significantly enhancing the resilience of QKD systems against various bright-light blinding attacks. This method fortifies the safeguards of quantum communications and offers a crucial contribution to the field of quantum information security.
In real-life implementations of quantum key distribution (QKD), the physical systems with unwanted imperfections would be exploited by an eavesdropper. Based on imperfections in the detectors, detector control attacks have been successfully launched on several QKD systems, and attracted widespread concerns. Here, we propose a robust countermeasure against these attacks just by introducing a variable attenuator in front of the detector. This countermeasure is not only effective against the attacks with blinding light, but also robust against the attacks without blinding light which are more concealed and threatening. Different from previous technical improvements, the single photon detector in our countermeasure model is treated as a blackbox, and the eavesdropper can be detected by statistics of the detection and error rates of the QKD system. Besides theoretical proof, the countermeasure is also supported by an experimental demonstration. Our countermeasure is general in sense that it is independent of the technical details of the detector, and can be easily applied to the existing QKD systems.
By employing real-time monitoring of single-photon avalanche photodiodes we demonstrate how two types of practical eavesdropping strategies, the after-gate and time-shift attacks, may be detected. Both attacks are identified with the detectors operating without any special modifications, making this proposal well suited for real-world applications. The monitoring system is based on accumulating statistics of the times between consecutive detection events, and extracting the afterpulse and overall efficiency of the detectors in real-time using mathematical models fit to the measured data. We are able to directly observe changes in the afterpulse probabilities generated from the after-gate and faint after-gate attacks, as well as different timing signatures in the time-shift attack. We also discuss the applicability of our scheme to other general blinding attacks.
Quantum key distribution (QKD) allows two users to communicate with information theoretic security by encoding information on single photons. This security is based on the laws of physics and as such can never be broken in theory. However, in practice, components do not always behave according to their theoretical models and these deviations can be exploited by an eavesdropper. In recent years, exposing loopholes in QKD systems, known as quantum hacking, has attracted significant attention. The components most susceptible to being hacked are the single-photon detectors, often avalanche photodiodes (APDs), as they are directly exposed to the optical channel. Whilst measurement-device-independent QKD removes detector vulnerability from the system, secure key rates with this technique can be much lower than point-to-point links. As such, mitigating attacks on QKD systems is a pressing challenge in QKD. In this thesis, the focus is on a special class of detectors, self-differencing APDs (SD-APDs), which have facilitated state-of-the art demonstrations of QKD. The susceptibility of SD-APDs to blinding attacks, the most explored and successful attack to date, was investigated and it was shown that by following best practice for their operation, such an attack would be unsuccessful. We have also proposed and developed a countermeasure such that the onus for appropriate operation could be removed from the user. We have also explored an arguably more dangerous attack, in the form of the after-gate attack. We have shown that delayed detection events, ordinarily considered detrimental in QKD, can provide inherent protection against this attack. Finally, backflashes in GHz-gated APDs were investigated for the first time and it was shown that threat they pose to QKD security is negligible. These results highlight the inherent protection to a number of attacks that self-differencing APDs possess. We stress that the findings presented in this thesis are also applicable to other types of fast-gated InGaAs APDs that don't possess self-differencing circuitry.
The security of quantum key distribution (QKD) is based on the basic principles of quantum mechanics, and therefore has unconditional security in theory. In existing quantum key distribution systems, weakly coherent sources (WCSs) are often used as light sources due to a high probability of vacuum pulses in these sources, resulting in limited transmission distances. Besides, there inevitably exist equipment defects in actual QKD systems, such as certain defects in phase modulators and intensity modulators, which lead to distinguishability of quantum states in higher dimensions and result in side-channel vulnerabilities. An eavesdropper can carry out corresponding attacks, thereby threatening the actual security of QKD systems. To overcome the above limitations, we propose an improved protocol on quantum key distribution based on monitoring heralded single-photon sources. Due to the simultaneity of parametric down-conversion photon pairs, we can accurately predict the arrival of one photon by measuring the arrival time of another photon. Through this way, we can greatly reduce the probability of vacuum states in the signal light, and increase the longest transmission distance of the QKD system. Moreover, a light source monitoring module is inserted into the sender’s side. By randomly selecting a certain period of time through the source monitoring module to measure the Hong-Ou-Mandel interference between the signal light and the idle light , we can estimate the side-channel information leakage of the source and then obtain the key generation rate. Compared with the QKD protocol based on monitoring weak coherent sources, our present protocol can give a better performance in either the transmission distance or the key generation rate, especially when the interference error is large. In addition, in principle, our present protocol can also be extended to other quantum key distribution protocols, such as the measurement-device-independent protocols, to further improve the security and practicability of QKD systems. Therefore, our present work can provide valuable references for realizing the large-scale application of quantum communication networks in the near future.