Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Optics Express

Dynamic secret-key provisioning in quantum-secured passive optical networks (PONs)

Hua Wang, Yongli Zhao, Massimo Tornatore, Xiaosong Yu, Jie Zhang

Published Dec 21, 2020• 19 citations
Publisher

Abstract

Quantum cryptography (QC) is currently under investigation to build highly secure optical communication networks. QC requires distribution of quantum keys (also called "secret" keys) on separate wavelength channels than those used to transmit the encrypted data. Hence, we propose a quantum-secured passive optical network (QS-PON) that supports both i) the traditional wavelength channels for secured data transmission, and ii) a quantum key distribution network (QKDN) running on separate dedicated wavelengths. The QKDN generates and stores secret keys that are then assigned to users' demands served on traditional PON channels. To generate secret keys, quantum transmitters at the optical network units (ONUs) exchange qubits with a quantum receiver at the optical line terminal (OLT). Then, the generated secret keys are stored in quantum key pools (QKPs) installed at both OLT and the ONUs and assigned to users' demands. Point-to-multipoint QKD systems have been experimentally demonstrated over various forms of quantum access networks (QANs), showing that an efficient mechanism to generate and assign quantum keys based on traffic requests is a critical component of QANs. In this study, we present a new QS-PON architecture, and we propose a dynamic secret-key provisioning (DSKP) algorithm that effectively generates and assigns secret keys from users' demands. Our proposed DSKP algorithm features two phases, the lowest-first secret-key generation (LF-SKG) phase and the hierarchical-clustering secret-key consumption (HC-SKC) phase. In this study, we also provide an analytical model that describes how secret keys are generated and consumed in QKPs. In our illustrative numerical evaluation, we compare our algorithm for secret-key provisioning with a baseline IPACT-based solution in terms of service-rejection ratio, time-slot utilization, and guard- and relay-time saving. Results show that DSKP reduces service-rejection ratio and guard- and relay-time of about 16% and 39.54%, respectively.

DOI
10.1364/oe.412188

Related papers

Time-Scheduled Quantum Key Distribution (QKD) Over WDM Networks

Yuan Cao, Yongli Zhao, Yu Wu +2 more

Quantum key distribution (QKD) networking over wavelength-division multiplexing (WDM) network infrastructure provides a new paradigm for secure communications across the networks. With limited wavelength resources in existing WDM networks, how to efficiently schedule QKD to provision sufficient secret keys over WDM networks becomes a new challenge. This study proposes a new time-scheduled scheme in combination with quantum key pool (QKP) technique to overcome this challenge. A new architecture of QKD-over-WDM networks is presented, in which QKPs are constructed to decouple secret-key resources from the underlying infrastructure for timely secret-key provisioning. In the time-scheduled scheme, routing, wavelength, and time-slot allocation (RWTA) problem is proposed for efficient QKP construction (QKPC) over WDM networks, in which three sub-problems (i.e., secret-key consumption, time-slot allocation, and time-slot continuity) are discussed, respectively. An integer linear programming (ILP) model and a novel joint path-and-link-based RWTA (JPL-RWTA) heuristic algorithm are designed to solve the RWTA problem, in which the three sub-problems are addressed together. Simulation results indicate that the ILP model and JPL-RWTA algorithm are effective approaches to obtain the positive balance between resource utilization of QKPC and successful probability of QKPC (SPQKPC). Moreover, the SPQKPC can be increased at the cost of reducing the flexibility of secret-key consumption, the uniformity of time-slot allocation, and the proportion of time-slot continuous QKPC to time-slot discrete QKPC requests.

Journal of Lightwave Technology•May 10, 2018•100 citations

Resource Assignment Strategy in Optical Networks Integrated With Quantum Key Distribution

Yuan Cao, Yongli Zhao, Xiaosong Yu +1 more

Data transmission with optical fiber is vulnerable to eavesdropping. Moreover, conventional key distribution technology suffers from increasing computational power and upgraded attack algorithms. To address these issues, quantum key distribution (QKD), a quantum technology that secures secret information (such as a cryptographic key) exchange between two parties, can be used to guarantee secure data transmission. Integrating QKD into existing wavelength division multiplexing optical networks has been verified through a series of experiments, which contribute to ensuring network security and saving fiber resources. This paper addresses the resource assignment problem in QKD-enabled optical networks. First, a QKD-enabled optical network architecture is introduced. A small fraction of wavelength channels are segmented into multiple time slots with optical time division multiplexing technology to construct quantum key channels (QKChs) and measuring-basis channels, and then the remaining wavelengths can construct traditional data channels. Second, a static routing, wavelength, and time-slot assignment (RWTA) strategy is proposed and verified by the integer linear programming formulation and a heuristic algorithm. In the RWTA, QKChs are assigned for service requests according to the security levels specified by relevant key-updating periods. Thus, the secret keys for data encryption can update periodically to enhance security. Simulation results indicate that there is a trade-off between security (i.e., security levels and security-level types) and resource utilization.

Journal of Optical Communications and Networking•Oct 16, 2017•77 citations

Quantum key distribution over optical access networks

Slaviša Aleksić, Dominic Winkler, Gerald Franzl +3 more

It is well known that optical access networks are able to provide high data rates over long distances and to a reasonable number of users. Security and privacy are always a challenge for public accessible network infrastructures. Especially in time-division multiplexing passive optical networks (TDM-PONs), in which the downstream signal is broadcasted to all users connected via the same wavelength channel in a shared fiber link, privacy can be a critical concern. Although encryption at the application layer can provide a high level of security, this can be achieved only if the encryption key distribution is perfectly save. On the other hand, encryption on the physical layer such as quantum cryptography or, more precisely, quantum key distribution (QKD) is a very promising approach to achieve secure communication. However, there remain several issues that have to be solved before the quantum cryptography reaches the maturity level needed for a cost effective implementation in practical networks. In this paper, we address quantum key distribution (QKD) over passive optical access networks, which is an enabling technology required to cost efficiently deploy practical quantum encrypted data communication in the access area. We study different methods to integrate QKD systems in conventional optical access networks and quantitatively evaluate their suitability for a potential implementation.

European Conference on Networks and Optical Communications•Jul 1, 2013•30 citations

Review of Quantum Key Distribution on Passive Optical Networks

Jessica Smith, Irshaad Fatadin, David Cheadle

Abstract Passive Optical Networks (PON) are widely used to deliver fixed line communication due to their cost effectiveness and potential for high data transfer rates. However, due to the nature of their operation, every user on a PON system has access to every other user’s downstream data. Current progress in quantum computing means that the classical encryption algorithms currently used to secure communication data, including PON data, may not be sufficient in the future and so, for total information security another encryption solution, such as Quantum Key Distribution, must be found. This paper outlines the different variations of QKD on PON that have so far been proposed and summarises the current state of the art of experimental demonstrations of QKD on PON.

Journal of Physics Conference Series•Nov 1, 2025•0 citations

Resource Optimization in Quantum Access Networks

Sima Bahrani, Osama Elmabrok, Guillermo Currás-Lorenzo +1 more

In this paper, low-complexity channel allocation methods are proposed for quantum access networks. We consider dense-wavelength-division-multiplexing passive optical network (DWDM-PON) structures that enable users to exchange secret keys, in addition to data transmission. We consider two main sources of noise in such systems, Raman scattering and four-wave mixing, and examine optimal channel allocation in different scenarios. We also take into account finite-key effects in the quantum key distribution (QKD) channels. Our numerical results show that the proposed wavelength assignment methods can significantly enhance the secret key generation rate of users.

IEEE International Conference on Acoustics Speech and Signal Processing•Apr 17, 2019•7 citations

Design of quantum cryptography systems for passiveoptical networks

Paul D. Townsend, Simon J. D. Phoenix, Keith J. Blow +1 more

Quantum cryptography has been shown to be an effective technique for the secure distribution of cryptographic keys on point-to-point communication links. The authors describe adaptations of the existing quantum cryptography protocols and equipment configurations that allow secure key distribution to be performed on a variety of multiuser passive optical network (PON) architectures. These adaptations enable the network controller on the PON to distribute individual secret keys to each user on the network, and hence to securely encrypt and authenticate subsequent data transmissions broadcast on the network.

Electronics Letters•Oct 27, 1994•75 citations
Quantum cryptography (QC) is currently under investigation to build highly secure optical communication networks. QC requires distribution of quantum keys (also called "secret" keys) on separate wavelength channels than those used to transmit the encrypted data. Hence, we propose a quantum-secured passive optical network (QS-PON) that supports both i) the traditional wavelength channels for secured data transmission, and ii) a quantum key distribution network (QKDN) running on separate dedicated wavelengths. The QKDN generates and stores secret keys that are then assigned to users' demands served on traditional PON channels. To generate secret keys, quantum transmitters at the optical network units (ONUs) exchange qubits with a quantum receiver at the optical line terminal (OLT). Then, the generated secret keys are stored in quantum key pools (QKPs) installed at both OLT and the ONUs and assigned to users' demands. Point-to-multipoint QKD systems have been experimentally demonstrated over various forms of quantum access networks (QANs), showing that an efficient mechanism to generate and assign quantum keys based on traffic requests is a critical component of QANs. In this study, we present a new QS-PON architecture, and we propose a dynamic secret-key provisioning (DSKP) algorithm that effectively generates and assigns secret keys from users' demands. Our proposed DSKP algorithm features two phases, the lowest-first secret-key generation (LF-SKG) phase and the hierarchical-clustering secret-key consumption (HC-SKC) phase. In this study, we also provide an analytical model that describes how secret keys are generated and consumed in QKPs. In our illustrative numerical evaluation, we compare our algorithm for secret-key provisioning with a baseline IPACT-based solution in terms of service-rejection ratio, time-slot utilization, and guard- and relay-time saving. Results show that DSKP reduces service-rejection ratio and guard- and relay-time of about 16% and 39.54%, respectively.
Quantum key distribution (QKD) networking over wavelength-division multiplexing (WDM) network infrastructure provides a new paradigm for secure communications across the networks. With limited wavelength resources in existing WDM networks, how to efficiently schedule QKD to provision sufficient secret keys over WDM networks becomes a new challenge. This study proposes a new time-scheduled scheme in combination with quantum key pool (QKP) technique to overcome this challenge. A new architecture of QKD-over-WDM networks is presented, in which QKPs are constructed to decouple secret-key resources from the underlying infrastructure for timely secret-key provisioning. In the time-scheduled scheme, routing, wavelength, and time-slot allocation (RWTA) problem is proposed for efficient QKP construction (QKPC) over WDM networks, in which three sub-problems (i.e., secret-key consumption, time-slot allocation, and time-slot continuity) are discussed, respectively. An integer linear programming (ILP) model and a novel joint path-and-link-based RWTA (JPL-RWTA) heuristic algorithm are designed to solve the RWTA problem, in which the three sub-problems are addressed together. Simulation results indicate that the ILP model and JPL-RWTA algorithm are effective approaches to obtain the positive balance between resource utilization of QKPC and successful probability of QKPC (SPQKPC). Moreover, the SPQKPC can be increased at the cost of reducing the flexibility of secret-key consumption, the uniformity of time-slot allocation, and the proportion of time-slot continuous QKPC to time-slot discrete QKPC requests.
Data transmission with optical fiber is vulnerable to eavesdropping. Moreover, conventional key distribution technology suffers from increasing computational power and upgraded attack algorithms. To address these issues, quantum key distribution (QKD), a quantum technology that secures secret information (such as a cryptographic key) exchange between two parties, can be used to guarantee secure data transmission. Integrating QKD into existing wavelength division multiplexing optical networks has been verified through a series of experiments, which contribute to ensuring network security and saving fiber resources. This paper addresses the resource assignment problem in QKD-enabled optical networks. First, a QKD-enabled optical network architecture is introduced. A small fraction of wavelength channels are segmented into multiple time slots with optical time division multiplexing technology to construct quantum key channels (QKChs) and measuring-basis channels, and then the remaining wavelengths can construct traditional data channels. Second, a static routing, wavelength, and time-slot assignment (RWTA) strategy is proposed and verified by the integer linear programming formulation and a heuristic algorithm. In the RWTA, QKChs are assigned for service requests according to the security levels specified by relevant key-updating periods. Thus, the secret keys for data encryption can update periodically to enhance security. Simulation results indicate that there is a trade-off between security (i.e., security levels and security-level types) and resource utilization.
It is well known that optical access networks are able to provide high data rates over long distances and to a reasonable number of users. Security and privacy are always a challenge for public accessible network infrastructures. Especially in time-division multiplexing passive optical networks (TDM-PONs), in which the downstream signal is broadcasted to all users connected via the same wavelength channel in a shared fiber link, privacy can be a critical concern. Although encryption at the application layer can provide a high level of security, this can be achieved only if the encryption key distribution is perfectly save. On the other hand, encryption on the physical layer such as quantum cryptography or, more precisely, quantum key distribution (QKD) is a very promising approach to achieve secure communication. However, there remain several issues that have to be solved before the quantum cryptography reaches the maturity level needed for a cost effective implementation in practical networks. In this paper, we address quantum key distribution (QKD) over passive optical access networks, which is an enabling technology required to cost efficiently deploy practical quantum encrypted data communication in the access area. We study different methods to integrate QKD systems in conventional optical access networks and quantitatively evaluate their suitability for a potential implementation.
Abstract Passive Optical Networks (PON) are widely used to deliver fixed line communication due to their cost effectiveness and potential for high data transfer rates. However, due to the nature of their operation, every user on a PON system has access to every other user’s downstream data. Current progress in quantum computing means that the classical encryption algorithms currently used to secure communication data, including PON data, may not be sufficient in the future and so, for total information security another encryption solution, such as Quantum Key Distribution, must be found. This paper outlines the different variations of QKD on PON that have so far been proposed and summarises the current state of the art of experimental demonstrations of QKD on PON.
In this paper, low-complexity channel allocation methods are proposed for quantum access networks. We consider dense-wavelength-division-multiplexing passive optical network (DWDM-PON) structures that enable users to exchange secret keys, in addition to data transmission. We consider two main sources of noise in such systems, Raman scattering and four-wave mixing, and examine optimal channel allocation in different scenarios. We also take into account finite-key effects in the quantum key distribution (QKD) channels. Our numerical results show that the proposed wavelength assignment methods can significantly enhance the secret key generation rate of users.
Quantum cryptography has been shown to be an effective technique for the secure distribution of cryptographic keys on point-to-point communication links. The authors describe adaptations of the existing quantum cryptography protocols and equipment configurations that allow secure key distribution to be performed on a variety of multiuser passive optical network (PON) architectures. These adaptations enable the network controller on the PON to distribute individual secret keys to each user on the network, and hence to securely encrypt and authenticate subsequent data transmissions broadcast on the network.