In quantum key distribution (QKD)-secured optical networks, blocking increases with the number of QKD lightpath requests as well as with the number of times modification required to improve the security level of QKD lightpath requests. The blocking is severe problem in such networks because of the limited number of resources (wavelengths and time-slots) in each fiber link. In this paper, we propose a priority order-based routing wavelength and time-slot allocation (POB-RWTA) scheme to reduce the blocking of QKD lightpath requests. In the proposed POB-RWTA scheme, the QKD lightpath requests are served according to their priority order. The priority order of each QKD lightpath request is based on the security level. The blocking of high priority lightpath requests (HPLRs) and total incoming QKD lightpath requests due to limited resources can be reduced using the above criterion of priority order. The performance analysis of the proposed POB-RWTA scheme is made in terms of the success probability of QKD lightpath requests considering different wavelengths for QSCh and the probability of secret key update failure. We compared the proposed POB-RWTA scheme with a non-priority order-based routing wavelength and time-slot allocation (NPOB-RWTA) scheme. Simulations performed on NSFNET topology show that by using the POB-RWTA scheme, the success probability of HPLRs and total incoming QKD lightpath requests are significantly improved as compared to NPOB-RWTA.
In quantum key distribution (QKD)-secured optical networks, blocking increases with the number of QKD lightpath requests as well as with the number of times modification required to improve the security level of QKD lightpath requests. The blocking is severe problem in such networks because of the limited number of resources (wavelengths and time-slots) in each fiber link. In this paper, we propose a priority order-based routing wavelength and time-slot allocation (POB-RWTA) scheme to reduce the blocking of QKD lightpath requests. In the proposed POB-RWTA scheme, the QKD lightpath requests are served according to their priority order. The priority order of each QKD lightpath request is based on the security level. The blocking of high priority lightpath requests (HPLRs) and total incoming QKD lightpath requests due to limited resources can be reduced using the above criterion of priority order. The performance analysis of the proposed POB-RWTA scheme is made in terms of the success probability of QKD lightpath requests considering different wavelengths for QSCh and the probability of secret key update failure. We compared the proposed POB-RWTA scheme with a non-priority order-based routing wavelength and time-slot allocation (NPOB-RWTA) scheme. Simulations performed on NSFNET topology show that by using the POB-RWTA scheme, the success probability of HPLRs and total incoming QKD lightpath requests are significantly improved as compared to NPOB-RWTA.
Quantum key distribution (QKD) has potential of providing long-term security as it is based on the fundamental principles of quantum mechanics. Security of information transmitted through optical networks has attracted attention recently due to its vulnerability to attacks post quantum computers. Hence, the integration of QKD into optical networks can significantly improve the security of existing and future optical networks. In QKD-secured optical networks, the quantum channel and the classical channel are integrated into a single optical fiber to reduce the deployment cost of the network infrastructure. However, due to limited network resources in a single optical fiber, the efficient provisioning of network resources (wavelengths and time slots) and blocking are two major issues in such networks. In this work, a resource assignment strategy with scheduling, namely, resource assignment with scheduling (RA-WS) has been proposed for utilization of network resources efficiently. In the RA-WS strategy, the QKD lightpath requests (QLPRs) have been served according to the proposed scheduling criterion. Moreover, the proposed scheduling criterion for routing, wavelength and time-slot assignment (RWTA) can reduce the effect of QLPRs blocking because of the limited network resources. The performance of the proposed RA-WS strategy has been analyzed in terms of blocking probability (BP), success probability of update secret key (SPUSK), and time-slot utilization ratio (TSUR) with different reserved wavelengths for quantum signal channel (QSCh), i.e.,WQand different time slots (ntr). Simulations performed on NSFNET network topology indicate that the RA-WS strategy performs better than the baseline strategy, i.e., resource assignment without scheduling (RA-WOS) in terms of all the considered metrics.
Abstract Quantum key distribution (QKD) optical networks can provide more secure communications. However, with the increase of the QKD path requests and key updates, network blocking problems will become severe. The blocking problems in the network can become more severe because each fiber link has limited resources (such as wavelengths and time slots). In addition, QKD optical networks are also affected by external disturbances such as data interception and eavesdropping, resulting in inefficient network communication. In this paper, we exploit the idea of protection path to enhance the anti-interference ability of QKD optical network. By introducing the concept of security metric, we propose a routing wavelength and time slot allocation algorithm (RWTA) based on protection path, which can lessen the blocking problem of QKD optical network. According to simulation analysis, the security-metric-based RWTA algorithm (SM-RWTA) proposed in this paper can substantially improve the success rate of security key (SK) update and significantly reduce the blocking rate of the network. It can also improve the utilization rate of resources such as wavelengths and time slots. Compared with the non-security-metric-based RWTA algorithm (NSM-RWTA), our algorithm is robust and can enhance the anti-interference ability and security of QKD optical networks.
Currently, with the continuous advancement of network and communication technology, the amount of data carried by the optical network is very huge. The security of high-speed and large-capacity information in optical networks has attracted more and more attention. Quantum key distribution (QKD) provides information-theoretic security based on the laws of quantum mechanics. Introducing QKD into an optical network can greatly improve the security of the optical network. In order to reduce the cost of deployment on QKD infrastructure, quantum signals in QKD and classical signals in optical networks are multiplexed in the same fiber by wavelength-division manner. Moreover, due to the limited wavelength resources in an optical fiber, time-division technology is adopted to construct different kinds of channels in QKD system for efficient utilization of wavelength resources. Under such situation, how to satisfy the security requirements of service requests and complete the efficient scheduling of multi-dimensional resources, i.e., wavelengths and timeslots, is a challenging problem. This paper addresses this problem by considering multi-dimensional routing, wavelength, and timeslot allocation (RWTA) in short-distance quantum key distribution optical networks (QKD-ON), in which any two nodes can directly establish a quantum channel, and the maximum distance between any two nodes is less than the distance that can carry out point-to-point quantum key distribution process. While accommodating services with security requirements in QKD optical networks, to avoid the wavelength time-slot fragmentation caused by the constraints of wavelength consistency and time-slot continuity, we propose a time-window-based security orchestration strategy as well as relative-loss of time continuous compactness based RWTA strategy. We conducted the simulations under various scenarios, e.g., different key updating periods and different distributions on wavelength resources, etc., and the results show that the proposed strategy can achieve better performance compared with the baselines in terms of key success rate, key-updating delay, and blocking probability.
Data transmission with optical fiber is vulnerable to eavesdropping. Moreover, conventional key distribution technology suffers from increasing computational power and upgraded attack algorithms. To address these issues, quantum key distribution (QKD), a quantum technology that secures secret information (such as a cryptographic key) exchange between two parties, can be used to guarantee secure data transmission. Integrating QKD into existing wavelength division multiplexing optical networks has been verified through a series of experiments, which contribute to ensuring network security and saving fiber resources. This paper addresses the resource assignment problem in QKD-enabled optical networks. First, a QKD-enabled optical network architecture is introduced. A small fraction of wavelength channels are segmented into multiple time slots with optical time division multiplexing technology to construct quantum key channels (QKChs) and measuring-basis channels, and then the remaining wavelengths can construct traditional data channels. Second, a static routing, wavelength, and time-slot assignment (RWTA) strategy is proposed and verified by the integer linear programming formulation and a heuristic algorithm. In the RWTA, QKChs are assigned for service requests according to the security levels specified by relevant key-updating periods. Thus, the secret keys for data encryption can update periodically to enhance security. Simulation results indicate that there is a trade-off between security (i.e., security levels and security-level types) and resource utilization.
Optical network security is attracting increasing research attention, as loss of confidentiality of data transferred through an optical network could impact a huge number of users and services. Data encryption is an effective way to enhance optical network security. In particular, QKD is being investigated as a secure mechanism to provide keys for data encryption at the endpoints of an optical network. In a QKD-enabled optical network, apart from TDChs, two additional channels, called QSChs and PIChs, are required to support secure key synchronization. How to allocate network resources to QSChs, PIChs, and TDChs is emerging as a novel problem for the design of a security-guaranteed optical network. This article addresses the resource allocation problem in optical networks secured by QKD. We first discuss a possible architecture for a QKD-enabled optical network, where an SDN controller is in charge of allocating the three types of channels (TDCh, QSCh, and PICh) over different wavelengths exploiting WDM. To save wavelength resources, we propose to adopt OTDM to allocate multiple QSChs and PIChs over the same wavelength. An RWTA algorithm is designed to allocate wavelength and time slot resources for the three types of channels. Different security levels are included in the RWTA algorithm by considering different key updating periods (i.e., the period after which the secure key between two endpoints has to be updated). Illustrative simulation results show the effects of different security-level configuration schemes on resource allocation.
In this article, the network performance of equilibrium allocation of quantum key resources was investigated in quantum key distribution (QKD)-enabled optical data center networks. To effectively use quantum key resources, we propose three novel efficient load balancing routing, wavelength, and time-slot assignment (LB-RWTA) approaches, including LB-RWTA with flexible security level (LB-RWTA-FSL), LB-RWTA with specific security level (LB-RWTA-SSL), and LB-RWTA without security level (LB-RWTA-NSL). Particularly, the proposed LB-RWTA-FSL approach is uniquely featured by adaptive security level classification (ASLC) and load balancing (LB), aiming to demarcate the security level (SL) and reduce the overall network congestion. We introduce an existing routing, wavelength, and time-slot assignment (E-RWTA) approach without SL, called E-RWTA, for comparison. Simulation results show the effectiveness of our proposed approaches in terms of much higher quantum key resource efficiency and thus much higher network security performance than the state-of-the-art quantum key resource allocation approaches compared with the E-RWTA approach in QKD-enabled optical data center networks.