Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Optical Fiber Communication Conference

Demonstration of a Dynamic QKD Network Control Using a QKD-Aware SDN Application Over a Programmable Hardware Encryptor

R. S. Tessinari, E. Arabul, Obada Alia, Abubakar Siddique Muqaddas, George Theodore Kanellos, Reza Nejabati, Dimitra E. Simeonidou

Published Jan 1, 2021• 7 citations
Publisher

Abstract

We successfully implemented a QKD-Aware SDN application capable of realtime monitoring and controlling a quantum secure network paired with a programmable FPGA encryption/decryption technology to provide on-demand encryption algorithms for network services between different sites.
DOI
10.1364/ofc.2021.m2b.3

Related papers

Monitoring and Physical-Layer Attack Mitigation in SDN-Controlled Quantum Key Distribution Networks

E. Hugues-Salas, Foteini Ntavou, Dimitris Gkounis +3 more

Quantum key distribution (QKD) has been identified as a secure method for providing symmetric keys between two parties based on the fundamental laws of quantum physics, making it impossible for a third party to copy the quantum states exchanged without being detected by the sender (Alice) and receiver (Bob) and without altering the original states. However, when QKD is applied in a deployed optical network, physical-layer intrusions may occur in the optical links by injecting harmful signals directly into the optical fiber. This can have a detrimental effect on the key distribution and eventually lead to its disruption. On the other hand, network architectures with software-defined networking (SDN) benefit from a homogeneous and unified control plane that can seamlessly control a QKD-enabled optical network end-to-end. There is no need for a separate QKD control, a separate control for each segment of an optical network, and an orchestrator to coordinate between these parts. Furthermore, SDN allows customized and application-tailored control and algorithm provisioning, such as QKD-aware optical path computation, to be deployed in the network, independent of the underlying infrastructure. Therefore, in this paper, we investigate the integration of the application, SDN, and QKD infrastructure layers and confirm capability for flexible supervision and uninterrupted key service provisioning in the event of link level attacks. An experimental demonstrator is used, for the first time, to verify the architecture proposed, considering real-time monitoring of quantum parameters and fiber-optic link intruders to emulate real-world conditions. Furthermore, attacks on a standard single-mode fiber (via a 3 dB coupler) and a multicore fiber (via an adjacent core) are undertaken to explore different connectivity between QKD units. Results show additional attacker identification and switching time of less than 60 ms for the link cases investigated, being negligible compared to the total (re-)initialization time of 14 min of the QKD units.

Journal of Optical Communications and Networking•Jan 15, 2019•49 citations

The Madrid Testbed: QKD SDN Control and Key Management in a Production Network

Vicente Martín, Juan P. Brito, Laura Ortíz +13 more

Software Defined Networking is increasingly seen as one of the best choices to create a Quantum Key Distribution (QKD) Network, especially if the aim is also its integration into a standard telecommunications network. The degree of flexibility afforded by this paradigm allows the creation of a network whose control mechanisms can be made aware simultaneously of the capabilities installed at the classical optical transport level as well as those at the quantum level. This is interesting not only to manage the coexistence between a classical and a quantum network sharing the same infrastructure, but also for future applications beyond QKD. This flexibility is due to a formal separation between the control and data forwarding planes. The logically centralized SDN controller gathers all relevant information monitoring the behavior of the hole network. It can act on the programmable quantum or classical devices opening many possibilities to share a common infrastructure, that can reach even the level of a single fiber strand to manage the signals that go through it in a compatible way. The same controller can use this information to manage the fundamental task of a QKD network, namely the key transport. Here we briefly report on the implementation of the SDN-QKD controller used in the Madrid testbed and its use to allow multi-vendor end-to-end key transport between any two nodes in the network.

International Conference on Transparent Optical Networks•Jul 2, 2023•7 citations

Demonstration of a Resilient and Quantum-Secured Time-Shared Optical Network with Multi-Level Programmability

Romerson Deiny Oliveira, E. Arabul, RuiJie Wang +3 more

We have successfully implemented a multilevel programmable network resilience and security for Time-Shared Optical Networks (TSON). A SDN controller enables flexible control of FPGA-based network coding and encryption/decryption cores for secured and resilient TSON.

Optical Fiber Communication Conference•Jan 1, 2022•3 citations

Software-defined quantum network using a QKD-secured SDN controller and encrypted messages

R. S. Tessinari, Robert I. Woodward, A. J. Shields

We propose and implement a software-defined network architecture that integrates the QKD SDN Controller within the QKD node, enabling it to use quantum keys to secure its communication with SDN agents while optimizing QKD-keys consumption.

arXiv:2305.12893•May 22, 2023•1 citation

Integration of Quantum Key Distribution with SDN for Secure Networking

Rentala Mounika, K. Saraswathi

The rapid evolution of digital infrastructure has raised significant concerns about the security of data transmission, particularly with the advent of quantum computing. Traditional cryptographic algorithms are vulnerable to attacks, highlighting the need for quantum-resistant solutions. This paper presents the integration of Quantum Key Distribution (QKD) with Software-Defined Networking (SDN) and network slicing to build a secure, programmable, and flexible network architecture. QKD ensures unconditional security based on quantum mechanics by enabling key distribution with the ability to detect eavesdropping through quantum bit error rates (QBER). SDN provides centralized control and real-time traffic management, while network slicing allows isolation, reliability and customization of traffic flows for specific applications such as URLLC, eMBB, and mMTC. When abnormal QBER or decryption failures are detected, mitigation actions such as Quantum key refresh, traffic rerouting, or attacker isolation are triggered and Performance evaluation of the system is based on Latency and throughput Experimental validation using Mininet and Ryu demonstrates secure key distribution, attack detection, and slice-specific threat mitigation. This integrated approach enhances end-to-end security for next-generation networks, with strong applicability to$\mathbf{5 G} \boldsymbol{/} \mathbf{6 G}$, IoT, and mission-critical services.

International Conference on Computation System and Information Technology for Sustainable Solutions (CSITSS)•Nov 20, 2025•0 citations

Software-Defined Quantum Network Using a QKD-Secured SDN Controller and Encrypted Messages

R. S. Tessinari, Robert I. Woodward, A. J. Shields

We propose and implement a software-defined network architecture that integrates the QKD SDN Controller within the QKD node, enabling it to use quantum keys to secure its communication with SDN agents while optimizing QKD-keys consumption.

Optical Fiber Communication Conference•Jan 1, 2023•11 citations
Quantum key distribution (QKD) has been identified as a secure method for providing symmetric keys between two parties based on the fundamental laws of quantum physics, making it impossible for a third party to copy the quantum states exchanged without being detected by the sender (Alice) and receiver (Bob) and without altering the original states. However, when QKD is applied in a deployed optical network, physical-layer intrusions may occur in the optical links by injecting harmful signals directly into the optical fiber. This can have a detrimental effect on the key distribution and eventually lead to its disruption. On the other hand, network architectures with software-defined networking (SDN) benefit from a homogeneous and unified control plane that can seamlessly control a QKD-enabled optical network end-to-end. There is no need for a separate QKD control, a separate control for each segment of an optical network, and an orchestrator to coordinate between these parts. Furthermore, SDN allows customized and application-tailored control and algorithm provisioning, such as QKD-aware optical path computation, to be deployed in the network, independent of the underlying infrastructure. Therefore, in this paper, we investigate the integration of the application, SDN, and QKD infrastructure layers and confirm capability for flexible supervision and uninterrupted key service provisioning in the event of link level attacks. An experimental demonstrator is used, for the first time, to verify the architecture proposed, considering real-time monitoring of quantum parameters and fiber-optic link intruders to emulate real-world conditions. Furthermore, attacks on a standard single-mode fiber (via a 3 dB coupler) and a multicore fiber (via an adjacent core) are undertaken to explore different connectivity between QKD units. Results show additional attacker identification and switching time of less than 60 ms for the link cases investigated, being negligible compared to the total (re-)initialization time of 14 min of the QKD units.
Software Defined Networking is increasingly seen as one of the best choices to create a Quantum Key Distribution (QKD) Network, especially if the aim is also its integration into a standard telecommunications network. The degree of flexibility afforded by this paradigm allows the creation of a network whose control mechanisms can be made aware simultaneously of the capabilities installed at the classical optical transport level as well as those at the quantum level. This is interesting not only to manage the coexistence between a classical and a quantum network sharing the same infrastructure, but also for future applications beyond QKD. This flexibility is due to a formal separation between the control and data forwarding planes. The logically centralized SDN controller gathers all relevant information monitoring the behavior of the hole network. It can act on the programmable quantum or classical devices opening many possibilities to share a common infrastructure, that can reach even the level of a single fiber strand to manage the signals that go through it in a compatible way. The same controller can use this information to manage the fundamental task of a QKD network, namely the key transport. Here we briefly report on the implementation of the SDN-QKD controller used in the Madrid testbed and its use to allow multi-vendor end-to-end key transport between any two nodes in the network.
The rapid evolution of digital infrastructure has raised significant concerns about the security of data transmission, particularly with the advent of quantum computing. Traditional cryptographic algorithms are vulnerable to attacks, highlighting the need for quantum-resistant solutions. This paper presents the integration of Quantum Key Distribution (QKD) with Software-Defined Networking (SDN) and network slicing to build a secure, programmable, and flexible network architecture. QKD ensures unconditional security based on quantum mechanics by enabling key distribution with the ability to detect eavesdropping through quantum bit error rates (QBER). SDN provides centralized control and real-time traffic management, while network slicing allows isolation, reliability and customization of traffic flows for specific applications such as URLLC, eMBB, and mMTC. When abnormal QBER or decryption failures are detected, mitigation actions such as Quantum key refresh, traffic rerouting, or attacker isolation are triggered and Performance evaluation of the system is based on Latency and throughput Experimental validation using Mininet and Ryu demonstrates secure key distribution, attack detection, and slice-specific threat mitigation. This integrated approach enhances end-to-end security for next-generation networks, with strong applicability to5G/6G\mathbf{5 G} \boldsymbol{/} \mathbf{6 G}5G/6G, IoT, and mission-critical services.