This paper addresses the survivability issue by proposing a hybrid-trusted/untrusted-relay based protection strategy in QKD-ON. Simulation results show it performs well on service blocking rate and protection path construction rate.
Quantum key distribution (QKD) has demonstrated a great potential to provide future-proofed security, especially for 5G and beyond communications. As the critical infrastructure for 5G and beyond communications, optical networks can offer a cost-effective solution to QKD deployment utilizing the existing fiber resources. In particular, measurement-device-independent QKD shows its ability to extend the secure distance with the aid of an untrusted relay. Compared to the trusted relay, the untrusted relay has obviously better security, since it does not rely on any assumption on measurement and even allows to be accessed by an eavesdropper. However, it cannot extend QKD to an arbitrary distance like the trusted relay, such that it is expected to be combined with the trusted relay for large-scale QKD deployment. In this work, we study the hybrid trusted/untrusted relay based QKD deployment over optical backbone networks and focus on cost optimization during the deployment phase. A new network architecture of hybrid trusted/untrusted relay based QKD over optical backbone networks is described, where the node structures of the trusted relay and untrusted relay are elaborated. The corresponding network, cost, and security models are formulated. To optimize the deployment cost, an integer linear programming model and a heuristic algorithm are designed. Numerical simulations verify that the cost-optimized design can significantly outperform the benchmark algorithm in terms of deployment cost and security level. Up to 25% cost saving can be achieved by deploying QKD with the hybrid trusted/untrusted relay scheme while keeping much higher security level relative to the conventional point-to-point QKD protocols that are only with the trusted relays.
In quantum key distribution (QKD) networks, the quantum service channel (QSCh) is highly sensitive to link failures, as any interruption in the quantum channel can immediately halt key generation, and hence the transmission of secured data across optical networks. Hence, robust protection mechanisms are essential to ensure continuous secure key distribution. However, conventional protection approaches, such as dedicated protection and fixed-path routing, often suffer from low resource efficiency and poor adaptability to heterogeneous relay environments. To ensure both survivability and efficient resource allocation in QKD based optical networks, we propose a shared path protection scheme based on hybrid relays. In the proposed approach, K-candidate paths are computed for both the traditional data channel (TDCh) and QSCh, and the working path is selected using a weighted metric that considers both the hop-count and the security degree. To enhance resilience, the shared protection paths are established, allowing multiple backup paths to reuse network resources for connection requests. A connection request is accepted only if both the working and the protection paths are successfully reserved, thereby ensuring strong protection. The system incorporates joint allocation of wavelength and time-slot, and introduces a protection threshold to support shared use of backup resources. Simulation results show that the proposed method achieves lower blocking probability, while maintaining high wavelength and time-slot efficiency compared to the baseline methods in different networks.
Quantum Key Distribution (QKD) is a promising technology that provides proven unconditional security based on fundamentals of quantum physics, especially for point-to-point communications. It could be applied in large-scale optical networks for long-distance key provisioning mainly by three relaying methods: quantum-repeater-based QKD, trusted-relay-based QKD, and measurement-device-independent QKD (MDI-QKD). However, quantum-repeater-based QKD is still under study because of the immature technologies such as the preliminary quantum memory. The trusted-relay-based QKD is vulnerable since insecurity of non-ideal single-photon sources and detectors cannot be ignored in practical applications. On the other hand, for MDI-QKD, there exists a limitation on its key rate under long-distance communications. According to these limitations, embedding protocols like MDI-QKD into the existing trusted-relay-based QKD secured optical networks (QKD-ON) with usage of untrusted relays is a promising key-provisioning scheme. In this paper, we study such partially-trusted relay scenarios and focus on its routing of keys in different kinds of typical network topologies. A partially-trusted-relay-based QKD method is described, which can allow a pair of optical nodes sharing secret keys under the coexistence of trusted relays and untrusted relays. The secret-key provisioning with collaborative routing (SKP-CR) algorithm is proposed to search for the optimal key-relay routing path. We perform the simulations with different proportion of trusted relays versus untrusted relays, initial secret keys in the quantum key pools (QKPs), and traffic load. The simulations verify that theSKP-CRalgorithm can significantly outperform the conventional trusted-relay-based scheme in terms of key-distribution success rate with an improvement of up to62%with a mesh topology.
Quantum key distribution (QKD) can protect the exchange process of confidential information between communicating parties. By using the basic principles of quantum mechanics and combined with “one-time pad” cipher encryption, information can be unconditionally secure. The BB84 protocol first describes the method of transmitting information by photon polarization state, and it expounds the transmission process of services between trusted relays. However, due to the defects of real experimental devices, there are security vulnerabilities in QKD in a real system. The birth of measurement-device-independent quantum key distribution (MDI-QKD) protocol solves the problem, providing immunity to hacker attacks at the end of the detector. It can enable both sides of the transmission service to establish a connection and generate secret keys through an untrusted relay node to ensure information security. However, the types and properties of link nodes in quantum key distribution network (QKDN) based on partially trusted relay are more complex, which can easily result in network fault. Therefore, how to prevent the impact of failure on QKDN has become an urgent problem. In this paper, we propose a protection scheme for QKDN with partially trusted relays. The method deals with trusted and untrusted relays differently and constructs the working and protection paths of the secret key for each service. It reduces resource conflict between the protection and working paths by establishing a key protection threshold, which realizes the resource trade-off between the two factors. Simulation results show that the scheme provides effective protection to the services, and it improves the stability and reliability of QKDN based on partially trusted relay.
To ensure the security of information exchange in software-defined optical networks, quantum key distribution (QKD) based on quantum mechanics is introduced. However, the slow and valuable process of generating quantum key resources contradicts the high-speed data transmission requirements of optical networks. To address this issue, this paper proposes the CPSR-HQKDN scheme, which takes into account factors such as security requests, key demand, key residual, and key update rates for trusted and untrusted links. This approach improves resource utilization and service efficiency by optimizing the processing order of key requests. Moreover, the routing strategy dynamically adjusts based on the network resource environment, thereby increasing the success rate of key requests. Through simulation experiments comparing the performance of the CPSR-HQKDN routing scheme with existing schemes, it is observed that in high-concurrent scenarios, the CPSR-HQKDN routing scheme can improve the success rate of key requests by at least 5%.
Quantum Key Distribution (QKD) has demonstrated unique and significant advantages in secure communication. In particular, Measurement-Device-Independent QKD (MDI-QKD), which is independent of measurement devices, increases data transmission distances and addresses the issue of low security in trusted relays. Therefore, in this work, we investigate QKD networks based on trusted and untrusted relays over optical backbone networks, providing a cost-optimal solution for the deployment and implementation of QKD networks. Specifically, this paper describes the QKD network and defines a new cost model, which not only fully considers the diverse impact factors of deployment costs but also meets the requirements for sharing network elements in response to different QKD chain requests. Based on cost model, this paper further proposes a cost-optimal heuristic algorithm for hybrid QKD network deployment, which can provide an economical and secure deployment solution for QKD networks. Extensive simulation experiments are conducted and the experimental results show that the proposed method outperforms current mainstream QKD network deployment algorithms in both deployment cost and security. Moreover, as the network scale increases, the advantages of our algorithm become more pronounced. Compared to mainstream algorithms, our method achieve an improvement of 17.7% -64.3% in cost savings and 1.19 to 3.24 times in security levels.