First cross-border trial of quantum key distribution sharing fiber line with data and accurate time transmissions
Josef Vojtěch, Rudolf Vohnout, Ondřej Havliš, Petr Pospisil, Martin Šlapák, Radek Velc, Lada Altmannová, Tomáš Horváth, Jan Kundrát, Michal Hažlinský, Elisabeth Andriantsarazo, Piotr Ridlichowski
This contribution focuses on experimental verification of the QKD system deployment in a multi-domain network environment managed by Czech and Polish National Research and Educational Network (NREN) operators. We demonstrate full functionality of such a solution for transmission of secret keys in boundary conditions, and with this we open up new possibilities for further use of extremely secure communication between two neighboring network entities, and the services built upon it. Moreover, we have shared the cross-border link among strong QKD service channels, accurate time, and classical data channels together with weak quantum channel to reduce the total number of optical fibers needed for transmission. To our knowledge, this is the first shared cross-border QKD transmission in the region of Central and Eastern Europe (CEE).
This contribution focuses on experimental verification of the QKD system deployment in a multi-domain network environment managed by Czech and Polish National Research and Educational Network (NREN) operators. We demonstrate full functionality of such a solution for transmission of secret keys in boundary conditions, and with this we open up new possibilities for further use of extremely secure communication between two neighboring network entities, and the services built upon it. Moreover, we have shared the cross-border link among strong QKD service channels, accurate time, and classical data channels together with weak quantum channel to reduce the total number of optical fibers needed for transmission. To our knowledge, this is the first shared cross-border QKD transmission in the region of Central and Eastern Europe (CEE).
Quantum Key Distribution (QKD), based on the laws of physics rather than the computational \ncomplexity of mathematical problems, provides a secure way of establishing symmetrical binary \nkeys between two geographically distant users. The keys are secure from eavesdropping during \ntransmission and QKD ensures that any third party’s knowledge of the key is reduced to a \nminimum. In recent years, a noticeable progress in the development of quantum equipment has \nbeen reflected through a number of successful demonstrations of QKD technology. While they \nshow the great achievements of QKD, many practical difficulties still need to be resolved, such as \nto provide better service differentiation. These networks are characterized as being multihop in \nnature where the consumption key rate is often higher than the charging key rate, which means that \nthe links are available for a limited period of time only. Such features impose several challenges \non the effective modeling and evaluation of reliability as well as finding appropriate Quality \nof Service (QoS) solution. This thesis focuses on research in the field of QKD for securing \nreal-time communication by supporting QoS in QKD networks including a novel QoS model \nand novel distributed reactive routing protocol to achieve high-level scalability and minimize the \nconsumption of key material used for securing routing data. \nAs research in QKD networks grows larger and more complex, the need for highly accurate and \nscalable simulation technologies becomes important to assess the practical feasibility and foresee \ndifficulties in the practical implementation of theoretical achievements. Due to the specificity of \nQKD link which requires optical/quantum and Internet connection between the network nodes, it \nis very costly to deploy a complete testbed containing multiple network hosts and links to validate \nand verify a certain network algorithm or protocol. The network simulators in these circumstances \nsave a lot of money and time in accomplishing such task. A simulation environment offers the \ncreation of complex network topologies, a high degree of control and repeatable experiments, \nwhich in turn allows researchers to conduct exactly the same experiments and confirm their results. \nThis thesis describes the design and implementation of QKD network simulation module which \nwas developed in the network simulator of version 3 (NS-3). The module supports simulation \nof QKD network in overlay mode or in a single TCP/IP mode. Therefore, it can be used for \nsimulation of other network technologies regardless of QKD. \nImplemented simulation model was used for verification of proposed QoS solution. A number \nof simulations were performed. The obtained data have confirmed the primary thesis of this study, \nthat it is possible to use real-time applications in QKD networks.
Quantum technologies promise major advances in different areas. From computation to sensing or telecommunications, quantum implementations could bring significant improvements to these fields, arousing the interest of researchers, companies, and governments. In particular, the deployment of Quantum Key Distribution (QKD) networks, which enable the secure dissemination of cryptographic keys to remote application entities following Quantum Mechanics Principles, appears to be one of the most attractive and relevant use cases. Quantum devices and equipment are still in a development phase, making their availability low and their price high, hindering the deployment of physical QKD networks and, therefore, the research and experimentation activities related to this field. In this context, this paper focuses on providing research stakeholders with an open-access testbed where it is feasible to emulate the deployment of QKD networks, thus enabling the execution of experiments and trials, where even potential network attacks can be analyzed, without the quantum physical equipment requirement, nor compromising the integrity of an already built QKD network. The designed solution allows users to automatically deploy, configure, and run a digital twin environment of a QKD network, offering cost-effectiveness and great flexibility in the study of the integration of quantum communications in the current network infrastructures. This solution is aligned with the European Telecommunications Standard Institute (ETSI) standardized application interface for QKD, and is built upon open-source technologies. The feasibility of this solution has been validated throughout several functional trials carried out in the 5G Telefónica Open Network Innovation Centre (5TONIC), verifying the service performance in terms of speed and discarded qubits when generating the quantum keys.
Abstract In this paper, we present an inter-city Quantum Key Distribution network testbed spanning tens of kilometers within the Central Bohemian Region. The testbed operates under harsh conditions, leveraging a robust fiber-optic infrastructure. Specifically, the quantum key distribution devices using two different key generating protocols underwent rigorous testing during winter months. The experiment assesses the performance and stability of quantum key distribution devices in a communication channel under real-world conditions. A quantum channel utilized for this experiment was established along the railway tracks provided by the Czech Railway Administration. Our findings contribute to advancing secure quantum communication networks by addressing key rate stability challenges. An upper bound for relative secret key rate deviation is introduced to support link design. Moreover, it has been experimentally verified that the measured key rate demonstrated robust stability despite its quantum nature and strong influence from outside conditions.
QKD technology is being increasingly adopted inside the network core for protecting information transport against any form of computational attacks. However, the use of QKD for wide-area internetworking is still challenging and costly, due to its strong trust assumptions and the low achievable key rates in long QKD links. This paper presents a standards-driven design and implementation of a unified hybrid key delivery service for a network of isolated QKD domains (subnetworks using QKD as provider technology for secret key generation) connected via classical WAN links. The framework follows a distributed architecture and uses a hybrid approach where keys generated in a domain are securely relayed to other domains with PQC (Kyber), dynamically routed, and managed at the system level. The solution has been implemented in an operational testbed comprising three regional subnetworks. We present the design principles, the deployment, and the experimental performance results for this scalable key delivery service.
The European Quantum Communication Infrastructure (EuroQCI) initiative is fostering the deployment of national quantum key distribution (QKD) testbeds across the European Union. In this context, we report on the design, implementation, and evaluation of the Austrian testbed, with a particular focus on advances in key management and applicationlevel integration of QKD. First, we introduce a hybrid key management system (KMS) that combines QKD-derived keys in a decentralized architecture with post-quantum authenticated key exchange, enabling end-to-end hybrid keys while reducing trust assumptions in intermediate nodes. Second, we present three QKD-enabled applications: (i) a secure secret-sharing-based storage system leveraging QKD-protected share distribution, (ii) a QKD-integrated extension of Jitsi employing ETSI GS QKD 014 group keys to reduce overhead in multi-party communication, and (iii) a hybrid QKD/PQC WireGuard-based VPN enabling QKD-secured HSM backup operations without requiring modifications to proprietary HSM protocols. Finally, we describe the deployment of these solutions in a national network comprising a four-node metropolitan testbed and a 200 km long-distance link with trusted nodes, and provide performance measurements for both the network and the hybrid KMS. Together, these results demonstrate the feasibility of integrating QKD into heterogeneous applications and hybrid cryptographic infrastructures.
In a society based on the continuous exchange of sensitive data and information, the importance of secure and trustful communications is essential. Quantum key distribution (QKD) makes it possible to share data in an unconditionally secure way exploiting the basic principles of Quantum Mechanics [1]. During the last 30 years, many QKD protocols have been developed and tested, achieving long distance transmission [2] and secret key rates up to hundreds of Mbits per second [3]. However, this technology is still far from a large-scale deployment in existing fiber networks and telecom infrastructures, due to multiple factors: low secret-key rate, limited distance between users, lack of applications, high costs and high requirements in terms of low noise fiber links.