As the foundation of quantum secure communication, the quantum key distribution (QKD) network is impossible to construct by using the operation mechanism of traditional networks. In the meantime, most of the existing QKD network routing schemes do not fit some specific quantum key practicality scenarios. Aiming at the special scenario of high concurrency and large differences in application requirements, we propose a new quantum key distribution network routing scheme based on application priority ranking (APR-QKDN). Firstly, the proposed APR-QKDN scheme comprehensively uses the application's priority, the total amount of key requirements, and the key update rate for prioritizing a large number of concurrent requests. The resource utilization and service efficiency of the network are improved by adjusting the processing order of requests. Secondly, the queuing strategy of the request comprehensively considers the current network resource situation. This means the same key request may adopt different evaluation strategies based on different network resource environments. Finally, the performance of the APR-QKDN routing scheme is compared with the existing schemes through simulation experiments. The results show that the success rate of application key requests of the APR-QKDN routing scheme is improved by at least 5% in the scenario of high concurrency.
As the foundation of quantum secure communication, the quantum key distribution (QKD) network is impossible to construct by using the operation mechanism of traditional networks. In the meantime, most of the existing QKD network routing schemes do not fit some specific quantum key practicality scenarios. Aiming at the special scenario of high concurrency and large differences in application requirements, we propose a new quantum key distribution network routing scheme based on application priority ranking (APR-QKDN). Firstly, the proposed APR-QKDN scheme comprehensively uses the application's priority, the total amount of key requirements, and the key update rate for prioritizing a large number of concurrent requests. The resource utilization and service efficiency of the network are improved by adjusting the processing order of requests. Secondly, the queuing strategy of the request comprehensively considers the current network resource situation. This means the same key request may adopt different evaluation strategies based on different network resource environments. Finally, the performance of the APR-QKDN routing scheme is compared with the existing schemes through simulation experiments. The results show that the success rate of application key requests of the APR-QKDN routing scheme is improved by at least 5% in the scenario of high concurrency.
In quantum key distribution (QKD)-secured optical networks, blocking increases with the number of QKD lightpath requests as well as with the number of times modification required to improve the security level of QKD lightpath requests. The blocking is severe problem in such networks because of the limited number of resources (wavelengths and time-slots) in each fiber link. In this paper, we propose a priority order-based routing wavelength and time-slot allocation (POB-RWTA) scheme to reduce the blocking of QKD lightpath requests. In the proposed POB-RWTA scheme, the QKD lightpath requests are served according to their priority order. The priority order of each QKD lightpath request is based on the security level. The blocking of high priority lightpath requests (HPLRs) and total incoming QKD lightpath requests due to limited resources can be reduced using the above criterion of priority order. The performance analysis of the proposed POB-RWTA scheme is made in terms of the success probability of QKD lightpath requests considering different wavelengths for QSCh and the probability of secret key update failure. We compared the proposed POB-RWTA scheme with a non-priority order-based routing wavelength and time-slot allocation (NPOB-RWTA) scheme. Simulations performed on NSFNET topology show that by using the POB-RWTA scheme, the success probability of HPLRs and total incoming QKD lightpath requests are significantly improved as compared to NPOB-RWTA.
Hybrid-trusted Quantum Key Distribution (QKD) networks face unique security challenges due to semi-trusted nodes. These nodes may introduce security threats such as man-in-the-middle attacks and key storage side-channel leakage. With the increasing complexity of QKD network architectures and expanding application scenarios, substantial divergences have emerged between user requirements for communication duration and cryptographic security demands. To address security challenges in hybrid-trusted QKD environments and provide differentiated services for users with varying requirements, this paper proposes a Service Requirement-based Hybrid-Trusted QKD Network (SRHT-QKDN) routing scheme. We propose a time-slot allocation model for QKD that employs time-slot resources as substitutes for key-generation resources in resource allocation processes. For sustained key distribution required by prolonged communications, the scheme implements two distinct time slot allocation algorithms: continuous-consistent and discrete-inconsistent allocation, enabling periodic quantum key updates. Concurrently, QKD requests are classified into three security levels, with corresponding routing strategies developed for each tier to achieve security service differentiation while maintaining routing success rates. Simulations conducted under four distinct operational conditions demonstrate that the SRHT-QKDN routing scheme not only effectively fulfills key continuity requirements but also achieves optimal overall performance in request success rate and security assurance, outperforming two benchmark routing schemes.
Quantum key distribution (QKD) is a technology that can resist the threat of quantum computers to existing conventional cryptographic protocols. However, due to the stringent requirements of the quantum key generation environment, the generated quantum keys are considered valuable, and the slow key generation rate conflicts with the high-speed data transmission in traditional optical networks. In this paper, for the QKD network with a trusted relay, which is mainly based on point-to-point quantum keys and has complex changes in network resources, we aim to allocate resources reasonably for data packet distribution. Firstly, we formulate a linear programming constraint model for the key resource allocation (KRA) problem based on the time-slot scheduling. Secondly, we propose a new scheduling scheme based on the graded key security requirements (GKSR) and a new micro-log key storage algorithm for effective storage and management of key resources. Finally, we propose a key resource consumption (KRC) routing optimization algorithm to properly allocate time slots, routes, and key resources. Simulation results show that the proposed scheme significantly improves the key distribution success rate and key resource utilization rate, among others.
As an emerging technology, Quantum Key Distribution (QKD) can provide information-theoretically secure keys for cryptographic purposes and it attracts worldwide attention. To extend its service capabilities from point-to-point communication to arbitrary remote communication parties, large-scale QKD network construction is underway. However, the dynamic and limited available resources of QKD networks remain a major obstacle to routing design. Numerous studies aim at designing routing schemes to maximize the overall network performance. While these routing schemes efficiently support end-to-end key relaying, their effectiveness diminishes when addressing diverse Quality of Service (QoS) requirements. In this paper, we propose an on-demand routing scheme with QoS provisioning to enhance end-to-end key relaying rates. Our scheme operates in two phases: an on-demand resource probing phase to dynamically update global network resource information and a routing decision phase that leverages a maximum flow model to optimize key relaying while satisfying rate-demand constraints. Simulation results on the SimQN platform demonstrate that the proposed scheme significantly improves end-to-end key relaying through-put and delay, providing effective QoS support for rate-demand QKD applications.
Current and next-generation networks are threatened by emerging attacks from quantum computers. To protect these services against quantum threat, quantum key distribution (QKD) using optical networks is being investigated and tested as a safe countermeasure to provide information-theoretic security. Although recent studies confirm the feasibility of QKD over optical networks, two main technical challenges, among others, remain unaddressed: the limited rate of generating keys requires efficient key distribution to secure the numerous applications, and as key requests from applications can be characterized by different importance, QKD networks need a key distribution platform that accounts for such diversity. To address these challenges, we propose to incorporate the paradigm of Information-Centric Networking (ICN) within the QKD process, and we describe a novel information-centric quantum key distribution (IC-QKD) network for efficient and differentiated key distribution. We first design a semantic-based key distribution scheme, which leverages ICN to incorporate the knowledge of application importance in QKD and to enhance the resource efficiency of QKD by decoupling the sender from its receiver. We then propose an in-network key-caching scheme, which is especially advantageous for multi-cast applications, as keys can be cached and reused for multiple users of a multicast group to accelerate key distribution. Finally, we design a semantic-based application analysis for semantic-based key caching and distribution, which serves various applications with different priorities. Simulation results show that the proposed QKD network can reach up to about 16 percent increase in the capability of serving key requests with respect to the existing QKD network.
To ensure the security of information exchange in software-defined optical networks, quantum key distribution (QKD) based on quantum mechanics is introduced. However, the slow and valuable process of generating quantum key resources contradicts the high-speed data transmission requirements of optical networks. To address this issue, this paper proposes the CPSR-HQKDN scheme, which takes into account factors such as security requests, key demand, key residual, and key update rates for trusted and untrusted links. This approach improves resource utilization and service efficiency by optimizing the processing order of key requests. Moreover, the routing strategy dynamically adjusts based on the network resource environment, thereby increasing the success rate of key requests. Through simulation experiments comparing the performance of the CPSR-HQKDN routing scheme with existing schemes, it is observed that in high-concurrent scenarios, the CPSR-HQKDN routing scheme can improve the success rate of key requests by at least 5%.