Network functions virtualization (NFV) refers to replacing actual network appliances with virtual machines. A virtual machine monitor (VMM) has been used effectively in operating networking software and routing and load-balancing procedures. It is software that allows one computer to run multiple virtual machines (VMs) by sharing its resources virtually. Quantum key distribution (QKD) is a novel security technology that utilizes quantum mechanical principles to perform its functions. These functions include the exchange of a secret key and the provision of absolute protection. One of the unique capabilities QKD possesses, which is not found in other encryption techniques, is the ability to identify the existence of an eavesdropper. To accommodate the ever-increasing demand, service providers must increase their network infrastructure investments. In this study, we create a NFV system to generate a virtual quantum key distribution relay with virtual machines (VMs) and Amazon Web Services (AWS). The results of comparing quantum key distribution in a virtual environment and a traditional environment are as follows: the gain time in the virtual environment was approximately 0.0156 per second, with valid keys, while the traditional environment had a minimum time of 0.0312 per second, and the keys were invalid. The quantum bit error rate (QBER) is lower in NFV than in traditional methods.
Network functions virtualization (NFV) refers to replacing actual network appliances with virtual machines. A virtual machine monitor (VMM) has been used effectively in operating networking software and routing and load-balancing procedures. It is software that allows one computer to run multiple virtual machines (VMs) by sharing its resources virtually. Quantum key distribution (QKD) is a novel security technology that utilizes quantum mechanical principles to perform its functions. These functions include the exchange of a secret key and the provision of absolute protection. One of the unique capabilities QKD possesses, which is not found in other encryption techniques, is the ability to identify the existence of an eavesdropper. To accommodate the ever-increasing demand, service providers must increase their network infrastructure investments. In this study, we create a NFV system to generate a virtual quantum key distribution relay with virtual machines (VMs) and Amazon Web Services (AWS). The results of comparing quantum key distribution in a virtual environment and a traditional environment are as follows: the gain time in the virtual environment was approximately 0.0156 per second, with valid keys, while the traditional environment had a minimum time of 0.0312 per second, and the keys were invalid. The quantum bit error rate (QBER) is lower in NFV than in traditional methods.
Quantum key distribution (QKD) is a state-of-the-art method of generating cryptographic keys by exchanging single photons. Measurements on the photons are constrained by the laws of quantum mechanics, and it is from this that the keys derive their security. Current public key encryption relies on mathematical problems that cannot be solved efficiently using present-day technologies; however, it is vulnerable to computational advances. In contrast QKD generates truly random keys secured against computational advances and more general attacks when implemented properly. On the other hand, networks are moving towards a process of softwarization with the main objective to reduce cost in both, the deployment and in the network maintenance. This process replaces traditional network functionalities (or even full network instances) typically performed in network devices to be located as software distributed across commodity data centers. Within this context, network function virtualization (NFV) is a new concept in which operations of current proprietary hardware appliances are decoupled and run as software instances. However, the security of NFV still needs to be addressed prior to deployment in the real world. In particular, virtual network function (VNF) distribution across data centers is a risk for network operators, as an eavesdropper could compromise not just virtualized services, but the whole infrastructure. We demonstrate, for the first time, a secure architectural solution for VNF distribution, combining NFV orchestration and QKD technology by scheduling an optical network using SDN. A time-shared approach is designed and presented as a cost-effective solution for practical deployment, showing the performance of different quantum links in a distributed environment.
Quantum key distribution (QKD) is a state-of-the-art method of generating cryptographic keys by exchanging single photons. Measurements on the photons are constrained by the laws of quantum mechanics, and it is from this that the keys derive their security. Current public key encryption relies on mathematical problems that cannot be solved efficiently using present-day technologies; however, it is vulnerable to computational advances. In contrast QKD generates truly random keys secured against computational advances and more general attacks when implemented properly. On the other hand, networks are moving towards a process of softwarization with the main objective to reduce cost in both, the deployment and in the network maintenance. This process replaces traditional network functionalities (or even full network instances) typically performed in network devices to be located as software distributed across commodity data centers. Within this context, network function virtualization (NFV) is a new concept in which operations of current proprietary hardware appliances are decoupled and run as software instances. However, the security of NFV still needs to be addressed prior to deployment in the real world. In particular, virtual network function (VNF) distribution across data centers is a risk for network operators, as an eavesdropper could compromise not just virtualized services, but the whole infrastructure. We demonstrate, for the first time, a secure architectural solution for VNF distribution, combining NFV orchestration and QKD technology by scheduling an optical network using SDN. A time-shared approach is designed and presented as a cost-effective solution for practical deployment, showing the performance of different quantum links in a distributed environment.
Today’s networks are quickly evolving toward more dynamic and flexible infrastructures and architectures. This software-based evolution has seen its peak with the development of the software-defined networking (SDN) and network functions virtualization (NFV) paradigms. These new concepts allow operators to automate the setup of services, thus reducing costs in deploying and operating the required infrastructure. On the other hand, these novel paradigms expose new vulnerabilities, as critical information travels through the infrastructure from central offices, down to remote data centers and network devices. Quantum key distribution (QKD) is a state-of-the-art technology that can be seen as a source of symmetric keys in two separated domains. It is immune to any algorithmic cryptanalysis and is thus suitable for long-term security. This technology is based on the laws of physics, which forbids us from copying the quantum states exchanged between two endpoints from which a secret key can be extracted. Thus, even though it has some limitations, a correct implementation can deliver keys of the highest security. In this paper, we propose the integration of QKD systems with well-known protocols and methodologies to secure the network’s control plane in an SDN and NFV environment. Furthermore, we experimentally demonstrate a workflow where QKD keys are used together with classically generated keys to encrypt communications between cloud and SDN platforms for setting up a service via secure shell, while showcasing the applicability to other cryptographic protocols.
There is a great attention to quantum technologies in the ICT environment. In particular, when dealing with security matters, the most prominent quantum technology is Quantum Key Distribution (QKD). QKD allows the sharing of symmetric keys with information theoretic security (ITS, i.e. independently of the computational power of the attacker) between two remote network nodes. QKD is the only known method to share a key able to reach ITS. During the last two decades, there has been a tremendous technological progress in QKD research, that has led to the availability of QKD network demonstrators.Software Defined Networks (SDN) enables the automation of service provisioning within network operator infrastructures. With the advent of web-scale services and dynamic network requirements, operators can not anymore deploy their services based on manual intervention or using proprietary vendor solutions. Programmability is key in the next-generation network infrastructure and any new technology must be integrated with this paradigm. Let us highlight that this requirement is even more important with virtual environments, where a Virtual Network Function (VNF) can be deployed in any point-of-presence of the operator. The new 5G deployments will enable operators to have edge computing services supporting different capabilities, thus increasing even more the complexity to deliver services without any automation.In spite of the high potential of QKD, this technology has not yet found its path to wide adoption, commercialization and deployment. QKD is a physical technology that requires the existence of a quantum channel, a physical connection able to transmit quantum bits without perturbation, making hard its integration in networks. The aim of this document is to present how QKD can be deployed in next generation infrastructures, based on realistic scenarios. To do so, this paper describes the technological components of the solutions, as well as the use cases that motivate such effort. These use cases are described from a telecommunication provider's point of view, as they are the actors in charge of deploying QKD systems in their networks.
The nature of network services has drastically changed in recent years. New demands require new capabilities, forcing the infrastructure to dynamically adapt to new scenarios. Novel network paradigms, such as software-defined networking (SDN) and network functions virtualization, have appeared to provide flexibility for network management and services. The reliance on software and commoditized hardware of these new paradigms introduces new security threats and, consequently, one of the most desired capabilities is a strengthened security layer when connecting remote premises. On the other hand, traditional cryptographic protocols are based on computational complexity assumptions. They rely on certain mathematical problems (e.g., integer factorization, discrete logarithms, or elliptic curves) that cannot be efficiently solved using conventional computing. This general assumption is being revisited because of quantum computing. The creation of a quantum computer would put these protocols at risk and force a general overhaul of network security. Quantum key distribution (QKD) is a novel technique for providing synchronized sources of symmetric keys between two separated domains. Its security is based on the fundamental laws of quantum physics, which makes it impossible to copy the quantum states exchanged between both endpoints. Therefore, if implemented properly, QKD generates highly secure keys, immune to any algorithmic cryptanalysis. This work proposes a node design to provide QKD-enhanced security in end-to-end services and analyze the control plane requirements for service provisioning in transport networks. We define and demonstrate the necessary workflows and protocol extensions in different SDN scenarios, integrating the proposed solution into a virtual router providing QKD-enhanced IPsec sessions.
Quantum Key Distribution (QKD) provides an state-of-the-art solution that work toward to enhance security of network and performance contrast to conventional systems. This paper focal point on the utilize of QKD to authorize secure orchestration and authorize network functions virtualization (NFV). The QKD-based solution is contrast with presenting solutions utilizing applying science and security KPIs.The outcomes display that the QKD solution exceed conventional solutions, with throughput stretch out 250 Mbit/s contrast to 150 Mbit/s, and response time of 4 ms versus 10 ms. The bit error rate (BER) registered a notable depletion to 1.2e-10 contrast to 1.8e-9, and an interception rate of 0% against 5% in conventional systems was attained.The work as well appears that the time wanted to distribute quantum keys is at most 4 ms, with a key exchange success rate of 99.8%. The model also give a demonstration of peak attack resistance with 100 successfully blocked hacking attempts registered. in spite of an extra 10ms data encryption processing time and a small 3% throughput effect, the general performance remainder marvelous with a network function deployment time of 150ms and only 0.1% packet loss.These measure reveal the efficacy of QKD in enhancing the security and efficiency of virtual networks. The paper give empirical perceptions to hold up the implementation of quantum security techniques in time ahead network infrastructures.