Employing Quantum Key Distribution for Enhancing Network Security

Xiang‐Bin Wang, Hao Ying, Huai-xing Ma +3 more

Yuan Cao, Yongli Zhao, Jianquan Wang +3 more

In the Internet Age, optical networks are vulnerable to numerous cyberattacks, and conventional key distribution methods suffer from the increased computational power. QKD can distribute information-theoretically secure secret keys between two parties based on the principles of quantum mechanics. Integrating QKD into optical networks can leverage existing fiber infrastructures with wavelength division multiplexing for the practical deployment of secret keys, and accordingly employ the secret keys for optical-layer security enhancement. Then, how to efficiently deploy and employ secret keys over QKD-integrated optical networks are emerging as two challenges. This article proposes a framework of key as a service (KaaS, i.e., providing secret keys as a service in a timely and accurate manner to satisfy the security requirements) to jointly overcome these two challenges. To enable the typical functions (i.e., secret-key deployment and employment) in KaaS, two secret-key virtualization steps, that is, key pool (KP) assembly and virtual key pool (VKP) assembly, are introduced. Also, we illustrate a new QKD-integrated optical network architecture from a holistic view, where the control layer is implemented by software defined networking for efficient network management. A time-shared KP assembly strategy and an on-demand VKP assembly strategy are presented for KaaS implementation. The success probabilities of KP assembly and VKP assembly are defined to evaluate the benefits of KaaS for efficiently deploying and employing secret keys as well as for security enhancement over QKD-integrated optical networks.

Jincheng Zhang

This paper proposes a novel approach to secure communication networks utilizing Quantum Key Distribution (QKD) networks integrated with a Proof-Carrying Protocol (PCP). The core idea centers around establishing cryptographic keys through QKD and then employing a classical network infrastructure, alongside a PCP, to verify the authenticity of these keys. This architecture aims to bridge the gap between the theoretically secure quantum key exchange and the practical demands of existing communication networks. The proposed system leverages the inherent security of QKD against eavesdropping attacks while maintaining the flexibility and robustness of classical networks. The key mathematical components, including QKD protocols and PCP mechanisms, are detailed, highlighting the synergy between quantum and classical approaches for enhanced security. This research contributes a viable pathway for building future secure communication systems, particularly in environments where traditional cryptographic methods are vulnerable to advancements in computing power, including quantum computing.

이충만

Norbert Lütkenhaus

Jincheng Zhang

This paper introduces a novel distributed computing framework leveraging quantum information networks, specifically focusing on the utilization of quantum entanglement and quantum key distribution (QKD) for enhanced scalability and security. We propose a system architecture that constructs a quantum entanglement network to facilitate parallel computations, utilizing quantum key distribution for secure data transfer. The framework addresses limitations of traditional computing by offering a fundamentally new approach to computational power, security, and scalability. The core mechanism involves building a quantum entanglement network, optimizing data flow through entanglement, and employing QKD for secure communication and computation. This research explores the potential of quantum information networks to revolutionize distributed computing, with a particular emphasis on achieving massive parallelism and robust data protection.