Quantum Key Distribution is an emerging technology. On real production networks is starting to be installed due to it can strength robustness in communications and face next threat that Quantum Computing could be in next years if communications are not ready. As a new technology, it is difficult to integrate or interoperate with it without the necessary standards or interfaces, Software Defined Networking is presented as a solution to integrate QKD in real environments thanks to an approach based on standards, models, and interfaces. NETCONF and RESTCONF are protocols well known by the community oriented to manage devices remotely based on models that are integrated on SDN environments, in this sense, a Trusted Node can be configurable and manageable if we consider it as a device instead of a set of elements. In this paper we propose a method for the integration and management of Trusted Nodes on SDN independently of the transport protocol between the SDN logically centralized Controller and each QKD Node to provide end to end symmetric key for final application services
Quantum Key Distribution is an emerging technology. On real production networks is starting to be installed due to it can strength robustness in communications and face next threat that Quantum Computing could be in next years if communications are not ready. As a new technology, it is difficult to integrate or interoperate with it without the necessary standards or interfaces, Software Defined Networking is presented as a solution to integrate QKD in real environments thanks to an approach based on standards, models, and interfaces. NETCONF and RESTCONF are protocols well known by the community oriented to manage devices remotely based on models that are integrated on SDN environments, in this sense, a Trusted Node can be configurable and manageable if we consider it as a device instead of a set of elements. In this paper we propose a method for the integration and management of Trusted Nodes on SDN independently of the transport protocol between the SDN logically centralized Controller and each QKD Node to provide end to end symmetric key for final application services
Quantum Key Distribution is emerging as a promising technology to strength the robustness of the current communications. Quantum Computing offers different advantages that the society could use in the future, high computation capabilities, simulation environments that take into account a big quantity of variables, nevertheless, this high computational capabilities introduce threads that the society must be protected also. In this sense, the high computation capabilities can break the security of the current communications in a reasonable amount of time. To avoid this, QKD vendors and Telecommunication operators are investing resources in push Quantum Communications technology into the society. This paper presents how the QKD technology can be use according to well-known protocols and interfaces following the traditional SDN approach. Presenting the interoperability across the three prominent network management protocols: NETCONF, RESTCONF and gNMI/gRPC, enabling efficient orchestration and control while maintaining vendor and protocol independence. Facilitating robust network designs capable of supporting the diverse requirements of modern quantum secure communication infrastructures.
Quantum Key Distribution is emerging as a promising technology to increase the robustness of current communications. Quantum Computing promises substantial benefits for society, particularly through its ability to solve complex mathematical problems far more efficiently than classical systems. However, these emerging computational capabilities also introduce significant security risks that must be mitigated to preserve the integrity of worldwide communication infrastructures. A primary concern is the potential for quantum algorithms to break widely deployed cryptographic schemes within operationally feasible timeframes. To counter this threat, industry and academia are investing considerable effort and resources into advancing quantum communication technologies and accelerating their adoption across world wide networks. Software-Defined Networking (SDN) is increasingly becoming the de-facto architectural paradigm for enabling the deployment and operation of QKD networks. Also the adoption of emerging standards that build upon this new network model, such as ETSI GS QKD 015, plays a crucial role in the adoption of this new technology. In this paper, we present a qualitative analysis of key SDN communication protocols, including NETCONF, RESTCONF, and gNMI/gRPC, evaluated within a real, industrial-grade QKD network. This assessment provides a realistic comparison of their capabilities, limitations, and practical suitability for managing quantum-safe communication infrastructures.
Quantum Key Distribution (QKD) is one of the major cryptographic solutions to tackle the security threats associated to future computational advances, in particular those coming from quantum computing. At the most simple level, QKD can be seen as a highly secure source of symmetric secret keys in two separated places. Nonetheless, the lack of standardization and the strong requirements from the physical layer makes this technology very difficult to integrate in existing infrastructure.However, the success of QKD networks radically depends on the degree in which they can be adopted in the existing infrastructure, and it is a must that it happens via standard protocols and interfaces. The flexibility of novel network paradigms, like Software-Defined Networking (SDN), allows for a faster adoption of new concepts, hardware and services in telecommunications networks. This paradigm can be used for quantum communications, allowing for a fast and scalable deployment of quantum technologies and services in the telecommunications network to a degree that was simply impossible in previous schemes, where the different network devices and their connections should be modified, one by one, to create a quantum communications channel.This tutorial provides an introduction to existing QKD technologies and networks, followed by a descriptive explanation on how SDN principles can be utilized to abstract and integrate QKD systems as part of the network management. This will help to reduce the time-to-market for quantum technologies, and also will make quantum cryptography available as a service to be capitalized by the network operators.
Software Defined Networking is increasingly seen as one of the best choices to create a Quantum Key Distribution (QKD) Network, especially if the aim is also its integration into a standard telecommunications network. The degree of flexibility afforded by this paradigm allows the creation of a network whose control mechanisms can be made aware simultaneously of the capabilities installed at the classical optical transport level as well as those at the quantum level. This is interesting not only to manage the coexistence between a classical and a quantum network sharing the same infrastructure, but also for future applications beyond QKD. This flexibility is due to a formal separation between the control and data forwarding planes. The logically centralized SDN controller gathers all relevant information monitoring the behavior of the hole network. It can act on the programmable quantum or classical devices opening many possibilities to share a common infrastructure, that can reach even the level of a single fiber strand to manage the signals that go through it in a compatible way. The same controller can use this information to manage the fundamental task of a QKD network, namely the key transport. Here we briefly report on the implementation of the SDN-QKD controller used in the Madrid testbed and its use to allow multi-vendor end-to-end key transport between any two nodes in the network.
This paper demonstrates the use of software-defined networking (SDN) orchestration to integrate regionally separated networks in which different network parts use incompatible key management systems (KMSs) managed by different SDN controllers to ensure end-to-end QKD service provisioning to deliver the QKD keys between geographically different QKD networks. The study focuses on scenarios in which different parts of the network are managed separately by different SDN controllers, requiring an SDN orchestrator to coordinate and manage these controllers. In practical network deployments, operators often utilize multiple vendors for their network equipment. This practice also enables the expansion of the QKD network's coverage by interconnecting various QKD networks equipped with devices from different vendors. However, as coordinating different parts of the QKD network is a complex task, this paper proposes the implementation of an SDN orchestrator which acts as a central entity to manage multiple SDN controllers, ensuring end-to-end QKD service provisioning to address this challenge. For instance, when there are multiple border nodes to interconnect different networks, the SDN orchestrator calculates the path in advance for the end-to-end delivery of keys between initiating and target applications belonging to different networks. This path selection requires the SDN orchestrator to gather information from each SDN controller managing the respective parts of the QKD network. This work shows the practical implementation of SDN orchestration for interoperable KMS in commercial QKD networks in South Korea. By employing an SDN orchestrator, it becomes possible to coordinate multiple SDN controllers and ensure the efficient and secure delivery of QKD keys between different QKD networks with varying vendor equipment.
Software-defined networking (SDN) has emerged as a promising paradigm for managing and controlling network resources efficiently. However, ensuring the security of data packets transmitted within an SDN environment remains a critical challenge. Traditional networking relies on static configurations, while SDN offers dynamic control and programmability, revolutionizing network management. In SDN, the application layer employs tools like OpenDaylight and Mininet for network management and testing. The control layer, managed by controllers such as Floodlight or ONOS, orchestrates traffic flow among switches. In the infrastructure layer, Quantum Key Distribution (QKD) with the BB84 protocol ensures secure communication. Together, these layers enable agile, programmable, and secure networking paradigms. This paper proposes integrating quantum key distribution (QKD) into SDN architectures to bolster packet-level security. By leveraging quantum entanglement and uncertainty, a secure communication channel between SDN controllers and switches is established, resilient to quantum attacks. Evaluation through simulations and real-world experiments demonstrates efficacy in mitigating security threats while minimizing overhead and latency, advancing SDN security IEEE 802.1X capabilities and leveraging quantum technologies for cybersecurity.