Applied Sciences

Service for Deploying Digital Twins of QKD Networks

Raul Martin, Blanca López, Iván Vidal, Francisco Valera, Borja Nogales

Published Jan 25, 2024• 13 citations

Abstract

Quantum technologies promise major advances in different areas. From computation to sensing or telecommunications, quantum implementations could bring significant improvements to these fields, arousing the interest of researchers, companies, and governments. In particular, the deployment of Quantum Key Distribution (QKD) networks, which enable the secure dissemination of cryptographic keys to remote application entities following Quantum Mechanics Principles, appears to be one of the most attractive and relevant use cases. Quantum devices and equipment are still in a development phase, making their availability low and their price high, hindering the deployment of physical QKD networks and, therefore, the research and experimentation activities related to this field. In this context, this paper focuses on providing research stakeholders with an open-access testbed where it is feasible to emulate the deployment of QKD networks, thus enabling the execution of experiments and trials, where even potential network attacks can be analyzed, without the quantum physical equipment requirement, nor compromising the integrity of an already built QKD network. The designed solution allows users to automatically deploy, configure, and run a digital twin environment of a QKD network, offering cost-effectiveness and great flexibility in the study of the integration of quantum communications in the current network infrastructures. This solution is aligned with the European Telecommunications Standard Institute (ETSI) standardized application interface for QKD, and is built upon open-source technologies. The feasibility of this solution has been validated throughout several functional trials carried out in the 5G Telefónica Open Network Innovation Centre (5TONIC), verifying the service performance in terms of speed and discarded qubits when generating the quantum keys.

DOI: 10.3390/app14031018

Related papers

Applying QKD to improve next-generation network infrastructures

Vı́ctor López, Antonio Pastor, Diego R. Lopez +2 more

There is a great attention to quantum technologies in the ICT environment. In particular, when dealing with security matters, the most prominent quantum technology is Quantum Key Distribution (QKD). QKD allows the sharing of symmetric keys with information theoretic security (ITS, i.e. independently of the computational power of the attacker) between two remote network nodes. QKD is the only known method to share a key able to reach ITS. During the last two decades, there has been a tremendous technological progress in QKD research, that has led to the availability of QKD network demonstrators.Software Defined Networks (SDN) enables the automation of service provisioning within network operator infrastructures. With the advent of web-scale services and dynamic network requirements, operators can not anymore deploy their services based on manual intervention or using proprietary vendor solutions. Programmability is key in the next-generation network infrastructure and any new technology must be integrated with this paradigm. Let us highlight that this requirement is even more important with virtual environments, where a Virtual Network Function (VNF) can be deployed in any point-of-presence of the operator. The new 5G deployments will enable operators to have edge computing services supporting different capabilities, thus increasing even more the complexity to deliver services without any automation.In spite of the high potential of QKD, this technology has not yet found its path to wide adoption, commercialization and deployment. QKD is a physical technology that requires the existence of a quantum channel, a physical connection able to transmit quantum bits without perturbation, making hard its integration in networks. The aim of this document is to present how QKD can be deployed in next generation infrastructures, based on realistic scenarios. To do so, this paper describes the technological components of the solutions, as well as the use cases that motivate such effort. These use cases are described from a telecommunication provider's point of view, as they are the actors in charge of deploying QKD systems in their networks.

European Conference on Networks and CommunicationsJun 1, 201922 citations

A Digital Twin Approach to Quantum Key Distribution Under Eavesdropping

Angela Diaz-Bricio, Blanca López, Iván Vidal +1 more

Quantum Key Distribution (QKD) enables secure key exchange by leveraging quantum mechanics to provide theoretically unbreakable security. However, practical deployment of QKD networks is limited due to high costs, lack of interoperability of existing commercial products, and complex physical requirements. To address these challenges, digital twins of QKD networks provide an accessible and adaptable solution for testing and experimentation in emulated environments. This work presents the design of a digital twin model that emulates a QKD network under eavesdropping, allowing for realistic analysis of network behavior in the presence of security threats. As an initial stage, an emulation service of a QKD link with an eavesdropper has been implemented using the NetSquid simulator, offering a practical tool for testing QKD security. This model offers a versatile framework that can be adapted for use in different platforms and applications, providing not only a means to understand this threat and assess countermeasure effectiveness but also a method to analyze how attacks impact exchanged keys and the timing of key distribution.

International Conference on Quantum Communications, Networking, and Computing (QCNC)Mar 31, 20251 citation

An Enhanced Virtualized Control and Key Management Model for QKD Networks

Blanca López, Iván Vidal, Francisco Valera +1 more

The advent of softwarization and disaggregated architectures has transformed modern communication networks, sparking innovation by separating network functionalities from the underlying hardware. Following this trend, in future quantum networks, the virtualization and softwarization of critical components will be essential to achieve global interoperability and enhance adaptability. Virtualization allows for the abstraction of hardware resources, making it easier to manage and scale networks dynamically, while softwarization promotes flexibility, reconfigurability, and interoperability by enabling the use of standardized, software-defined protocols that can be easily updated and modified to work across diverse and evolving network environments. In this paper, we introduce and examine an operational model for QKD networks that leverages the virtualization of control and key management functionalities. We detail its elements and procedures to optimize QKD services. The design paves the way for the integration of quantum network with functions already established in modern mobile networks while adhering to established QKD network standards. The proposed operational model has been validated at the 5G Telefonica Open Network Innovation Centre (5TONIC) using an environment that deploys digital twins of QKD networks.

IEEE NetworkFeb 4, 202511 citations

Enabling Quantum Key Distribution Networks via Software-Defined Networking

Alejandro Aguado, Vı́ctor López, Juan P. Brito +3 more

Quantum Key Distribution (QKD) is one of the major cryptographic solutions to tackle the security threats associated to future computational advances, in particular those coming from quantum computing. At the most simple level, QKD can be seen as a highly secure source of symmetric secret keys in two separated places. Nonetheless, the lack of standardization and the strong requirements from the physical layer makes this technology very difficult to integrate in existing infrastructure.However, the success of QKD networks radically depends on the degree in which they can be adopted in the existing infrastructure, and it is a must that it happens via standard protocols and interfaces. The flexibility of novel network paradigms, like Software-Defined Networking (SDN), allows for a faster adoption of new concepts, hardware and services in telecommunications networks. This paradigm can be used for quantum communications, allowing for a fast and scalable deployment of quantum technologies and services in the telecommunications network to a degree that was simply impossible in previous schemes, where the different network devices and their connections should be modified, one by one, to create a quantum communications channel.This tutorial provides an introduction to existing QKD technologies and networks, followed by a descriptive explanation on how SDN principles can be utilized to abstract and integrate QKD systems as part of the network management. This will help to reduce the time-to-market for quantum technologies, and also will make quantum cryptography available as a service to be capitalized by the network operators.

International Conference on Optical Network Design and Modeling (ONDM)May 1, 202032 citations

Quantum Data Encryption as a Service on Demand: Eindhoven QKD Network Testbed

Thiago R. Raddo, Simon Rommel, Victor Land +2 more

The widespread acceptance and deployment of quantum key distribution (QKD) for data encryption requires a better understanding of the technology concerning device-to-system interfacing and network performance from current vendors. Despite the existence of a few QKD testbeds worldwide, they are neither open-access nor capable of validating components from different system and component vendors business cases. User trials in testbeds have yet to yield a robust, open business case. This paper introduces the open-access QKD testbed currently being developed in the Eindhoven region which will focus on the creation of an open environment for end-to-end validation of distinct business cases, QKD security proofs, and technology certification and standardization. At this site, a quantum-to-the-home network scenario for providing quantum encryption as a service on demand, for end-to-end security to end-users, is also proposed. It is expected that this testbed will lead to a better understanding of what further developments are required for current networks to be augmented with QKD.

International Conference on Transparent Optical NetworksJul 1, 201915 citations

The practical application of quantum key distribution networks

Joseph Pearse

Quantum Key Distribution (QKD) exploits the principles of quantum mechanics to enable information-theoretic security, offering significant advantages over classical cryptographic approaches. Despite extensive experimental demonstrations worldwide, many implementations remain confined to laboratory environments that may be impractical for large-scale deployment. This thesis addresses the critical challenge of making QKD viable within real-world telecommunications networks. Current field trials often prioritise metrics such as distance and key rate at the expense of practicality, employing ultra-low-loss fibres, custom components, and dedicated dark channels. These constraints could hinder integration with existing infrastructure. To overcome these limitations, this work introduces UKQNtel—a testbed designed to incorporate commercial-grade equipment and multiplex quantum and classical traffic. UKQNtel represents the first field trial of a coherent one-way QKD system integrated with a commercial-grade encrypted Dense Wavelength Division Multiplexing (DWDM) network, delivering 500 Gbps of encrypted data over 121 km of real-world fibre. The network comprises four trusted-node links, each achieving performance metrics suitable for practical deployment. Complementing the experimental work, novel simulations were developed to predict QKD performance using only fundamental parameters such as distance, wavelength, and optical power; marking a clear improvement over models that require broad assumptions or empirical measurements of an existing QKD link. This simulation develops new tools for simulating non-linear effects such as Raman scattering and four-wave mixing, as well as many other aspects of QKD noise, loss, and detection. Validation against UKQNtel measurements showed strong agreement in attenuation modelling and link-level performance. While secret key rate estimates demonstrate the need to account for additional losses, the model provides a robust foundation for network planning and scalability analysis. This research demonstrates a clear pathway toward practical QKD deployment, combining experimental integration with predictive modelling applicable to larger, more complex networks. The results underscore QKD’s potential to become a cornerstone of future secure communications.

Dec 1, 20240 citations