Secure quantum communication networks with multiple quantum key distribution (QKD) links have witnessed a booming development in the past decade. When the quantum network structure becomes complicated with a large number of users, it is important to investigate security issues, particularly in terms of quantum key distillation and key management, which are required to be performed at trusted nodes within the quantum network. In this work, we propose a novel cross-layer security enhancement framework based on key authentication and graph theory in quantum networks. We first build an efficient and adaptive framework for the integration of quantum key distillation and quantum key management. We then utilize final quantum keys to build a secure authentication between quantum key distribution links and key management parties. We finally evaluate our framework with cross-layer security enhancement techniques, to allow efficient key scheduling and distribution in quantum networks. Our framework can be directly integrated into current metropolitan and free-space quantum network infrastructure, and potentially be a standard classical-quantum codesign method for quantum network architecture explorations.
Secure quantum communication networks with multiple quantum key distribution (QKD) links have witnessed a booming development in the past decade. When the quantum network structure becomes complicated with a large number of users, it is important to investigate security issues, particularly in terms of quantum key distillation and key management, which are required to be performed at trusted nodes within the quantum network. In this work, we propose a novel cross-layer security enhancement framework based on key authentication and graph theory in quantum networks. We first build an efficient and adaptive framework for the integration of quantum key distillation and quantum key management. We then utilize final quantum keys to build a secure authentication between quantum key distribution links and key management parties. We finally evaluate our framework with cross-layer security enhancement techniques, to allow efficient key scheduling and distribution in quantum networks. Our framework can be directly integrated into current metropolitan and free-space quantum network infrastructure, and potentially be a standard classical-quantum codesign method for quantum network architecture explorations.
Quantum key distribution allows secure key distribution between remote communication parties. In a quantum network, multiple users are connected by quantum links for key distribution and classical links for encrypted data transmission. When the quantum network structure becomes complicated with a large number of users, it is important to investigate network issues, including security, key management, latency, reliability, scalability, and cost. In this work, we utilize the classical network theory and graph theory to establish a framework for a quantum network, addressing two critical issues, security and key management. First, we design a communication scheme with the highest security level that trusts a minimum number of intermediate nodes. Second, when the quantum key is a limited resource, we design key management and data scheduling schemes to optimize the utility of data transmission. Our results can be directly applied to the current metropolitan and free-space quantum network implementations and can potentially be a standard approach for future quantum network designs.
As an extension of quantum key distribution, secure communication among multiple users is a basic task in a quantum network. When the quantum network structure becomes complicated with a large number of users, it is important to investigate network issues, including security, key management, latency, reliability, scalability, and cost. In this work, we utilize the classical network theory and graph theory to address two critical issues in a quantum network, security and key management. First, we design a communication scheme with the highest security level that trusts a minimum number of intermediate nodes. Second, when the quantum key is a limited resource, we design key management and data scheduling schemes to optimize the utility of data transmission. Our results can be directly applied to the current metropolitan and free-space quantum network implementations and can potentially be a standard approach for future quantum network designs.
The security of quantum cryptography relies on the foundations of quantum mechanics, in contrast to traditional public key cryptography which relies on the computational difficulty of certain mathematical functions, and cannot provide any indication of eavesdropping or guarantee of key security. The proposal present in this work develops a quantum key distribution model to safeguard security in large networks, in the directions of classical cryptography and quantum cryptography. Two three-party Quantum key distribution are used in this model, one with implicit user authentication and the other with explicit mutual authentication, are proposed to demonstrate the merits of the new combination. The performance of Quantum Key Distribution (QKD) systems have notably progressed since the early experimental demonstrations. The current evolutions in QKD research indicate that the pace of this progression is very likely to be maintained, if not increased, in the future years. In parallel to these improvements of QKD techniques, commercial products are also being developed, making QKD deployment a feasible alternative for securing real data networks. Deployment of a real QKD network is however far from being straightforward. It requires development of a network architecture connecting multiple users that may possibly be very far away from each other. Considering the fact that the existing QKD links are only point-to-point, and intrinsically limited in distance, deployment of a practical QKD network structure is a nontrivial problem. The proposed work describes the proposed architecture for a QKD network specify the requirements relevant to the network design, protocols, and services. The objective of this specification is to define the major components and their main features The proposal provides security against such attacks as man-in-the-middle, eavesdropping and replay. It also improves the efficiency of the quantum key distribution which contains the fewest number of communication rounds among existing Quantum key distributions. In this model two parties can share and use a long-term secret (repeatedly). To prove the security of the proposed schemes, this proposed model provides a primitive called the Unbiased-Chosen Basis (UCB) assumption with the quantum key in angular positions.
Abstract The increasing demand for secure communications in mobile and critical infrastructure networks has led to the emergence of Quantum Key Distribution (QKD) as a promising technique for enhancing cryptographic security in next-generation systems. This paper reviews recent progress in integrating QKD within mobile and wireless networks. It focuses on key enabling technologies, such as Software-Defined Networking (SDN), satellite-based, and aerial networks. The paper critically analyzes how these frameworks can address evolving security requirements in sixth-generation (6G) networks and smart city infrastructures. Additionally, it examines the role of Machine Learning (ML) in improving QKD performance and adaptability. Challenges such as key management, mobility support, scalability, and interoperability are explored. These challenges help identify current barriers and research directions. By consolidating developments and highlighting unresolved issues, this study offers researchers valuable insights. It discusses the convergence of quantum communication and advanced mobile architectures, facilitating the design of secure and resilient future communication infrastructures.
Abstract: This study advances a unifying systems perspective on quantum-safe network security by synthesizing recent progress in quantum cryptography with practical integration patterns across carrier-grade infrastructures. Concept analysis distinguishes the roles of quantum key distribution (QKD), device-independent variants, quantum authentication, and post-quantum cryptography (PQC) within zero-trust architectures. Building on this, a layered framework—spanning physical/entanglement resources, key management, crypto-agility, control plane orchestration, and policy/compliance—is articulated to support end-to-end, composable guarantees. The problem addressed is the realization of verifiable, quantum-resilient security under operational constraints involving latency, key-rate variability, and heterogeneous trust assumptions. Methodology combines a structured literature synthesis with formal composability mapping to universal composability principles, adversarial threat modeling for quantum-enabled attackers, and testbed/simulation evaluation of hybrid QKD–PQC pipelines across L2–L3 segments and 5G/6G backhaul scenarios. Key results indicate that (i) selective QKD deployment on high-value links coupled with PQC at endpoints enhances resilience while preserving crypto-agility; (ii) automated key-lifecycle orchestration reduces exposure windows; and (iii) device-independent assurances strengthen guarantees where trust relaxation is necessary. The impact is a deployment-ready reference architecture, measurable integration metrics, and guidance aligned with emerging standards for critical infrastructure and national networks. The implications extend to procurement, compliance, and roadmap planning for quantum-era network security. Keywords: quantum-safe cryptography, quantum key distribution (QKD), post-quantum cryptography (PQC), hybrid QKD–PQC, composable security, device-independent QKD, zero-trust networks, key management and orchestration, 5G/6G backhaul, network security architecture, standards and interoperability
Secure networks composed of optical networks and quantum key distribution (QKD) are considered in this paper. A network layer structure is defined to focus on issues important with respect to the QKD network layer that controls QKD links and supplies a secure key for message transmission. A multiple-user QKD network layer can be constructed with timing synchronization, secure key sharing between indirectly connected nodes with switched QKD systems and key relays, and key management to control the volume of key generation and supply in response to the demand from optical network nodes.