Abstract Supercomputers, quantum computers, other computers, and algorithmic advancements that can break cryptographic systems currently in use are becoming a reality. For information that requires long-term confidentiality (e.g. national security, military security, genomic data etc.), the threat of eavesdropping must be seriously considered. The leakage of such information would not only cause temporary confusion but would also have serious repercussions for future generations. Part of such important data are already being exchanged over the Internet using cryptography that is not resistant to quantum computers. Considering the possibility of harvest attacks on information that must be kept secret for centuries, developing a technology that can immediately eliminate the risk of eavesdropping in principle is desirable. In response to these demands, we previously developed an information-theoretically secure method for data transmission, storage, recovery, and authentication with a single password using a quantum key distribution network called a quantum secure cloud. We now apply this technology to develop an information-theoretically secure long-distance data-relay function and succeed in developing a distributed data-relay simulator that is compatible with current quantum key distribution networks. The throughput of this protocol is more than 10 Mbps for 10 MB data, so it can be applied to practical use.
Abstract Supercomputers, quantum computers, other computers, and algorithmic advancements that can break cryptographic systems currently in use are becoming a reality. For information that requires long-term confidentiality (e.g. national security, military security, genomic data etc.), the threat of eavesdropping must be seriously considered. The leakage of such information would not only cause temporary confusion but would also have serious repercussions for future generations. Part of such important data are already being exchanged over the Internet using cryptography that is not resistant to quantum computers. Considering the possibility of harvest attacks on information that must be kept secret for centuries, developing a technology that can immediately eliminate the risk of eavesdropping in principle is desirable. In response to these demands, we previously developed an information-theoretically secure method for data transmission, storage, recovery, and authentication with a single password using a quantum key distribution network called a quantum secure cloud. We now apply this technology to develop an information-theoretically secure long-distance data-relay function and succeed in developing a distributed data-relay simulator that is compatible with current quantum key distribution networks. The throughput of this protocol is more than 10 Mbps for 10 MB data, so it can be applied to practical use.
Traditional cryptographic methods are becoming more and more vulnerable when facing the computing power delivered by the quantum algorithm in the era of digitalization heading towards quantum computing. The realization of a quantum computer is a growing menace that has promoted the development of Quantum Key Distribution (QKD), a completely secure key exchange protocol based on the principles of quantum mechanics. This work studies QKD protocol creation and use for secure data transfer in hybrid networks including both classical and quantum computing nodes over geographically separated environments. The paper provides a scalable scheme to integrate QKD with current classical communication networks, with the emphasis on interoperability, key synchronization, secure routing among the mixed nodes. At the core of the model are quantum channels for key exchange and classical channels for data, governed by a quantum-safe control protocol. The security of QKD—the feature of resistance against eavesdropping according to the no-cloning theorem and disturbance of measurement—is investigated taking into account actual implementation aspects, such as noise, restriction in a transmission distance, and quantum memory. To test the model, simulation, and prototype testing are performed over different networking topologies, considering various parameters such as QBER, key generation rate, latency and system robustness under different attacks such as man-in-the-middle as well as photon-number-splitting attacks. We also investigate the interworking between QKD and post-quantum cryptography (PQC) to reduce the risk for hybrid systems with enhanced security and to be backward compatible to classical systems. Findings show that, when well combined with classical and quantum computing nodes, QKD is able to bring the cybersecurity of today communication infrastructures to a greater extent. This research is a step towards building the quantum internet, providing a solid foundation for applications in cybersecurity and potentially well beyond — finance, defense, health care and more — where data privacy truly matters.
A large amount of sensitive data must remain accessible for decades or even centuries (e.g, electronic health records, governmental documents). Communicating such data over the Internet requires long-term secure communication channels, which, in turn, require robust key distribution protocols. Currently used key distribution protocols, however, are not designed for long-term security. Their security is either threatened by quantum computers, or, in principle, due to their reliance on computational problems. Quantum key distribution (QKD) protocols are information-theoretically secure and thereby offer long-term security against computational attacks. However, significant obstacles to their real-world use remain. This position paper, which is a multidisciplinary effort of computer scientists and physicists, systematizes knowledge about challenges of and strategies for realizing long-term secure Internet communication from QKD. We first analyze the performance and security of existing point-to-point QKD technology. Then, we discuss several approaches to enabling QKD in large-scale multi-user networks. Finally, we list important challenges that need to be addressed in order to make QKD-based long-term secure communication on the Internet practical.
Quantum key distribution (QKD) is a technology for distributing cryptographic keys between two communication parties based on the quantum physics for the secure communication. A trusted nodebased key relay technique is integrated with QKD to overcome the technical limitations of QKD and to enable key distribution between two arbitrary communication parties in the trusted node network, which we refer to as the QKD network. In addition, secret sharing technology has been integrated with the QKD network to realize secure data storage and secure data communication, which we call a quantum secure cloud. This paper presents the development and evaluation of the proof-of-concept (PoC) system for the QKD network and quantum secure cloud, specially applied to the genome medicine domain. The PoC system was developed at Tohoku University and Toshiba sites to address the “cancer clinical sequencing” use-case. We evaluated three practical scenarios with the PoC system: (1) real-time transmission of genome analysis data, (2) “expert panel”, an online video conference for medical experts' discussion, and (3) distributed backup of genome analysis data. To support these scenarios, we developed three new functions: (1) a function for monitoring output data and pipeline processing of data encryption/decryption and transmission for secure large-scale data transfer, (2) a key management system function to achieve both large-scale data transmission and low-latency data communication, and (3) a function for preemptive key data reading and direct access to storage devices to enable high-speed data transmission and distributed data backup using a secret sharing scheme. These scenarios and functions were evaluated and demonstrated using real or simulated genome data. The evaluation results reveal that QKD network and quantum secure cloud technologies can be applied to cancer clinical sequencing as a use-case of the genome medicine domain.
Quantum communication and information networks offer unprecedented processing efficiency and security for data transfers. Technologies like quantum key distribution (QKD), quantum repeaters, quantum memory, and quantum entanglement sources are enabling technologies that ensure secure communication. QKD methods use quantum physics concepts to establish cryptographic keys, while quantum repeaters compensate for signal loss in fiber optic cables. Quantum memory enables storage and retrieval of quantum information, while quantum entanglement generators generate entangled photon pairs. Artificial intelligence and machine learning have significantly improved the efficacy and security of quantum communication. These methods can facilitate ultra-secure, reliable, large-scale communication and even a future quantum internet by analyzing quantum protocols and mitigating noise-induced errors. QKD protocols ensure secure communication channels, while quantum repeaters establish secure long-distance communication lines by mitigating signal loss. Traditional Internet technology is susceptible to surveillance due to Shannon's information theory and mathematics. The quantum internet (QI) uses satellite-based quantum communication and quantum cryptographic protocols for physical QI. Quantum entanglement sources fortify secure communication protocols, improving resistance to attacks. Quantum information networks (QINs) enhance computing, sensing, and security capabilities over extended distances. The development of reliable, robust communication systems depends on these technologies. Quantum-secured networks enhance urban security, smart management, and infrastructure protection by providing data privacy and facilitating secure data transmission, thereby facilitating robust infrastructure and technological development.
Secure communication makes the widespread use of telecommunication networks and services possible. With the constant progress of computing and mathematics, new cryptographic methods are being diligently developed. Quantum Key Distribution (QKD) is a promising technology that provides an Information-Theoretically Secure (ITS) solution to the secret-key agreement problem between two remote parties. QKD networks based on trusted relay nodes are built to provide service to a larger number of parties at arbitrary distances. They function as an add-on technology to traditional networks, generating, managing, distributing, and supplying ITS cryptographic keys. Since key resources are limited, integrating QKD network services into critical infrastructures necessitates effective key management. As a result, this article provides a comprehensive review of key management approaches for trusted-relay QKD networks. They are analyzed to facilitate the identification of potential strategies and accelerate the future development of QKD networks.
The security of quantum cryptography relies on the foundations of quantum mechanics, in contrast to traditional public key cryptography which relies on the computational difficulty of certain mathematical functions, and cannot provide any indication of eavesdropping or guarantee of key security. The proposal present in this work develops a quantum key distribution model to safeguard security in large networks, in the directions of classical cryptography and quantum cryptography. Two three-party Quantum key distribution are used in this model, one with implicit user authentication and the other with explicit mutual authentication, are proposed to demonstrate the merits of the new combination. The performance of Quantum Key Distribution (QKD) systems have notably progressed since the early experimental demonstrations. The current evolutions in QKD research indicate that the pace of this progression is very likely to be maintained, if not increased, in the future years. In parallel to these improvements of QKD techniques, commercial products are also being developed, making QKD deployment a feasible alternative for securing real data networks. Deployment of a real QKD network is however far from being straightforward. It requires development of a network architecture connecting multiple users that may possibly be very far away from each other. Considering the fact that the existing QKD links are only point-to-point, and intrinsically limited in distance, deployment of a practical QKD network structure is a nontrivial problem. The proposed work describes the proposed architecture for a QKD network specify the requirements relevant to the network design, protocols, and services. The objective of this specification is to define the major components and their main features The proposal provides security against such attacks as man-in-the-middle, eavesdropping and replay. It also improves the efficiency of the quantum key distribution which contains the fewest number of communication rounds among existing Quantum key distributions. In this model two parties can share and use a long-term secret (repeatedly). To prove the security of the proposed schemes, this proposed model provides a primitive called the Unbiased-Chosen Basis (UCB) assumption with the quantum key in angular positions.