Abstract As the first stage of the quantum Internet, quantum key distribution (QKD) networks hold the promise of providing long-term security for diverse users. Most existing QKD networks have been constructed based on independent QKD protocols, and they commonly rely on the deployment of single-protocol trusted relay chains for long reach. Driven by the evolution of QKD protocols, large-scale QKD networking is expected to migrate from a single-protocol to a multi-protocol paradigm, during which some useful evolutionary elements for the later stages of the quantum Internet may be incorporated. In this work, we delve into a pivotal technique for large-scale QKD networking, namely, multi-protocol relay chaining. A multi-protocol relay chain is established by connecting a set of trusted/untrusted relays relying on multiple QKD protocols between a pair of QKD nodes. The structures of diverse multi-protocol relay chains are described, based on which the associated model is formulated and the policies are defined for the deployment of multi-protocol relay chains. Furthermore, we propose three multi-protocol relay chaining heuristics. Numerical simulations indicate that the designed heuristics can effectively reduce the number of trusted relays deployed and enhance the average security level versus the commonly used single-protocol trusted relay chaining methods on backbone network topologies.
Abstract As the first stage of the quantum Internet, quantum key distribution (QKD) networks hold the promise of providing long-term security for diverse users. Most existing QKD networks have been constructed based on independent QKD protocols, and they commonly rely on the deployment of single-protocol trusted relay chains for long reach. Driven by the evolution of QKD protocols, large-scale QKD networking is expected to migrate from a single-protocol to a multi-protocol paradigm, during which some useful evolutionary elements for the later stages of the quantum Internet may be incorporated. In this work, we delve into a pivotal technique for large-scale QKD networking, namely, multi-protocol relay chaining. A multi-protocol relay chain is established by connecting a set of trusted/untrusted relays relying on multiple QKD protocols between a pair of QKD nodes. The structures of diverse multi-protocol relay chains are described, based on which the associated model is formulated and the policies are defined for the deployment of multi-protocol relay chains. Furthermore, we propose three multi-protocol relay chaining heuristics. Numerical simulations indicate that the designed heuristics can effectively reduce the number of trusted relays deployed and enhance the average security level versus the commonly used single-protocol trusted relay chaining methods on backbone network topologies.
In the initial stage of the quantum Internet, most of the practical quantum networks have been deployed relying on diverse individual quantum key distribution (QKD) protocols. However, this single-protocol paradigm cannot fulfill the heterogeneous requirements of the users, hence market-penetration of quantum networks is limited. Given the recent advances in QKD protocols, the next generation quantum networks are expected to support both legacy and emerging QKD protocols. However, the evolution from single-protocol to multi-protocol quantum networks poses numerous challenging problems. As a remedy, we conceive a practical protocol translation framework for supporting this migration from single-protocol to large-scale multi-protocol quantum networks. Furthermore, we propose a programmable multi-functional relay node architecture for harmonizing the components of a suitable relay node. A pair of protocol translation policies are presented for meeting the challenging security requirements of migration requests, which are compared to the single-protocol-based migration solutions both in terms of the translation success probability attained (i.e., the proportion of migration requests with successful protocol translation), and the average relaying risk probability encountered (i.e., the mean of the relaying risk probabilities of end-to-end key negotiation in a quantum network). Finally, we highlight a suite of open problems in both quantum secure direct communication and quantum teleportation for research into future multi-protocol quantum networks.
Quantum Key Distribution (QKD) is a promising technology that provides proven unconditional security based on fundamentals of quantum physics, especially for point-to-point communications. It could be applied in large-scale optical networks for long-distance key provisioning mainly by three relaying methods: quantum-repeater-based QKD, trusted-relay-based QKD, and measurement-device-independent QKD (MDI-QKD). However, quantum-repeater-based QKD is still under study because of the immature technologies such as the preliminary quantum memory. The trusted-relay-based QKD is vulnerable since insecurity of non-ideal single-photon sources and detectors cannot be ignored in practical applications. On the other hand, for MDI-QKD, there exists a limitation on its key rate under long-distance communications. According to these limitations, embedding protocols like MDI-QKD into the existing trusted-relay-based QKD secured optical networks (QKD-ON) with usage of untrusted relays is a promising key-provisioning scheme. In this paper, we study such partially-trusted relay scenarios and focus on its routing of keys in different kinds of typical network topologies. A partially-trusted-relay-based QKD method is described, which can allow a pair of optical nodes sharing secret keys under the coexistence of trusted relays and untrusted relays. The secret-key provisioning with collaborative routing (SKP-CR) algorithm is proposed to search for the optimal key-relay routing path. We perform the simulations with different proportion of trusted relays versus untrusted relays, initial secret keys in the quantum key pools (QKPs), and traffic load. The simulations verify that theSKP-CRalgorithm can significantly outperform the conventional trusted-relay-based scheme in terms of key-distribution success rate with an improvement of up to62%with a mesh topology.
With the advancement of quantum computing, the security of public key cryptography is under serious threat. To guarantee security in the quantum era, Quantum Key Distribution has become a competitive solution. QKD networks can be classified into measurement-device-dependent network and measurement-device-independent network. In measurement-device-dependent networks, the information is available for all trusted relays. This means that all trusted relays are strongly trusted relays that require strict control, which is difficult to realize. To address this issue, measurement-device-independent networks reduce the proportion of strongly trusted relay nodes by introducing untrusted relays. However, due to the higher key rate of measurement-device-dependent protocols over short distances, the communication capability of measurement-device-independent networks has a degradation compared to measurement-device-dependent networks. Therefore, how to reduce the dependence of QKD networks on strong trusted relays without significantly affecting the communication capability has become a major issue in the practicalization process of QKD networks. To address this issue, a novel Multi-Protocol Collaborative networking cell is proposed in this paper. The QKD network built by the MPC networking cell reduces the dependence on strongly trusted relays by combining the two protocols to introduce weak trusted relays while maintaining the high communication capacity. What's more, to further enhance the overall performance of the QKD network, an optimal topology design method is presented via the proposed flow-based mathematical model and optimization method. The simulation results show that the proposed scheme reduces the dependence on strongly trusted relays without a significant reduction in communication capability, our work holds great significance in promoting the practicalization of QKD networks.
Quantum Key Distribution (QKD) has demonstrated unique and significant advantages in secure communication. In particular, Measurement-Device-Independent QKD (MDI-QKD), which is independent of measurement devices, increases data transmission distances and addresses the issue of low security in trusted relays. Therefore, in this work, we investigate QKD networks based on trusted and untrusted relays over optical backbone networks, providing a cost-optimal solution for the deployment and implementation of QKD networks. Specifically, this paper describes the QKD network and defines a new cost model, which not only fully considers the diverse impact factors of deployment costs but also meets the requirements for sharing network elements in response to different QKD chain requests. Based on cost model, this paper further proposes a cost-optimal heuristic algorithm for hybrid QKD network deployment, which can provide an economical and secure deployment solution for QKD networks. Extensive simulation experiments are conducted and the experimental results show that the proposed method outperforms current mainstream QKD network deployment algorithms in both deployment cost and security. Moreover, as the network scale increases, the advantages of our algorithm become more pronounced. Compared to mainstream algorithms, our method achieve an improvement of 17.7% -64.3% in cost savings and 1.19 to 3.24 times in security levels.
Quantum key distribution (QKD) has demonstrated a great potential to provide future-proofed security, especially for 5G and beyond communications. As the critical infrastructure for 5G and beyond communications, optical networks can offer a cost-effective solution to QKD deployment utilizing the existing fiber resources. In particular, measurement-device-independent QKD shows its ability to extend the secure distance with the aid of an untrusted relay. Compared to the trusted relay, the untrusted relay has obviously better security, since it does not rely on any assumption on measurement and even allows to be accessed by an eavesdropper. However, it cannot extend QKD to an arbitrary distance like the trusted relay, such that it is expected to be combined with the trusted relay for large-scale QKD deployment. In this work, we study the hybrid trusted/untrusted relay based QKD deployment over optical backbone networks and focus on cost optimization during the deployment phase. A new network architecture of hybrid trusted/untrusted relay based QKD over optical backbone networks is described, where the node structures of the trusted relay and untrusted relay are elaborated. The corresponding network, cost, and security models are formulated. To optimize the deployment cost, an integer linear programming model and a heuristic algorithm are designed. Numerical simulations verify that the cost-optimized design can significantly outperform the benchmark algorithm in terms of deployment cost and security level. Up to 25% cost saving can be achieved by deploying QKD with the hybrid trusted/untrusted relay scheme while keeping much higher security level relative to the conventional point-to-point QKD protocols that are only with the trusted relays.
Quantum key distribution (QKD) is an essential branch of quantum communications that facilitates future-proof security. In the near future, large-scale quantum networks will inevitably encounter diverse QKD protocols, ultimately resulting in a multi-protocol quantum network. Motivated by the evolution of advanced QKD protocols, this article introduces a pivotal enabler for multi-protocol quantum networks: software-defined heterogeneous QKD chaining (HQKDC). In contrast to the conventional QKD chain using a single protocol and a single connectivity pattern, a heterogeneous QKD chain is established relying on multiple protocols and diverse connectivity patterns. We elaborate the HQKDC framework by describing the structures of various QKD chains and proposing an architecture of software-defined HQKDC over optical networks. The software defined networking paradigm and optical networks can facilitate the orchestration and deployment of heterogeneous QKD chains, respectively. Furthermore, we present and evaluate the strategies for heterogeneous QKD chain deployment, as well as devise and demonstrate the workflow for heterogeneous QKD chain orchestration. Finally, we discuss open issues toward the practical QKD network and quantum Internet.