Optical network security has attracted extensive attentions recently, data encryption is an effective way to enhance the security. Unlike conventional key distribution methods, Quantum key distribution (QKD) is provably-secure. Integrating QKD into optical networks can provide a new paradigm for secure communications. In a QKD integrated optical network, besides the traditional data channels, two additional channels, called quantum-signal channels and public interaction channels, are required to support secure key. Crucially, how to optimally allocate limited wavelength resources to the three channels is emerging as a novel problem. By introducing wavelength division multiplexing (WDM) network and defining the wavelength occupancy factor, this paper designs a dynamic routing, wavelength and time-slot allocation (DRWTA) algorithm for the wavelength allocation in QKD integrated optical network. The simulation results show wavelength scale factor has an adverse effect on the resource utilization rate and the blocking probability. Furthermore, the DRWTA algorithm provides a strategy to allocate wavelength for three types of channels in QKD-WDM networks. The success probability can be improved by exploiting the DRWTA algorithm.
Optical network security has attracted extensive attentions recently, data encryption is an effective way to enhance the security. Unlike conventional key distribution methods, Quantum key distribution (QKD) is provably-secure. Integrating QKD into optical networks can provide a new paradigm for secure communications. In a QKD integrated optical network, besides the traditional data channels, two additional channels, called quantum-signal channels and public interaction channels, are required to support secure key. Crucially, how to optimally allocate limited wavelength resources to the three channels is emerging as a novel problem. By introducing wavelength division multiplexing (WDM) network and defining the wavelength occupancy factor, this paper designs a dynamic routing, wavelength and time-slot allocation (DRWTA) algorithm for the wavelength allocation in QKD integrated optical network. The simulation results show wavelength scale factor has an adverse effect on the resource utilization rate and the blocking probability. Furthermore, the DRWTA algorithm provides a strategy to allocate wavelength for three types of channels in QKD-WDM networks. The success probability can be improved by exploiting the DRWTA algorithm.
Optical network security is attracting increasing research attention, as loss of confidentiality of data transferred through an optical network could impact a huge number of users and services. Data encryption is an effective way to enhance optical network security. In particular, QKD is being investigated as a secure mechanism to provide keys for data encryption at the endpoints of an optical network. In a QKD-enabled optical network, apart from TDChs, two additional channels, called QSChs and PIChs, are required to support secure key synchronization. How to allocate network resources to QSChs, PIChs, and TDChs is emerging as a novel problem for the design of a security-guaranteed optical network. This article addresses the resource allocation problem in optical networks secured by QKD. We first discuss a possible architecture for a QKD-enabled optical network, where an SDN controller is in charge of allocating the three types of channels (TDCh, QSCh, and PICh) over different wavelengths exploiting WDM. To save wavelength resources, we propose to adopt OTDM to allocate multiple QSChs and PIChs over the same wavelength. An RWTA algorithm is designed to allocate wavelength and time slot resources for the three types of channels. Different security levels are included in the RWTA algorithm by considering different key updating periods (i.e., the period after which the secure key between two endpoints has to be updated). Illustrative simulation results show the effects of different security-level configuration schemes on resource allocation.
Currently, with the continuous advancement of network and communication technology, the amount of data carried by the optical network is very huge. The security of high-speed and large-capacity information in optical networks has attracted more and more attention. Quantum key distribution (QKD) provides information-theoretic security based on the laws of quantum mechanics. Introducing QKD into an optical network can greatly improve the security of the optical network. In order to reduce the cost of deployment on QKD infrastructure, quantum signals in QKD and classical signals in optical networks are multiplexed in the same fiber by wavelength-division manner. Moreover, due to the limited wavelength resources in an optical fiber, time-division technology is adopted to construct different kinds of channels in QKD system for efficient utilization of wavelength resources. Under such situation, how to satisfy the security requirements of service requests and complete the efficient scheduling of multi-dimensional resources, i.e., wavelengths and timeslots, is a challenging problem. This paper addresses this problem by considering multi-dimensional routing, wavelength, and timeslot allocation (RWTA) in short-distance quantum key distribution optical networks (QKD-ON), in which any two nodes can directly establish a quantum channel, and the maximum distance between any two nodes is less than the distance that can carry out point-to-point quantum key distribution process. While accommodating services with security requirements in QKD optical networks, to avoid the wavelength time-slot fragmentation caused by the constraints of wavelength consistency and time-slot continuity, we propose a time-window-based security orchestration strategy as well as relative-loss of time continuous compactness based RWTA strategy. We conducted the simulations under various scenarios, e.g., different key updating periods and different distributions on wavelength resources, etc., and the results show that the proposed strategy can achieve better performance compared with the baselines in terms of key success rate, key-updating delay, and blocking probability.
Data transmission with optical fiber is vulnerable to eavesdropping. Moreover, conventional key distribution technology suffers from increasing computational power and upgraded attack algorithms. To address these issues, quantum key distribution (QKD), a quantum technology that secures secret information (such as a cryptographic key) exchange between two parties, can be used to guarantee secure data transmission. Integrating QKD into existing wavelength division multiplexing optical networks has been verified through a series of experiments, which contribute to ensuring network security and saving fiber resources. This paper addresses the resource assignment problem in QKD-enabled optical networks. First, a QKD-enabled optical network architecture is introduced. A small fraction of wavelength channels are segmented into multiple time slots with optical time division multiplexing technology to construct quantum key channels (QKChs) and measuring-basis channels, and then the remaining wavelengths can construct traditional data channels. Second, a static routing, wavelength, and time-slot assignment (RWTA) strategy is proposed and verified by the integer linear programming formulation and a heuristic algorithm. In the RWTA, QKChs are assigned for service requests according to the security levels specified by relevant key-updating periods. Thus, the secret keys for data encryption can update periodically to enhance security. Simulation results indicate that there is a trade-off between security (i.e., security levels and security-level types) and resource utilization.
With the rapid development of optical networks and the increasing amount of data transmission, information security has become a critical concern. Quantum key distribution can theoretically provide security for data encryption key distribution, and its integration into optical networks can enhance overall security. To reduce deployment costs, Wavelength Division Multiplexing is used to combine quantum and classical signals. However, limited wavelength resource necessitate the use of Time Division Multiplexing. How to efficiently allocate the multidimensional resources, such as wavelength, time slots, and encryption keys, has become a key issue in the design of secure optical networks. This paper proposes a Security-Level-based routing, wavelength, and time slot assignment strategy for optical networks. To evaluate the effectiveness of the proposed strategy, we introduce a new metric called Average Key Consumption. This metric allows us to assess key usage efficiency and network performance. We analyze the impact of different Average Key Consumption values on network resource allocation. Simulation results demonstrate that the Security-Level-based routing, wavelength, and time slot assignment strategy outperforms other strategies in handling high security demands.
Abstract Quantum key distribution (QKD) optical networks can provide more secure communications. However, with the increase of the QKD path requests and key updates, network blocking problems will become severe. The blocking problems in the network can become more severe because each fiber link has limited resources (such as wavelengths and time slots). In addition, QKD optical networks are also affected by external disturbances such as data interception and eavesdropping, resulting in inefficient network communication. In this paper, we exploit the idea of protection path to enhance the anti-interference ability of QKD optical network. By introducing the concept of security metric, we propose a routing wavelength and time slot allocation algorithm (RWTA) based on protection path, which can lessen the blocking problem of QKD optical network. According to simulation analysis, the security-metric-based RWTA algorithm (SM-RWTA) proposed in this paper can substantially improve the success rate of security key (SK) update and significantly reduce the blocking rate of the network. It can also improve the utilization rate of resources such as wavelengths and time slots. Compared with the non-security-metric-based RWTA algorithm (NSM-RWTA), our algorithm is robust and can enhance the anti-interference ability and security of QKD optical networks.
Quantum key distribution (QKD) networking over wavelength-division multiplexing (WDM) network infrastructure provides a new paradigm for secure communications across the networks. With limited wavelength resources in existing WDM networks, how to efficiently schedule QKD to provision sufficient secret keys over WDM networks becomes a new challenge. This study proposes a new time-scheduled scheme in combination with quantum key pool (QKP) technique to overcome this challenge. A new architecture of QKD-over-WDM networks is presented, in which QKPs are constructed to decouple secret-key resources from the underlying infrastructure for timely secret-key provisioning. In the time-scheduled scheme, routing, wavelength, and time-slot allocation (RWTA) problem is proposed for efficient QKP construction (QKPC) over WDM networks, in which three sub-problems (i.e., secret-key consumption, time-slot allocation, and time-slot continuity) are discussed, respectively. An integer linear programming (ILP) model and a novel joint path-and-link-based RWTA (JPL-RWTA) heuristic algorithm are designed to solve the RWTA problem, in which the three sub-problems are addressed together. Simulation results indicate that the ILP model and JPL-RWTA algorithm are effective approaches to obtain the positive balance between resource utilization of QKPC and successful probability of QKPC (SPQKPC). Moreover, the SPQKPC can be increased at the cost of reducing the flexibility of secret-key consumption, the uniformity of time-slot allocation, and the proportion of time-slot continuous QKPC to time-slot discrete QKPC requests.