Abstract The integration of quantum key distribution (QKD) into data centers represents a promising advance in secure communications. As cyber threats evolve and the volume of sensitive information grows, strengthening intra-data center security has become a strategic necessity for ensuring confidentiality and operational resilience. This paper explores the application of an entanglement-based QKD method for securing intra-connectivity within data centers, focusing on deploying the BBM92 protocol in a controlled environment. We detail the system architecture, technical requirements, and operational considerations, and we report simulation results from a 100-block BBM92 run: an average sifted key of 1224 bits per block, with 25% used for QBER estimation, reconciliation disclosures of 352 bits, and privacy amplification removing an additional 13 bits, yielding a final secure key of 554 bits per block at an average rate of 52 bps. Across the run, 86 keys were delivered to applications, enabling 43 IKEv2/IPsec sessions, with an initial ramp-up before reaching steady, near-linear key service. These findings indicate that entanglement-based QKD can provide robust, quantum-safe key distribution for data center environments while highlighting practical integration challenges and performance trade-offs.
Abstract The integration of quantum key distribution (QKD) into data centers represents a promising advance in secure communications. As cyber threats evolve and the volume of sensitive information grows, strengthening intra-data center security has become a strategic necessity for ensuring confidentiality and operational resilience. This paper explores the application of an entanglement-based QKD method for securing intra-connectivity within data centers, focusing on deploying the BBM92 protocol in a controlled environment. We detail the system architecture, technical requirements, and operational considerations, and we report simulation results from a 100-block BBM92 run: an average sifted key of 1224 bits per block, with 25% used for QBER estimation, reconciliation disclosures of 352 bits, and privacy amplification removing an additional 13 bits, yielding a final secure key of 554 bits per block at an average rate of 52 bps. Across the run, 86 keys were delivered to applications, enabling 43 IKEv2/IPsec sessions, with an initial ramp-up before reaching steady, near-linear key service. These findings indicate that entanglement-based QKD can provide robust, quantum-safe key distribution for data center environments while highlighting practical integration challenges and performance trade-offs.
In the evolving landscape of quantum technology, the increasing prominence of quantum computing poses a significant threat to the security of conventional public key infrastructure. Quantum key distribution (QKD), an established quantum technology at a high readiness level, emerges as a viable solution with commercial adoption potential. QKD facilitates the establishment of secure symmetric random bit strings between two geographically separated, trustworthy entities, safeguarding communications from potential eavesdropping. In particular, data centre interconnects can leverage the potential of QKD devices to ensure the secure transmission of critical and sensitive information in preserving the confidentiality, security, and integrity of their stored data. In this article, we present the successful implementation of a QKD field trial within a commercial data centre environment that utilises the existing fibre network infrastructure. The achieved average secret key rate of 2.392 kbps and an average quantum bit error rate of less than 2% demonstrate the commercial feasibility of QKD in real-world scenarios. As a use case study, we demonstrate the secure transfer of files between two data centres through the Quantum-Secured Virtual Private Network, utilising secret keys generated by the QKD devices. %This demonstration marks a significant milestone in the deployment of QKD across Singapore, establishing a foundation for widespread adoption and enhancing the infrastructure for practical, quantum-safe communication in commercial environments.
Entanglement-based quantum key distribution (QKD) offers robust key distribution through intrinsically correlated measurements, ensuring any eavesdropping attempt introduces detectable disturbances. Although practical implementations are primarily limited to fixed fiber networks, extending QKD to mobile platforms like drones or small satellites introduces challenges in optical alignment, weight, and power consumption. This work outlines the core components and architecture for implementing BBM92-based QKD in mobile settings. A compact polarization Sagnac interferometer utilizing a PPKTP crystal provides a stable and efficient method for generating entangled photon pairs. Supporting subsystems include a polarization compensation system, a detector module, and an acquisition, pointing, and tracking (APT) system. To assess performance under realistic conditions, we simulate photon loss, detector efficiency, and quantum bit error rates using the SQUANCH framework. Results show an average key generation rate of 5.43 bits/s, a final secure key length of 45.27 bits per block, and a QBER of 4.5%.
Abstract With the rapid advancement of quantum computing, traditional security protocols based on classical encryption algorithms are increasingly vulnerable to potential quantum attacks. The current IPsec protocol, which relies on classical cryptographic methods, is insufficient to withstand such threats, thereby compromising the security of long-term data transmission. To address this issue, we propose integrating quantum key distribution (QKD) into the internet protocol security (IPsec) protocol, thereby enhancing its resilience against quantum computing attacks. Here, two schemes that merge QKD-generated keys with classical cryptographic keys are designed to enhance both security and stability. Furthermore, we conduct a comprehensive evaluation of the performance of various QKD protocols implemented with the scheme, along with an assessment of its overall efficacy across a topological network configuration. This approach not only ensures secure data transmission in the era of quantum computing but also highlights the potential application value of integrating QKD with IPsec, providing valuable insights for the design and implementation of future quantum-secure communication systems.
The promise of unconditional security in the Quantum Key Distribution (QKD) depends on the availability of an authenticated classical channel. However, practical implementations often overlook this requirement or rely on computational assumptions that compromise long-term security. To overcome these challenges, this paper presents Entanglement-Based Authenticated Quantum Key Distribution (EAQKD), a novel protocol that addresses critical security and practical limitations in quantum cryptographic key exchange. Our approach integrates quantum entanglement distribution with information-theoretic authentication. We evaluate EAQKD's performance through a comprehensive discrete-event simulation framework modeled on realistic channel characteristics and experimental device parameters. Our modeling incorporates parameters from practical quantum optics setups, including SPDC entanglement sources, superconducting nanowire detectors, and fiber channel imperfections. Our results show quantum bit error rates consistently below the 11% security threshold (ranging from 1.86% at 10 km to 9.27% at 200 km), with secure key rates achieving 1.12×105 bits/s at short distances and maintaining practical rates of 9.8 bits/s at 200 km. When integrated with quantum repeater architectures, our analysis projects that EAQKD can extend secure communication beyond 500 km while providing information-theoretic security guarantees. Comparative analysis against the BB84, E91, and Twin-Field QKD protocols demonstrates EAQKD's superior balance of security, practical performance, and implementation robustness. This work advances quantum cryptography by providing a rigorously analyzed engineering reference for secure key distribution in future quantum communication networks.
The need to increase throughput and reduce the latency in the workload distribution and communications between different Data Centers (DCs) demands the use of dedicated or rented fibers. In view of enabling quantum secure communication in centralized and distributed DC, the integration of quantum key distribution (QKD) systems appears as a crucial milestone to safeguard data against quantum computing threats and the "Store-Now, Decrypt-Later" risk. Specifically, tailored technological solutions must be considered to enable practical deployment. In this context, continuous-variable QKD (CV-QKD) presents a promising approach due to its compatibility with optical systems and potential for cost savings and scalability. The adoption of photonic integrated circuits further enhances feasibility by enabling component miniaturization, reducing power consumption, and facilitating large-scale deployment. An important aspect to consider is optimizing fiber usage to support infrastructure sharing and resource efficiency. Therefore, the coexistence of the proposed QKD solutions with inter-DC communications must be carefully assessed. This invited contribution explores the integration of CV-QKD in DC networks to address flexible and efficient quantum secure connectivity. Envisioned co-propagation scenarios and associated challenges will be discussed, offering insights into the evolutionary path towards quantum secure DC infrastructures.
Current communication systems predominantly operate using classical bits, with security mechanisms grounded in traditional cryptographic techniques. These conventional methods rely on the computational difficulty of discrete mathematical problems, which are expected to be vulnerable in the emerging quantum era. The advent of quantum computing poses a significant threat to existing cryptographic protocols, as quantum algorithms can potentially break schemes once considered computationally intractable. This scenario has accelerated interest in quantum cryptography, an advanced paradigm that leverages the fundamental laws of quantum mechanics to ensure secure data transmission. Quantum cryptography, and in particular Quantum Key Distribution (QKD), offers a robust alternative to classical key exchange methods. Unlike classical schemes, QKD’s security is rooted in the physical properties of quantum states, making it immune to computational advancements, including those offered by quantum computers. Among the various QKD protocols, the E91 protocol, based on quantum entanglement, demonstrates significant potential for enhancing communication security and resilience against cyber-attacks. This study investigates the role of quantum cryptography in safeguarding data transfer, with a specific focus on the E91 QKD protocol. It explores the operational principles, security advantages, and practical considerations of E91 in the context of evolving cybersecurity threats. By providing a detailed examination of E91’s implementation and performance, this research contributes novel insights into its feasibility as a cornerstone technology for building secure communication frameworks in the post-quantum era.