This paper investigates the problem of integrating quantum-secured communication channels, implemented on the basis of nanophotonic chips, into corporate information systems, taking into account the requirements for scalability, manageability, compatibility with classical telecommunication protocols, and centralized security management.It is noted that the vast majority of current implementations of quantum key distribution (QKD) technologies are focused on the physical data transmission layer and do not provide an adequate level of integration with the software and hardware infrastructure of corporate environments, which significantly limits the possibilities of their practical implementation.An architecture for software-defined quantum-secured communication channels is proposed, based on the concept of functional division of the system into a quantum data transmission layer and a software control layer.Within the developed architecture, key functional components of the control plane are defined, in particular, a quantum key management service, modules for the software orchestration of quantum channels, adaptive routing mechanisms, as well as interfaces for interaction with corporate access management systems, security policies, and classical secure data exchange protocols.
This paper investigates the problem of integrating quantum-secured communication channels, implemented on the basis of nanophotonic chips, into corporate information systems, taking into account the requirements for scalability, manageability, compatibility with classical telecommunication protocols, and centralized security management.It is noted that the vast majority of current implementations of quantum key distribution (QKD) technologies are focused on the physical data transmission layer and do not provide an adequate level of integration with the software and hardware infrastructure of corporate environments, which significantly limits the possibilities of their practical implementation.An architecture for software-defined quantum-secured communication channels is proposed, based on the concept of functional division of the system into a quantum data transmission layer and a software control layer.Within the developed architecture, key functional components of the control plane are defined, in particular, a quantum key management service, modules for the software orchestration of quantum channels, adaptive routing mechanisms, as well as interfaces for interaction with corporate access management systems, security policies, and classical secure data exchange protocols.
Software-Defined Networking (SDN) is an emerging networking paradigm that decouples the control and data plane in order to enable programmable and flexible networks, optimizing its applications and advancing computer systems. It does so through its architecture, a key part of which is a centralized network management through open interfaces that revolutionizes the way in which networks are designed and makes them more agile and versatile to the evolving needs of modern and future applications services. This also means, however, that there is now a centralized point of attack that is a major vulnerability, threatening the security of the entire network. With such an advanced network paradigm, it requires a security system that will mitigate these risks and warrant long-term security. In attempts to allow secure communications within the network, this research proposes the implementation of Quantum Key Distribution (QKD), leveraging quantum mechanics to secure the network against any computational advancements in the future. QKD is a recent cryptographic system that includes a traditional-computational channel and a physical-quantum channel to generate and distribute keys between parties. It uses the principles of quantum mechanics including entanglement and superposition to ensure that the physical layer cannot be compromised computationally. QKD provides confidentiality and privacy of information and communication. Moreover, it is resistant to technological advancements. The implications of QKD significantly enhance SDN security through its protection against attacks, efficient key distribution, reliable network orchestration, and data integrity, creating an architecture that establishes stable communication channels that are resistant to cyber threats.
The article develops a comprehensive threat model for hybrid quantum-secured communication channels of corporate networks operating under conditions of multi-vector cyberattacks and highly dynamic threat scenarios.An analysis of the vulnerabilities of the electronic communication infrastructure is conducted, taking into account the synergistic interaction of classical cryptographic protocols, post-quantum cryptographic protection algorithms, and quantum key distribution technologies.Special attention is paid to the investigation of attack vectors aimed at compromising the processes of key information management, authentication, and the establishment of secure connections in hybrid network environments.A multi-level classification of threats is proposed, covering the physical, data link, network, transport, and application layers of the OSI model, as well as a separate category of threats caused by the use of quantum computing resources by a potential attacker.Specific attack scenarios are considered, including quantum-enhanced cryptanalytic methods, attacks on the hardware implementation of quantum protocols, the compromise of trusted nodes, and the impact on key distribution channels.The paper analyzes software and hardware mechanisms for ensuring the cryptographic strength and fault tolerance of hybrid communication channels, in particular, mechanisms for dynamic key information management, the integration of quantum key distribution protocols into corporate telecommunication environments, and the application of post-quantum cryptographic primitives to protect control and user data.Architectural solutions are proposed for the orchestration of cryptographic services, security status monitoring, and adaptive reconfiguration of security mechanisms in real time.Based on the obtained results, a generalized protection model for hybrid quantum-secured communication channels is formed, aimed at increasing the level of information security, cyber resilience, and the continuity of corporate networks functioning under the conditions of complex combined attacks and the transition to the quantum computing era.
Quantum Key Distribution (QKD) is one of the major cryptographic solutions to tackle the security threats associated to future computational advances, in particular those coming from quantum computing. At the most simple level, QKD can be seen as a highly secure source of symmetric secret keys in two separated places. Nonetheless, the lack of standardization and the strong requirements from the physical layer makes this technology very difficult to integrate in existing infrastructure.However, the success of QKD networks radically depends on the degree in which they can be adopted in the existing infrastructure, and it is a must that it happens via standard protocols and interfaces. The flexibility of novel network paradigms, like Software-Defined Networking (SDN), allows for a faster adoption of new concepts, hardware and services in telecommunications networks. This paradigm can be used for quantum communications, allowing for a fast and scalable deployment of quantum technologies and services in the telecommunications network to a degree that was simply impossible in previous schemes, where the different network devices and their connections should be modified, one by one, to create a quantum communications channel.This tutorial provides an introduction to existing QKD technologies and networks, followed by a descriptive explanation on how SDN principles can be utilized to abstract and integrate QKD systems as part of the network management. This will help to reduce the time-to-market for quantum technologies, and also will make quantum cryptography available as a service to be capitalized by the network operators.
Software-defined networking (SDN) has emerged as a promising paradigm for managing and controlling network resources efficiently. However, ensuring the security of data packets transmitted within an SDN environment remains a critical challenge. Traditional networking relies on static configurations, while SDN offers dynamic control and programmability, revolutionizing network management. In SDN, the application layer employs tools like OpenDaylight and Mininet for network management and testing. The control layer, managed by controllers such as Floodlight or ONOS, orchestrates traffic flow among switches. In the infrastructure layer, Quantum Key Distribution (QKD) with the BB84 protocol ensures secure communication. Together, these layers enable agile, programmable, and secure networking paradigms. This paper proposes integrating quantum key distribution (QKD) into SDN architectures to bolster packet-level security. By leveraging quantum entanglement and uncertainty, a secure communication channel between SDN controllers and switches is established, resilient to quantum attacks. Evaluation through simulations and real-world experiments demonstrates efficacy in mitigating security threats while minimizing overhead and latency, advancing SDN security IEEE 802.1X capabilities and leveraging quantum technologies for cybersecurity.
The ability to protect information has always played an important role in the evolution of civilizations, and even in the history of mankind as a whole. Safe and reliable communications have become an essential component of people’s lives in the era of modern digital technologies, when all spheres and areas of activity, from defense and government to business and social communications, are unthinkable without real-time data exchange. Classical methods of cryptographic protection have long been used to ensure the security of data transmission, but with the explosive growth in computing power and the emerging development of quantum computers, many traditional solutions have become vulnerable. Quantum Key Distribution (QKD) is a popular research area at the moment, due to its use of the laws of quantum mechanics, and thus it is possible to provide a completely secure level of encryption. But traditional quantum communication protocols have their limitations, including low key generation rates, scalability problems in large networks, and vulnerabilities to various forms of cyberattacks in the network layer. Therefore, in this work we propose a new adaptive quantum key distribution algorithm using software-defined networking (SDN) technology. The main idea of the proposed approach is to introduce some level of redundancy in the key generation stage, which increases the throughput, robustness, and adaptability of multi-node quantum networks. In addition, the SDN control layer allows dynamic routing and resource management and quick response to changes in the network state, making the system more resistant to denial-of-service and eavesdropping attacks. Evaluating our solution in comparison with BB84, we show that the new algorithm provides better performance without losing its security level, making the work a step towards creating a working quantum-secure communication system.
Today’s networks are quickly evolving toward more dynamic and flexible infrastructures and architectures. This software-based evolution has seen its peak with the development of the software-defined networking (SDN) and network functions virtualization (NFV) paradigms. These new concepts allow operators to automate the setup of services, thus reducing costs in deploying and operating the required infrastructure. On the other hand, these novel paradigms expose new vulnerabilities, as critical information travels through the infrastructure from central offices, down to remote data centers and network devices. Quantum key distribution (QKD) is a state-of-the-art technology that can be seen as a source of symmetric keys in two separated domains. It is immune to any algorithmic cryptanalysis and is thus suitable for long-term security. This technology is based on the laws of physics, which forbids us from copying the quantum states exchanged between two endpoints from which a secret key can be extracted. Thus, even though it has some limitations, a correct implementation can deliver keys of the highest security. In this paper, we propose the integration of QKD systems with well-known protocols and methodologies to secure the network’s control plane in an SDN and NFV environment. Furthermore, we experimentally demonstrate a workflow where QKD keys are used together with classically generated keys to encrypt communications between cloud and SDN platforms for setting up a service via secure shell, while showcasing the applicability to other cryptographic protocols.