Quantum Key Distribution (QKD) enables information-theoretically secure cryptographic key exchange by exploiting quantum mechanical properties -- photon polarisation, entanglement, and the no-cloning theorem -- to detect any eavesdropping attempt. Scaling QKD from point-to-point laboratory demonstrations to large-scale metropolitan and wide-area networks requires addressing three engineering challenges: photon loss over long fibre distances (limiting practical QKD to ~100-150 km without quantum repeaters), network topology design for multi-party key delivery, and integration of QKD with classical network infrastructure. This paper proposes the Quantum Key Distribution Network Architecture (QKDNA) framework, a systematic evaluation of five QKD protocol families (BB84, E91, MDI-QKD, Twin-Field QKD, and CV-QKD) across four network topology models (star, ring, mesh, and hierarchical trusted-node) on 16 real-world metropolitan network scenarios. QKDNA achieves maximum secure key rate of 18.4 Mbps (Twin-Field QKD, 80 km fibre, mesh topology) and demonstrates scalable QKD delivery to 48 simultaneous users. The framework contributes a Network QKD Deployment Index (NQDI) and quantitative guidance for national quantum network infrastructure planning.
Quantum Key Distribution (QKD) enables information-theoretically secure cryptographic key exchange by exploiting quantum mechanical properties -- photon polarisation, entanglement, and the no-cloning theorem -- to detect any eavesdropping attempt. Scaling QKD from point-to-point laboratory demonstrations to large-scale metropolitan and wide-area networks requires addressing three engineering challenges: photon loss over long fibre distances (limiting practical QKD to ~100-150 km without quantum repeaters), network topology design for multi-party key delivery, and integration of QKD with classical network infrastructure. This paper proposes the Quantum Key Distribution Network Architecture (QKDNA) framework, a systematic evaluation of five QKD protocol families (BB84, E91, MDI-QKD, Twin-Field QKD, and CV-QKD) across four network topology models (star, ring, mesh, and hierarchical trusted-node) on 16 real-world metropolitan network scenarios. QKDNA achieves maximum secure key rate of 18.4 Mbps (Twin-Field QKD, 80 km fibre, mesh topology) and demonstrates scalable QKD delivery to 48 simultaneous users. The framework contributes a Network QKD Deployment Index (NQDI) and quantitative guidance for national quantum network infrastructure planning.
Quantum Key Distribution (QKD) constitutes one of the most profound practical applications of quantum mechanics, enabling two parties to exchange cryptographic keys whose security is guaranteed by the fundamental laws of physics rather than the assumed computational hardness of mathematical problems. As quantum computing capabilities continue to advance, classical public-key infrastructure faces an existential threat, rendering QKD a critical component of post-quantum secure communication architectures. This paper presents a comprehensive survey of QKD spanning foundational protocols, rigorous security proofs, hardware implementation challenges, deployment experiences across metropolitan fiber networks, and recent satellite-based experiments. We analyze the BB84, E91, B92, SARG04, continuous-variable, measurement-device-independent (MDI-QKD), and twin-field (TF-QKD) protocols in depth, examining their security assumptions, achievable key rates, and practical limitations. Particular attention is given to side-channel vulnerabilities in realistic implementations, decoy-state methods for mitigating photon-number-splitting attacks, and finite-key security analysis. We review key performance benchmarks from commercial systems and discuss integration with classical network infrastructure. The paper concludes by identifying open challenges in quantum repeater development, satellite QKD scalability, and standardization efforts essential for large-scale deployment.
The increasing reliance on optical communication networks for high-speed data transmission has amplified concerns regarding secure information exchange in the era of quantum computing. Classical cryptographic protocols such as RSA and ECC, though widely deployed, are vulnerable to attacks from large-scale quantum computers executing Shor’s algorithm. Quantum Key Distribution (QKD) has emerged as a revolutionary cryptographic paradigm that leverages the principles of quantum mechanics to enable theoretically unbreakable key exchange. This paper investigates the integration of QKD into optical communication networks, focusing on protocol design, implementation challenges, and potential scalability. Through scenario-based evaluation, the study highlights the trade-offs between quantum security and practical deployment constraints such as channel loss, photon detector efficiency, and key generation rates. Results from simulated models demonstrate that while QKD can achieve provable security in metropolitan-area networks, long-distance transmission requires advanced techniques such as quantum repeaters and trusted nodes. This work concludes that QKD offers a promising pathway toward quantum-safe communication but necessitates
Quantum key distribution (QKD) is a key application in quantum communication, enabling secure key exchange between parties using quantum states. Twin-field (TF) QKD offers a promising solution that surpasses the repeaterless limits, and its measurement-device-independent nature makes it suitable for star-type network architectures. In this work, we propose a scalable TF-QKD network with adaptable architecture, where users prepare quantum signals and send them to network nodes. These nodes use an optical switch to route the signals to multi-user measurement units, enabling secure key distribution among arbitrary users and adapting to complex connection demands of the network. A proof-of-principle demonstration with three users successfully achieved secure key sharing over simulated link losses of up to 30 dB, with an average rate of 19.57 bit/s. Additionally, simulations show that the proposed architecture can achieve a total secure key rate of 4.84×104 bit/s at 100 km in a symmetric 32-user network. This approach represents a significant advancement in the topology of untrusted-node QKD networks and holds promise for practical, large-scale applications in secure communication.
Quantum Key Distribution (QKD) provides information-theoretic security guaranteed by the laws of physics rather than computational hardness -- making it the primary tool for quantum-secure communication against harvest-now-decrypt-later quantum threats. This paper proposes the Quantum Cryptographic Protocol Design and Analysis (QCPDA) framework, evaluating six quantum cryptographic protocols -- BB84, E91, MDI-QKD, Twin-Field QKD (TF-QKD), Quantum Digital Signatures (QDS), and Quantum Secret Sharing (QSS) -- across five dimensions: unconditional security, key generation rate, maximum secure distance, noise tolerance, and implementation complexity. TF-QKD achieves the longest secure distance (605 km on ultra-low-loss fibre) but lowest key rate. MDI-QKD eliminates all detector side-channels at moderate key rates. BB84 achieves the highest composite QCPDA score (8.24) due to commercial maturity. QCPDA provides a protocol selection guide mapping deployment scenarios (metropolitan, intercity, long-haul, multi-party) to optimal protocols, and discusses the complementary roles of QKD and NIST post-quantum cryptography standards for quantum-secure infrastructure.
The increasing reliance on optical communication networks for high-speed data transmission has amplified concerns regarding secure information exchange in the era of quantum computing. Classical cryptographic protocols such as RSA and ECC, though widely deployed, are vulnerable to attacks from large-scale quantum computers executing Shor�s algorithm. Quantum Key Distribution (QKD) has emerged as a revolutionary cryptographic paradigm that leverages the principles of quantum mechanics to enable theoretically unbreakable key exchange. This paper investigates the integration of QKD into optical communication networks, focusing on protocol design, implementation challenges, and potential scalability. Through scenario-based evaluation, the study highlights the trade-offs between quantum security and practical deployment constraints such as channel loss, photon detector efficiency, and key generation rates. Results from simulated models demonstrate that while QKD can achieve provable security in metropolitan-area networks, long-distance transmission requires advanced techniques such as quantum repeaters and trusted nodes. This work concludes that QKD offers a promising pathway toward quantum-safe communication but necessitates advancements in hardware, standardization, and hybrid cryptographic strategies for widespread adoption.
The advent of cryptographically relevant quantum computers poses an existential threat to classical public-key infrastructure. Quantum Key Distribution (QKD) addresses this challenge by providing information-theoretic security for key establishment, independently of any computational hardness assumption. In this work, the deployment and experimental validation of a metropolitan-scale quantum-secure network between data centers in Milan is reported. The network operates over installed fiber infrastructure and implements a layered architecture integrating QKD hardware, standards-compliant Key Management (KM), and centralized Software-Defined Networking (SDN) orchestration. Dynamic path reconfiguration via active optical switching and trusted-node routing allow automated fail-over solutions. Application-layer validation across diverse protocols and workloads confirms the seamless interoperability of all system components. These results establish the technical and operational readiness of metropolitan QKD networks for production deployment, and offer a replicable blueprint for building quantum-secure communication infrastructure at metropolitan scale.