放宽量子密钥分发网络中的信任假设
Relaxing Trust Assumptions on Quantum Key Distribution Networks
AI总结：
本文针对 QKD 网络必须完全信任中继的限制，划分 FAT、PAT、NAT 三级信任模型，并提出面向无访问信任的集中式与去中心化密钥管理方案。
摘要：
在使用不可信中继的情况下实现长距离量子安全，在很大程度上仍缺乏依据，并且依然是一个开放的活跃研究问题。尽管如此，基于可信中继的量子网络正在全球范围内建设。然而，标准 QKD 网络架构要求对 QKD 中继给予完全信任，这一要求过于苛刻，并限制了 QKD 网络的应用场景。在本工作中，我们探索通过放宽（即使不能完全取消）对中继的信任假设，在 QKD 网络中安全中继秘密的可能性。我们刻画了具有不同信任级别的 QKD 中继，即 Full Access Trust（FAT，完全访问信任）、Partial Access Trust（PAT，部分访问信任）和 No Access Trust（NAT，无访问信任）。顾名思义，每个级别定义了在端到端通信中，中继需要在多大程度上被信任以处理由密钥管理系统提供的秘密。随后，我们基于不同信任级别回顾并提出多种 QKD 密钥管理系统构造。本文的主要贡献通过评估具有无访问信任级别的密钥管理系统来实现。原则上，我们回顾了集中式拓扑的密钥管理，并提出一种新的去中心化密钥管理系统。这些不同拓扑根据 QKD 网络需求提供各种优势，从而在架构上赋予运行灵活性。我们相信，本工作为这一开放问题提供了新视角，即为未来长距离安全通信提供可靠且实用的解决方案。
英文摘要：
Quantum security over long distances with untrusted relays is largely unfounded and is still an open question for active research. Nevertheless, quantum networks based on trusted relays are being built across the globe. However, standard QKD network architecture implores a complete trust requirement on QKD relays, which is too demanding and limits the use cases for QKD networks. In this work, we explore the possibility to securely relay a secret in a QKD network by relaxing the trust assumptions (if not completely) on the relay. We characterize QKD relays with different trust levels, namely, Full Access Trust (FAT), Partial Access Trust (PAT), and No Access Trust (NAT). As the name suggests, each level defines the degree with which a relay is required to be trusted with the secret provided by the key management system for end-to-end communication. We then review and propose multiple constructions of the QKD key management system based on the different trust levels. Main contribution of the paper is realized by evaluating key management systems with no access trust level. In principle, we review key management with centralized topology and propose a new decentralized key management system. These different topologies provide various advantages based on the QKD network requirements, allowing an operational flexibility in the architecture. We believe this work presents a new perspective to the open problem of providing a confiding and a practical solution for future long range secure communications
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
