We first give a brief overview over quantum computing, quantum key distribution (QKD), a practical architecture that integrates (QKD) in current internet security architectures, and aspects of network security. We introduce the concept of quantum contracts inspired from game theory. Finally, we introduce the basic architecture of the quantum internet and present some protocols.
The forthcoming quantum Internet is poised to allow new applications not possible with the conventional Internet. The ability for both quantum and conventional networking equipment to coexist on the same fiber network would greatly facilitate the deployment and adoption of coming quantum technology. Most quantum networking tasks, like quantum repeaters and the connection of quantum processors, require nodes for multi-qubit quantum measurements (often Bell-State measurements), and their real-world coexistence with the conventional Internet has yet to be shown. Here we field deploy an MDI-QKD sy…
We demonstrated, for the first time, a machine-learning method to assist the coexistence between quantum and classical communication channels. Software-defined networking was used to successfully enable the key generation and transmission over a city and campus network.
We demonstrate for the first time a four-node trusted-node-free metro network configuration with dynamic discrete-variable quantum key distribution DV-QKD networking capabilities across four optical network nodes. The network allows the dynamic deployment of any QKD link between two nodes of the network, while a QKD-aware centralised software-defined networking (SDN) controller is utilised to provide dynamicity in switching and rerouting. The feasibility of coexisting a quantum channel with carrier-grade classical optical channels where both the quantum and classical channels are in the C-band…
We demonstrate how the 5G network slicing model can be extended to address data security requirements. In this work we demonstrate two different slice configurations, with different encryption requirements, representing two diverse use-cases for 5G networking: namely, an enterprise application hosted at a metro network site, and a content delivery network. We create a modified software-defined networking (SDN) orchestrator which calculates and provisions network slices according to the requirements, including encryption backed by quantum key distribution (QKD), or other methods. Slices are aut…
In free-space quantum key distribution (QKD) between moving parties, e.g., free-space QKD via satellite, the reference frame rotation and fluctuation degrades the performance of QKD. Reference-frame-independent QKD (RFI-QKD) provides a simple but efficient way to overcome this problem. While there has been a number of theoretical and experimental studies on RFI-QKD, the experimental verification of the robustness of RFI-QKD over other QKD protocols under the reference frame rotation and fluctuation is still missing. Here, we have constructed a free-space QKD system which can implement BB84, si…
Two time-reversal quantum key distribution (QKD) schemes are the quantum entanglement based device-independent (DI)-QKD and measurement-device-independent (MDI)-QKD. The recently proposed twin field (TF)-QKD, also known as phase-matching (PM)-QKD, has improved the key rate bound from $O\left( η\right )$ to $O\left( \sqrt η \right )$ with $η$ the channel transmittance. In fact, TF-QKD is a kind of MDI-QKD but based on single-photon detection. In this paper, we propose a different PM-QKD based on single-photon entanglement, referred to as single-photon entanglement-based phase-matching (SEPM)-QK…
Reference-Frame-Independent Quantum Key Distribution (RFI-QKD) provides a practical way to generate secret keys between two remote parties without sharing common reference frames. On the other hand, Measurement-Device-Independent QKD (MDI-QKD) offers high level of security as it immunes against all the quantum hacking attempts to the measurement devices. The combination of these two QKD protocols, i.e., RFI-MDI-QKD, is one of the most fascinating QKD protocols since it holds both advantages of practicality and security. For further practicality of RFI-MDI-QKD, it is beneficial to reduce the im…
Quantum key distribution (QKD) can provide point-to-point information-theoretic secure key services for two connected users. In fact, the development of QKD networks needs more focus from the scientific community in order to broaden the service scale of QKD technology to deliver end-to-end secure key services. Of course, some recent efforts have been made to develop secure communication protocols based on QKD. However, due to the limited key generation capability of QKD devices, high quantum secure key utilization is the major concern for QKD networks. Since traditional routing techniques do n…
Quantum key distribution (QKD) is a cryptographic method enabling two parties to establish a private encryption key. The range of communication of ground-based QKD is limited to an order of 100km, due to in-fibre attenuations and atmospheric losses, and the development of quantum repeaters remains technologically challenging. While trusted-node links make communication over large distances possible, satellite-QKD is required for communication over global distances. By using satellites equipped with high-quality optical links, satellite-QKD can achieve ultra-long-distance quantum communication …
It has previously been shown that quantum state tomography can be used to increase the key rate of quantum key distribution (QKD) for the special case of qubits (i.e.,d=2). Here, we consider the case of higher dimensions, i.e., qudits, and show that, for a prime number d>2, quantum state tomography can also improve the key rate of d-dimensional qudit-based QKD schemes, compared to the standard (d+1)-basis protocol. We apply our results to previous QKD experiments based on OAM (orbital angular momentum) encoding and demonstrate the advantage of tomography-based QKD protocols. Moreover, we compa…
Quantum key distribution (QKD) enables unconditionally secure communication ensured by the laws of physics, opening a promising route to security infrastructure for the coming age of quantum computers. QKD's demonstrated secret-key rates (SKRs), however, fall far short of the gigabit-per-second rates of classical communication, hindering QKD's widespread deployment. QKD's low SKRs are largely due to existing single-photon-based protocols' vulnerability to channel loss. Floodlight QKD (FL-QKD) boosts SKR by transmitting many photons per encoding, while offering security against collective attac…
In this paper, we propose a quantum key distribution (QKD) protocol based on only a two-dimensional Hilbert space encoding a quantum system and independent devices between the equipment for state preparation and measurement. Our protocol is inspired by the fully device-independent quantum key distribution (FDI-QKD) protocol and the measurement-device-independent quantum key distribution (MDI-QKD) protocol. Our protocol only requires the state to be prepared in the two dimensional Hilbert space, which weakens the state preparation assumption in the original MDI-QKD protocol. More interestingly,…
Quantum key distribution (QKD) together with one time pad encoding can provide information-theoretical security for communication. Currently, though QKD has been widely deployed in many metropolitan fiber networks, its implementation in a large scale remains experimentally challenging. This letter provides a brief review on the experimental efforts towards the goal of global QKD, including the security of practical QKD with imperfect devices, QKD metropolitan and backbone networks over optical fiber and satellite-based QKD over free space.
Measurement-device-independent quantum key distribution (MDI-QKD) is the only known QKD scheme that can completely overcome the problem of detection side-channel attacks. Yet, despite its practical importance, there is no standard approach towards proving the security of MDI-QKD. Here, we present a simple numerical method that can efficiently compute almost-tight security bounds for any discretely modulated MDI-QKD protocol. To demonstrate the broad utility of our method, we use it to analyze the security of coherent-state MDI-QKD, decoy-state MDI-QKD with leaky sources, and a variant of twin-…
Quantum Key Distribution (QKD) is one of the most important aspects of quantum cryptography. Using laws of quantum mechanics as the basis for security, the key distribution process is made information theoretically secure in QKD. With the advancement and commercialization of QKD, an end-to-end QKD simulation software is required that can include experimental imperfections. Software of this kind will ensure that resources are invested only after prior performance analysis, and is faithful to experimental capacities and limitations. In this work, we introduce our QKD simulation toolkit qkdSim, w…
Quantum key distribution (QKD) has been developed for decades and several different QKD protocols have been proposed. But two difficulties limit the implementation of most QKD protocols. First, the involved participants are required to have heavy quantum capabilities, such as quantum joint operation, quantum register, and so on. Second, a hypothetical authenticated classical channel is used in most of the existing QKD protocols and this assumed channel does not exist in reality. To solve both the above limitations at the same time, this study proposes three lightweight authenticated QKD protoc…
Quantum Key Distribution (QKD) can provide information-theoretically secure communications and is a strong candidate for the next generation of cryptography. However, in practice, the performance of QKD is limited by "practical imperfections" in realistic sources, channels, and detectors (such as multi-photon components or imperfect encoding from the sources, losses and misalignment in the channels, or dark counts in detectors). Addressing such practical imperfections is a crucial part of implementing QKD protocols with good performance in reality. There are two highly important future directi…
Quantum key distribution (QKD) provides information theoretically secures key exchange requiring authentication of the classic data processing channel via pre-sharing of symmetric private keys. In previous studies, the lattice-based post-quantum digital signature algorithm Aigis-Sig, combined with public-key infrastructure (PKI) was used to achieve high-efficiency quantum security authentication of QKD, and its advantages in simplifying the MAN network structure and new user entry were demonstrated. This experiment further integrates the PQC algorithm into the commercial QKD system, the Jinan …
Recently some alternatives of the measurement device independent quantum key distribution(MDI-QKD) based on the single-photon Bell state measurement (SBSM) have been proposed. Although these alternatives are not precisely as secure as MDI-QKD, they possess the advantage of high key rate of traditional BB84-like protocol and avoid the technical complexity of two-photon interference required in the MDI-QKD. However, the setups of these proposed schemes are rather complicated compared to commonly used BB84 systems. Here we propose a simple implementation of SBSM-based QKD which is directly built …
Memory-assisted measurement-device-independent quantum key distribution (MA-MDI-QKD) is a promising scheme that aims to improve the rate-versus-distance behavior of a QKD system by using the state-of-the-art devices. It can be seen as a bridge between current QKD links to quantum repeater based networks. While, similar to quantum repeaters, MA-MDI-QKD relies on quantum memory (QM) units, the requirements for such QMs are less demanding than that of probabilistic quantum repeaters. Here, we present a variant of MA-MDI-QKD structure that relies on only a single physical QM: a nitrogen-vacancy ce…
We present an implementation of the time-frequency (TF) quantum key distribution (QKD) protocol realized mainly with standard telecommunication components at 1550 nm. TF-QKD is implemented with modulations in time and frequency, namely pulse position modulation (PPM) and frequency shift keying (FSK). The time-frequency uncertainty relation ensures the security of the protocol. We further demonstrate free-space optical QKD transmission over a 388-m distance. Since the QKD setup is single-mode fiber (SMF) -based, precise coupling in and out of the SMFs is crucial. Thus, we implemented an optical…
We propose a free-space reconfigurable quantum key distribution (QKD) network to secure communication among mobile users. Depends on the trustworthiness of the network relay, the users can implement either the highly secure measurement-device-independent QKD, or the highly efficient decoy state BB84 QKD. Based on the same quantum infrastructure, we also propose a loss tolerant quantum position verification scheme, which could allow the QKD users to initiate the QKD process without relying on pre-shared key.
Security proofs of quantum key distribution (QKD) often require post-processing schemes to simplify the data structure, and hence the security proof. We show a generic method to improve resulting secure key rates by partially reversing the simplifying post-processing for error correction purposes. We apply our method to the security analysis of device-independent QKD schemes and of detection-device-independent QKD schemes, where in both cases one is typically required to assign binary values even to lost signals. In the device-independent case, the loss tolerance threshold is cut down by our m…
Measurement-device-independent quantum key distribution (MDI-QKD) protocol was proposed to remove all the detector side channel attacks, while its security relies on the trusted encoding systems. Here we propose a one-sided MDI-QKD (1SMDI-QKD) protocol, which enjoys detection loophole-free advantage, and at the same time weakens the state preparation assumption in MDI-QKD. The 1SMDI-QKD can be regarded as a modified MDI-QKD, in which Bob's encoding system is trusted, while Alice's is uncharacterized. For the practical implementation, we also provide a scheme by utilizing coherent light source …
Quantum key distribution (QKD) based on the laws of quantum physics allows the secure distribution of secret keys over an insecure channel. Unfortunately, imperfect implementations of QKD compromise its information-theoretical security. Measurement-device-independent quantum key distribution (MDI-QKD) is a promising approach to remove all side channels from the measurement unit, which is regarded as the "Achilles' heel" of QKD. An essential assumption in MDI-QKD is however that the sources are trusted. Here we experimentally demonstrate that a practical source based on a semiconductor laser di…
The quantum key distribution (QKD), guaranteed by the principle of quantum physics, is a promising solution for future secure information and communication technology. However, device imperfections compromise the security of real-life QKD systems, restricting the wide deployment of QKD. This study reports a decoy-state BB84 QKD experiment that considers both source and detection imperfections. In particular, we achieved a rigorous finite-key security bound over fiber links of up to 75 km by applying a systematic performance analysis. Furthermore, our study considers more device imperfections t…
We analyze the security and feasibility of a protocol for Quantum Key Distribution (QKD), in a context where only one of the two parties trusts his measurement apparatus. This scenario lies naturally between standard QKD, where both parties trust their measurement apparatuses, and Device-Independent QKD (DI-QKD), where neither does, and can be a natural assumption in some practical situations. We show that the requirements for obtaining secure keys are much easier to meet than for DI-QKD, which opens promising experimental opportunities. We clarify the link between the security of this one-sid…
Passive quantum key distribution (QKD) has been proposed for discrete variable protocols to eliminate side channels in the source. Unfortunately, the key rate of passive DV-QKD protocols suffers from sifting loss and additional quantum errors. In this work, we propose the general framework of passive continuous variable quantum key distribution. Rather surprisingly, we find that the passive source is a perfect candidate for the discrete-modulated continuous variable quantum key distribution (DMCV QKD) protocol. With the phase space remapping scheme, we show that passive DMCV QKD offers the sam…
Pervasive Vulnerability Analysis and Defense for QKD-based Quantum Private Query
College of Computer Science, Chongqing University（重庆大学计算机学院）；Science and Technology on Communication Security Laboratory, Institute of Southwestern Communication（西南通信研究所通信安全重点实验室）；State Key Laboratory of Networking and Switching Technology, Beijing University of Posts and Telecommunications（北京邮电大学网络与交换技术国家重点实验室）
Quantum key distribution (QKD) is the most used protocol in the context of quantum cryptography for sharing a private encryption key between two parties. Covid-19 pandemic has raised the ever-increasing need for online communications a lot; this requires enhanced security protocols. QKD has the potential to meet a global scale network's security requirements. Despite considerable progress, all ground-based QKD approaches have distance limitations due to atmospheric or fiber attenuation. A global network scheme can use intersatellite links to establish a trusted node network with constellations…
The ultimate aim of quantum key distribution (QKD) is improving the performance of transmission distance and key generation speed. Unfortunately, it is believed to be limited by the secret-key capacity of quantum channel without quantum repeater. Recently, a novel twin-field QKD (TFQKD) [Nature 557, 400 (2018)] is proposed to break through the limit, where the key rate is proportional to the square-root of channel transmittance. Here, by using the vacuum and one-photon state as a qubit, we show that the TF-QKD can be regarded as a measurement-device-independent QKD (MDI-QKD) with single-photon…
A novel protocol - measurement-device-independent quantum key distribution (MDI-QKD) - removes all attacks from the detection system, the most vulnerable part in QKD implementations. In this paper, we present an analysis for practical aspects of MDI-QKD. To evaluate its performance, we study various error sources by developing a general system model. We find that MDI-QKD is highly practical and thus can be easily implemented with standard optical devices. Moreover, we present a simple analytical method with only two (general) decoy states for the finite decoy-state analysis. This method can be…
Quantum key distribution (QKD) gaurantees unconditional communication security based on the laws of quantum physics. However, practical QKD suffers from a number of quantum hackings due to the device imperfections. From the security standpoint, measurement-device-independent quantum key distribution (MDI-QKD) is in the limelight since it eliminates all the possible loopholes in detection. Due to active control units for mode matching between the photons from remote parties, however, the implementation of MDI-QKD is highly impractical. In this article, we propose a novel method in which the ind…
Without actively aligning the reference frames, the reference-frame-independent quantum key distribution (RFI-QKD) can generate secure keys even when the reference frames drift slowly. Here, we propose a new scheme on the decoy-state RFI-QKD, where the basis assignments of two legitimate parties are biased, reducing the fraction of mismatched-basis data. When accounting for statistical fluctuations under different misalignments of reference frames, we investigate the performance of biased decoy-state RFI-QKD with full parameter optimization. We also make a clear comparison between the new sche…
We present a practical method that can make quantum key distribution (QKD), for the first time, both ultra-long-distance and immune to all attacks in the detection system. This method is an important extension of the measurement-device-independent QKD (MDI-QKD) - MDI-QKD with entangled photon sources in the middle. By proposing a general model and simulating an entanglement based QKD experiment, we find that MDI-QKD with one entangled photon source in the middle can practically tolerate 77 dB combined loss (367km standard telecom fiber) in the asymptotic limit, and it can still tolerate 60 dB …
Existing security proofs of quantum key distribution (QKD) suffer from two fundamental weaknesses. First, memory attacks have emerged as an important threat to the security of even device-independent quantum key distribution (DI-QKD), whenever QKD devices are re-used. This type of attacks constitutes an example of covert channels, which have attracted a lot of attention in security research in conventional cryptographic and communication systems. Second, it is often implicitly assumed that the classical post-processing units of a QKD system are trusted. This is a rather strong assumption and i…
Quantum key distribution endows people with information-theoretical security in communications. Twin-field quantum key distribution (TF-QKD) has attracted considerable attention because of its outstanding key rates over long distances. Recently, several demonstrations of TF-QKD have been realized. Nevertheless, those experiments are implemented in the laboratory, remaining a critical question about whether the TF-QKD is feasible in real-world circumstances. Here, by adopting the sending-or-not-sending twin-field QKD (SNS-TF-QKD) with the method of actively odd parity pairing (AOPP), we demonst…
Reference-Frame-Independent quantum key distribution (RFI-QKD) is known to be robust against slowly varying reference frames. However, other QKD protocols such as BB84 can also provide secrete keys if the speed of the relative motion of the reference frames is slow enough. While there has been a few studies to quantify the speed of the relative motion of the reference frames in RFI- QKD, it is not yet clear if RFI-QKD provides better performance than other QKD protocols under this condition. Here, we analyze and compare the security of RFI-QKD and BB84 protocol in the presence of the relative …
In this paper, we present a quantum-key-distribution (QKD)-based quantum private query (QPQ) protocol utilizing single-photon signal of multiple optical pulses. It maintains the advantages of the QKD-based QPQ, i.e., easy to implement and loss tolerant. In addition, different from the situations in the previous QKD-based QPQ protocols, in our protocol, the number of the items an honest user will obtain is always one and the failure probability is always zero. This characteristic not only improves the stability (in the sense that, ignoring the noise and the attack, the protocol would always suc…
