CC BY
8
NANOSYSTEMS: Vorontsova I., Goncharov R., et al. Nanosystems:
PHYSICS, CHEMISTRY, MATHEMATICS Phys. Chem. Math., 2023,14 (3), 342-348.
http://nanojournal.ifmo.ru
Original article DOI 10.17586/2220-8054-2023-14-3-342-348
Measurement-device-independent continuous variable quantum key distribution protocol operation in optical transport networks
Irina Vorontsova1, Roman Goncharov1, Sergey Kynev1'2, Fedor Kiselev1'2, Vladimir Egorov1'2
1ITMO University, St. Petersburg, Russia 2SMARTS-Quanttelecom LLC, St. Petersburg, Russia
Corresponding author: Irina Vorontsova, [email protected]
PACS 03.67.-a, 42.50.-p
Abstract Numerically, a theoretical analysis of the noise impact caused by spontaneous Raman scattering, four-wave mixing, and linear channel crosstalk on the measurement-device-independent continuous variable quantum key distribution systems is conducted. The analysis considers symmetry and asymmetry of system paths, as well as possible channel allocation schemes, for a quantum channel located in C- and O-bans. Mathematical models for MDI CV-QKD system and the contributing noises' description are provided. The secure key generation rate is estimated to state features of protocol operation when integrated with existing DWDM systems in the context of its implementation into telecommunication networks.
Keywords device-independence, quantum key distribution, continuous variables
Acknowledgements The work was done by Leading Research Center "National Center for Quantum Internet" of ITMO University by the order of JSCo Russian Railways.
For citation Vorontsova I., Goncharov R., Kynev S., Kiselev F., Egorov V. Measurement-device-independent continuous variable quantum key distribution protocol operation in optical transport networks. Nanosystems: Phys. Chem. Math., 2023, 14 (3), 342-348.
1. Introduction
Quantum key distribution (QKD) is one of the most rapidly advancing fields of quantum technologies [1,2]. Its main idea is an opportunity to transport a cryptographically secure key between two and more authenticated users connected to each other through quantum and information channels. Guarantied by the principles of quantum mechanics [3], the security of QKD to attacks from an eavesdropper ensures safety of the transmitted data from all kinds of hacking and known attacks.
One option to classify QKD protocols is based on them being discrete-variable (DV) or continuous-variable (CV) [4]. Additionally, among many other QKD protocol classifications, there is the one distinguishing between protocols in terms of their device-dependence or (semi-)device-independence [5]. The intersection of these two criteria gives rise to a new class of protocols, that is measurement-device-independent (MDI) CV-QKD protocol. Device-independence features particular practical importance, for it eliminates many side channel attacks, though implies accurate theoretical analysis.
Not only does this work discuss the latter, but also for the first time combines this analysis with the task of simultaneous propagation of information and quantum signals in a single optical fiber [6]. The effects considered as channel loss sources are spontaneous Raman scattering, four-wave mixing, and linear channel crosstalk. A possible realization scheme is discussed, as well as the allocation of classical channels on the standard DWDM grid. The security analysis is carried out numerically, employing the known theoretical security bounds to estimate the performance of the addressed QKD system. The results are quite important in practice to be considered when integrating QKD with the existing telecommunication networks.
2. Measurement-device-independent QKD
Let us discuss main principles underlying MDI QKD protocol operation [5,7]. The essence of the approach lies in the fact that no assumptions are made about the detectors involved in the protocol, such that they can even be controlled by an eavesdropper (Eve). In a typical single-photon MDI QKD protocol, two legitimate users (Alice and Bob) send quantum signals to an untrusted central relay, often addressed as Charlie. A Bell state measurement is performed then; both signals interfere at a 50:50 beam splitter (BS). Next, output signals go through a polarizing beam splitter (PBS) to be projected into either horizontal (H) or vertical (V) polarization state. The measurement is pronounced successful if two of the four involved detectors click.
© Vorontsova I., Goncharov R., Kynev S., Kiselev F., Egorov V., 2023
2.1. Continuous-variable MDI QKD protocol
Similarly to the conventional MDI QKD, the continuous variable (CV) version of the protocol [8,9] again implies there are the two senders and an untrusted relay performing the measurements to be used during legitimate users' postprocessing to generate the secure key.
The two known approaches to a general protocol description, namely, "prepare-and-measure" (PM) and "entanglement-based" (EB) scenarios, apply to the case of MDI CV-QKD as well. For these scenarios are equivalent in terms of their mathematical description and effectiveness, we will consider a more practically convenient PM version of the protocol. Gaussian modulation [4,10] (GG02 protocol) is considered, so Alice and Bob are operating with coherent states with a two-dimensional Gaussian distribution. They first generate coherent states |xA + ipA) and |xB + ipB) with the quadratures x and p featuring variance VA(B) - 1 (in shot noise units (SNU)) and then send their states to Charlie via quantum channels. Next, Alice's and Bob's modes interfere at the beam splitter, while Charlie measures the C and D modes' quadratures on homodyne detectors and announces the resulting state {XC, PD} publicly. It is Bob only who changes his state according to XB = xB + kXC, PB = pB - kPD (with k standing for the gain associated with channel losses), whereas Alice's state remains unchanged. Finally, standard procedures are utilized for parameter estimation, information reconciliation, and privacy amplification.
Since there is equivalency between the CV-QKD EB and PM scenarios' security proof against collective attacks [11, 12], we shall now switch to the well-known covariance matrix formalism.
Implying that Eve has access to the relays, quantum channels, and even Bob's state displacement operation in the EB scheme, further security analysis of the MDI CV-QKD protocol can be seen as a special case of a typical one-way CV-QKD protocol [4,10].
Then the secure key fraction can be estimated in accordance with the Devetak-Winter bound [13,14]:
r = ßI(Xa, Pa : Xb, Pb) - x(XB, PB : E),
(1)
where 0 < fi < 1 is the reconciliation efficiency (assumed to be ideal in the further numerical simulations), I is the mutual information between Alice and Bob, x(XB, PB : E) = S(pE) - S(pE |XB, PB ) is the Holevo bound, and S(pE) denotes the von Neumann entropy of quantum state pE.
The upper bound x(XB, PB : Ai, Bi) is determined only using the corresponding covariance matrix. Supposing the system is under two independent entangling cloner attacks [4], the covariance matrix takes the form of:
/
VaI2 J (t (VA - 1K )
^ V (T(VA - 1K) [(Va - 1) + 1 + Tf]l2
T -
«A g2,
2 0 ,
f = 1 + —[«b(SB - 1) + î?ASA] + — (— VVB - 1 - VnBVVb + 1 )2,
«A «A V 0 /
^A = «A =
«A «A ^ 0
^ + a, Sb = ^ + fB,
«A «B
10-aLAC/10, «B = 10-«LBC/10,
(2)
(3)
(4)
(5)
(6)
where nA (nB) is a channel (Alice-Charlie or Bob-Charlie) transmittance, £A ) is the excess noise, g is the offset factor, is the identity matrix, and az is the Pauli z-matrix. To minimize the excess noise, the offset factor is set as
0=
2 vb - 1 «B ^
Vb + 1'
Then, the excess noise is expressed as:
e
fA + —[«b(& - 2)+ 2], «A
(7)
(8)
where the excess noise on Alice's side (Bob's side) £A(B) contain the corresponding channel noise converted to SNU. Alice's and Bob's variances are considered equal VA = VB = 40 in the simulations.
3. Channel Noise Sources and their Mathematical Description
Naturally, losses are inevitable when it comes to signal propagation in any medium, be it fiber-optical communication lines or free space. Regarding QKD, three effects are addressed in terms of noise primarily, which are the spontaneous Raman scattering (SpRS), the four-wave mixing (FWM) nonlinearity, and the linear channel crosstalk (LCXT). Now, we will briefly summarize their physical nature and corresponding mathematical description, then estimate the negative contribution they make to the performance of MDI CV-QKD system under consideration.
3.1. Spontaneous Raman Scattering
Firstly, the main contributor to the overall channel losses in case of QKD integrated with DWDM systems is the SpRS noise [15,16]. Its impact is minor for classical networks, though the contribution becomes substantial for joint QKD and DWDM systems [15,16]. The origin of the SpRS is different for the cases of co- and counter-propagation of signals. Thus, two sub-types are distinguished usually, that are forward (for co-propagating signals) and backward (for counter-propagating signals) SpRS noise. When speaking in the context of simultaneous QKD session and information transmission within single optical fiber, the mathematical representation of their contribution is given by [6,17]:
Nc h
Pram,f = PoutL Np(Ac, Aq)AA, (9)
c=1
and
Pram,b = Pout smyl) nh p(Ac,Aq)AA, (10)
e c=1
where Pout denotes the output power for a single channel, L is the length of the optical fiber, Nch is the number of classical channels present in a DWDM system, p(Ac, Aq) describes the normalized scattering cross-section for the wavelengths of classical (Ac) and quantum (Aq) channels, and AA is the bandwidth of the quantum channel filtering system.
For the MDICV-QKD realization considered here, both forward and backward SpRS occur for different system paths. A detailed description of the configuration will be provided in the following section.
The output power values appear in formulas instead of the input ones, so that to meet the the bit error rate (BER) requirements of a DWDM system directly. Thus, the value of Pout can be obtained as follows:
Pout (dBm) = Rx (dBm) + IL(dBm), (11)
where Rx is the sensitivity of a receiver and IL denotes the insertion losses of the system.
3.2. Four-wave Mixing
Next channel noise source to consider is FWM. It is a third-order nonlinear process, which sequence is creation of photons at new frequencies as a result of the interaction between the initial ones [18]. These new frequencies might coincide with the one of the quantum channel [19], thus contributing to the overall noise in the band of the quantum channel.
To come up with the mathematical model for the FWM noise contribution consideration, let us consider three pump channels with the frequencies fi, fj, and fk. Then, the value of the resulting FWM noise peak power Pijk featuring the frequency fi + fj - fk can be expressed as [6]:
Pijk = nY2D2p2e-^L (1 PsPiPh, (12)
where the phase-matching efficiency for the FWM n and parameter Aft are defined as:
e2
n
and
£2 + A^2
1 4e-«L sin2 (A£L/2)
(1 - )2
2_ \2
A£ =-1fi - ff - fk|
Dc+dDKA2) (ifi - fki+1 fj - fki)
(13)
(14)
correspondingly. In the above equations, L is the transmission distance of the interacting light fields in the optical fiber, D denotes the degeneracy factor (D = 6, D = 3), Pi(j,k) and fi{j,k) are the input power and optical frequency of the interacting fields correspondingly, y stands for the third-order nonlinear coefficient, £ is the loss coefficient, Dc and dDc/d\ are the dispersion coefficient of an optical fiber and its slope respectively with A standing for the wavelength of the FWM radiation.
Finally, performing the summation of all the powers of the resulting FWM signals with frequencies coinciding with the frequency of the quantum channel, one obtains:
PFWM = 2_j Pijk, fi + fj - fk = fq. (15)
3.3. Linear Channel Crosstalk
It is due to the imperfections of the demultiplexers that any practically implemented DWDM system suffers LCXT losses [20].
Since information signals are orders of magnitude more powerful than quantum ones, the insufficient isolation might cause considerable LCXT noise, that can be estimated in the following way:
Plcxt = Pout (dBm) - ISOL (dB).
(16)
Once the power values of the contributing to the overall channel noise effects are calculated, it is needed to recalculate them to a photon detection probability. To do so, the following formula can be used:
P
pram,f(b)/FWM/LCXT
ram, f(b)/FWM/LCXT
hc/X
Air] dVB ,
(17)
q
where r/D denotes the detector efficiency, r/B = 10 0AIL is the transmission coefficient associated with the insertion losses of the detection system, h is the Planck constant, and c is the light speed.
4. MDI CV-QKD scheme and channel allocation
Here, a possible realization scheme of MDI CV-QKD protocol will be addressed to analyze its potential for creating telecommunication optical transport networks integrated with DWDM systems. The notion of maximal achievable distances of MDI CV-QKD systems employed to characterize the latter denotes fiber length corresponding to the case, when the secure key generation rate is non-zero.
The realization of MDI CV-QKD addressed in the work is shown in Fig. 1.
v., 1
1 C
W
D D
W M
D
M
Inf.Ch-s.
Inf.Ch-s.
I v., Bob ]
I
D W D M —
• • •
Inf.Ch-s.
Fig. 1. Schematic illustration for the MDI CV-QKD protocol realization with DWDM: information is transmitted from Alice to Bob via DWDM-information channels; quantum channel is co-propagating with information channels in Alice's path, whereas counter-propagating with them in Bob's path and, thus, which means forward SpRS noise is induced in the Alice-Charlie path and backward SpRS - in the Bob-Charlie path
Here, quantum signals are sent to the untrusted central relay to be homodyned there, whereas the information is transferred from Alice to Bob directly. It means, quantum and information signals are unidirectional in Alice's path (i.e., there is forward SpRS noise in the path) and counter-propagating through the Bob's path, so the SpRS noise features the backward type.
The performance of the MDI CV-QKD realization was then numerically analyzed in terms of the possible channel allocation schemes and asymmetry coefficients between Alice's La and Bob's Lb paths Rasym = La/Lb.
Similarly to the work [21], four allocation schemes for the quantum channel located in C-band and O-band of the telecommunication window were considered. The criterion and complete explanation for such a choice is provided in detail in the works [22,23]. The final choice of the configurations considered in the further numerical simulations is given in Table 1.
The parameters of the DWDM system are the following: £ = 0.18 dB/km, AX = 15 GHz, Nch = 10 or 40, Rx = -32 dBm and IL = 8 dB.
I. Vorontsova, R. Goncharov, S. Kynev, F. Kiselev, V Egorov Table 1. Description of the optimal configurations chosen for numerical simulations
Configuration Number of channels Quantum channel wavelength, nm
Configuration 1 10 1536.61
Configuration 2 10 1310
Configuration 3 40 1537.40
Configuration 4 40 1310
As for the asymmetry coefficient Rasym, three different relations are address here: a symmetric (i.e., La/Lb = 1) and two asymmetric realizations (La/Lb = 3/2 and La/Lb = 2/1).
5. Results and discussion
Using the mathematical models for the MDI CV-QKD secure key generation rate, SpRS, FWM, and LCXT noises, the realization of the system depicted in Fig. 1 was numerically simulated. The results are presented in Fig. 2.
Fig. 2. The dependence of the secure key generation rate on the optical fiber length for MDI CV-QKD system corresponding to the scheme in Fig. 1.
It is a known fact that for MDI CV-QKD systems the secure key generation rate decreases dramatically as the system approaches its symmetry (La = Lb), with the best result corresponding to the situation when one of the paths equals zero [24].
The results obtained confirm the stated conclusion, as the maximal achievable distance increases together with the system's paths asymmetry.
Interestingly, for the case of MDI CV-QKD, configurations for which the quantum channel is located in the C-band appeared to be more efficient in terms of their maximal achievable distances. For most cases, configurations with O-band-located quantum channel are more beneficial (MDI QKD as well, see [22]), as FWM noise does not contribute to the overall losses. Though the overall contribution of channel noises here is less for such cases too, fiber attenuation for the quantum channel wavelength of 1310 nm surpasses them significantly. It can be seen also that the maximum achievable distances do not exceed 6 km, thus, the secure key distribution over long distances is not possible here. Still, such realizations can be utilized for short-distance communication.
Regarding the number of information channels (10 and 40 in the work), for a larger number of information channels, a decrease in the maximal achievable distances takes place. This is a natural observation, as the more information channels are there in the system, the greater is the value of the overall channel losses. The decrease is substantial for C-band configurations, whereas is quite small in case of O-band.
6. Conclusion
In this work, the MDI CV-QKD protocol was addressed. A theoretical research and numerical simulation of the noise influence caused by SpRS, FWM, and LCXT effects on the performance of the MDI CV-QKD system performance was analyzed for a proposed practical realization scheme, in terms of channel allocation and the paths' asymmetry coefficient. Increasing the number of information channels naturally leads to a decrease in the maximal achievable distances. In addition, the allocation of a wavelength of 1310 nm for a quantum channel results in the shortening of maximal distance values for MDI CV-QKD, regardless of the fact the overall channel noise is less for such configurations. The superior contribution comes from the fiber attenuation, which is larger for the wavelength of 1310 nm. It was confirmed that the more asymmetric are the paths for the MDI CV-QKD scheme, the more efficient is the systems. Moreover, MDI CV-QKD realizations feature significantly shorter maximal achievable distances, that do not exceed several kilometers and can be utilized for short-distance information transmission only. The results obtained can be used in terms of practical implementation of MDI CV-QKD systems, so that to obtain optimal results.
References
[1] Scarani V., Bechmann-Pasquinucci H., J Cerf N., Dusek M., Liitkenhaus N., Peev M. The security of practical quantum key distribution. Reviews of Modern Physics, 2009, 81 (3), P. 1301-1350.
[2] Pirandola S., Andersen U.L., Banchi L., Berta M., Bunandar D., Colbeck R., Englund D., Gehring T., Lupo C., Ottaviani C., Pereira J.L. Advances in quantum cryptography. Advances in Optics and Photonics, 2020,12 (4), P. 1012-1236.
[3] Gisin N., Ribordy G.G., Titte W., Zbinden H. Quantum cryptography. Reviews of Modern Physics, 2002, 74 (1), P. 145-196.
[4] Grosshans F., Van Assche G., Wenger J., Brouri R., Cerf N.J., Grangier P. Quantum key distribution using gaussian-modulated coherent states. Nature, 2003, 421 (1), P. 238-241.
[5] Lo H.-K., Curty M., Qi B. Measurement-Device-Independent Quantum Key Distribution. Physical Review Letters, 2012, 108 (3), 130503.
[6] Mlejnek M., Kaliteevskiy N., Nolan D.A. Reducing spontaneous Raman scattering noise in high quantum bit rate QKD systems over optical fiber, 2017, URL: https://arxiv.org/ftp/arxiv/papers/1712/1712.05891.pdf.
[7] Ma X., Razavi M. Alternative schemes for measurement-device-independent quantum key distribution. Physical Review A, 2012, 86 (6), 62319.
[8] Papanastasiou P., Ottaviani C., Pirandola S. Finite-size analysis of measurement-device-independent quantum cryptography with continuous variables. Physical Review A, 2017, 96 (10), 042332.
[9] Lupo C., Ottaviani C., Papanastasiou P., Pirandola S. Continuous-variable measurement-device-independent quantum key distribution: Compos-able security against coherent attacks. Physical Review A, 2018, 97 (5), P. 1-10.
[10] Weedbrook C., Lance A.M., Bowen W.P., Symul T., Ralph T.C., Lam P.K. Quantum Cryptography Without Switching. Physical Review Letters, 2004, 93 (10), 170504.
[11] Grosshans F., Cerf N.J., Wenger J., Tualle-Brouri R., Grangier P. Virtual Entanglement and Reconciliation Protocols for Quantum Cryptography with Continuous Variables. Quantum Information and Computation, 2003, 3 (7), P. 535—552.
[12] Laudenbach F., Pacher C., Fung C.-H.F., Poppe A., Peev M., Schrenk B., Hentschel M., Walther P., Ubel H. H. Continuous-Variable Quantum Key Distribution with Gaussian Modulation-The Theory of Practical Implementations. Advanced Quantum Technologies, 2018,1 (8), 1800011.
[13] DevetakI., Winter A. Distillation of secret key and entanglement from quantum states. Proceedings of the Royal Society A: Mathematical, Physical and Engineering Sciences, 2005, 461 (1), P. 207-235.
[14] Pirandola S., Mancini S., Lloyd S., Braunstein S.L. Continuous-variable quantum cryptography using two-way quantum communication. Nature Physics, 2008, 4 (9), P. 726-730.
[15] Lin R., Chen J. Minimizing spontaneous Raman scattering noise for quantum key distribution in WDM network. Optical Fiber Communication Conference, Optica Publishing Group, 2021, F4E-6.
[16] Cai C., Sun Y., Ji Y. Intercore spontaneous raman scattering impact on quantum key distribution in multicore fiber. New Journal of Physics, 2020, 22 (8), 083020.
[17] Eraerds P., Walenta N., Legre M., Gisin N., Zbinden H. Quantum key distribution and 1 Gbps data encryption over a single fibre. New Journal of Physics, 2010,12 (6), 063027.
[18] Boyd R.W. Nonlinear Optics. 4th Edition. Elsevier, Amsterdam, 2019.
[19] Lin Q., Yaman F., Agrawal G.P. Photon-pair generation in optical fibers through four-wave mixing: Role of Raman scattering and pump polarization. Physical Review A, 2007, 75 (1), 023803.
[20] Hill A.-M., Payne D. B. Linear crosstalk in wavelength-division-multiplexed optical-fiber transmission systems. Journal of Lightwave Technology, 1985, 3 (3), P. 643-651.
[21] Vorontsova I, Goncharov R., Tarabrina A., Kiselev F., Egorov V. Theoretical analysis of quantum key distribution systems when integrated with a DWDM optical transport network. Journal of the Optical Society of America B, 2023, 40 (1), P. 63-71.
[22] Vorontsova I, Goncharov R., Tarabrina A., Tupyakov D., Bolychev E., Smirnov S., Kiselev F., Egorov V. Theoretical analysis of measurement-device-independent quantum key distribution systems integrated into fiber-optic communication lines using dense wavelength division multiplexing. Journal of Optical Technology, 2022, 89 (7), P. 424-429.
[23] Tarabrina A., Tupyakov D., Vorontsova I, Goncharov R., Zinovev A., Smirnov S., Kiselev F., Egorov V. Application of optimization methods to minimize noise in quantum key distribution systems integrated into fiber-optic communication lines using dense wavelength division multiplexing. Journal of Optical Technology, 2022, 89 (9), P. 549-554.
[24] Li Z., Zhang Y.-C., Xu F., Peng X., Guo H. Continuous-variable measurement-device-independent quantum key distribution. Physical Review A, 2014, 89 (5), 052301.
Submitted 3 March 2023; revised 11 March 2023; accepted 12 March 2023
Information about the authors:
Irina Vorontsova - ITMO University, Kronverkskiy, 49, St. Petersburg, 197101, Russia; ORCID 0000-0001-9861-0816; [email protected]
Roman Goncharov - ITMO University, Kronverkskiy, 49, St. Petersburg, 197101, Russia; ORCID 0000-0002-9081-8900; [email protected]
Sergey Kynev - ITMO University, Kronverkskiy, 49, St. Petersburg, 197101, Russia; SMARTS-Quanttelecom LLC, 6th Vasilyevskogo OstrovaLine, 59, St. Petersburg, 199178, Russia; ORCID 0000-0001-8698-1804; [email protected]
Fedor Kiselev - ITMO University, Kronverkskiy, 49, St. Petersburg, 197101, Russia; SMARTS-Quanttelecom LLC, 6th Vasilyevskogo OstrovaLine, 59, St. Petersburg, 199178, Russia; ORCID 0000-0002-3894-511X; [email protected]
Vladimir Egorov - ITMO University, Kronverkskiy, 49, St. Petersburg, 197101, Russia; SMARTS-Quanttelecom LLC, 6th Vasilyevskogo OstrovaLine, 59, St. Petersburg, 199178, Russia; ORCID 0000-0003-0767-0261; [email protected]
Conflict of interest: the authors declare no conflict of interest.
