Abstract
Recently, we implemented a basic star-shaped entanglement-based quantum key distribution network without trusted nodes. It enables simultaneous pairwise exchange of quantum keys between multiple users. In this paper, we demonstrate its flexibility by focusing on several aspects. We show continuous system operation over a partially deployed 100 km fiber link for multiple days as well as dynamic reconfiguration of the communication partners. The photon pair source enables type-II or type-0 photon pair generation by SPDC as well as various demultiplexing strategies and repetition rates.
Similar content being viewed by others
Avoid common mistakes on your manuscript.
1 Introduction
Recent progress in the development of quantum computers poses new risks for today’s cryptography [1]. One possible solution to prevent attacks against classical key distribution schemes is quantum key distribution (QKD) [2]. In this paper, we demonstrate the flexibility of a multi-user QKD network we have recently developed.
The basic functionality of the network has been described in Ref. [3]. The system consists of multiple fiber-based modules, as depicted in Fig. 2, enabling easy handling and simplifying modifications. Up to four identical receiver modules, each consisting of an imbalanced Michelson-type interferometer and two detectors, are connected to the photon pair source by optical fiber links. The star-shaped topology allows to efficiently scale up the number of users in the network and is advantageous compared to prepare-and-measure QKD networks requiring a QKD transmitter and receiver for each network participant. The network distributes time-bin entangled photon pairs from a central untrusted source to the users, which derive quantum keys from the arrival times of the photons according to the BBM92 time-bin QKD protocol [4,5,6].
In this paper, we present additional features of this modular QKD system, demonstrating the flexibility, robustness, and scalability required in practical quantum network applications. Entanglement-based QKD networks have been realized with polarization-entangled photons [7,8,9] as well as with QKD protocols based on dispersive optics [10, 11] or phase coding [12, 13]. An advantage of such networks is that they do not require a trusted node, which benefits security. Furthermore, they are scalable to a higher number of users with longer transmissions distances than ring-shaped networks [14].
2 Setup
In the photon pair source, a LiNbO3 amplitude modulator shapes pulses from a frequency-locked cw (continuous wave) laser centered around the frequency of 193.35 THz corresponding to roughly 1550.5 nm. The pulses are amplified by an erbium-doped fiber amplifier (EDFA) and pass an imbalanced interferometer with an optical path length difference exceeding the pulse duration. Photon pairs are produced in a cascade of second-harmonic generation (SHG) and spontaneous parametric down-conversion (SPDC) and are then distributed to the users. In the receiver modules, the photons pass through phase-stabilized interferometers with a path length difference precisely matched to that in the photon source. The photons are detected at the two interferometer outputs with single-photon avalanche detectors (SPADs) operated at a dead time of 10 \(\upmu\)s and a detection efficiency of 20%. A time tagger records the photon arrival times with 13 ps resolution. Depending on the path combinations of the long and short interferometer arms in the source and receiver, the photons arrive in one of three different time bins. Quantum bits in the time basis are derived from photon detections in the two outer time bins. The bit value is zero or one, depending on photon arrival in the early or late time bin. When both photons of a pair are detected in the central time bin, the outputs at which they leave the interferometers are correlated due to two-photon interference [15]. The phases are adjusted to maximize the interference contrast by controlling the interferometer temperatures with sub-millikelvin precision. They are automatically realigned during the key exchange to minimize the quantum bit error rate (QBER), which is evaluated every 90 s, at the minimum. By assigning bit values to the two detectors, the users obtain quantum bits with a value depending on which detector clicked, which constitutes the second QKD basis.
Each user recovers the clock time of the photon source from the photon arrival times, such that neither an additional synchronization channel nor highly precise local clocks are needed. Thereby, the receiver modules become technically simpler and more cost-efficient simplifying the scalability of the network.
We have implemented two different SPDC modules for the source, containing different periodically poled LiNbO3 waveguides. One module contains a crystal for the generation of orthogonally-polarized photon pairs by type-IISPDC and the other contains a crystal generating parallel polarized photon paris with a broad spectrum by type-0 SPDC. Changing the source operation mode between type-II and type-0 SPDC requires only swapping a single module resulting in a large flexibility.
The orthogonal photons are efficiently separated by a polarization beam splitter with a low insertion loss. The parallel photons are separated into different frequency channels by a wavelength division demultiplexer (WDM), enabling the simultaneous distribution of independent keys to multiple pairs of users (cf. Fig. 1). A pair of communication partners is assigned to a pair of WDM frequency channels symmetric around the central frequency.
2.1 Long-term key exchange
To demonstrate the robustness and long-term stability of our QKD setup, we operated the type-0 SPDC module and performed a simultaneous QKD exchange between the user combinations of Alice, Bob, and Charlie, Diana. The whole setup was placed at a facility of Deutsche Telekom AG. A field-deployed 27 km long dark fiber loop connects the source to Alice’s receiver module. Bob is connected via 81 km of spooled fiber. Charlie and Diana are connected through optical fiber spools as well.
A key exchange over 86 h over a total distance of 108 km between Alice and Bob, including the deployed fiber, is shown in Fig. 3. After the initial fully automated phase alignment, taking roughly 40 min, we achieved an averaged sifted key rate of 17.0(8) bits\(/s\) with a mean QBER of 4.25 % between Alice and Bob. Charlie and Diana were connected through a total fiber distance of 31 km leading to a recorded averaged sifted key rate of 171(5) bits\(/s\) with a mean QBER of 2.3 %. Hence, we demonstrated a continuous, automatic operation over three days with very stable key rates showcasing the robustness of our system.
3 Flexible source operation
Any practical source should allow the flexible adaption to changing key parameters such as different transmission losses, key rate requirements, and receiver detection capabilities to optimize the QKD performance without time-consuming and costly setup modifications. Therefore, this flexibility of our source was demonstrated next.
3.1 Time bin interleaving
Chromatic dispersion leads to an elongation of the photon wave packets in time with 17 ps per nanometer of spectral width and per kilometer of optical fiber [16]. For fiber lengths in the range of tens of kilometers, our photon wave packets become hundreds of picoseconds longer. If the delay in the interferometers is too short, photons can leak into adjacent time bins because of the chromatic dispersion, which would increase the QBER. Dispersion compensation modules can be used to reduce the elongation of the wave packets and to avoid the leakage. However, using such modules would increase the losses and would make the receiver modules more expensive.
Alternatively, the delay between the time bins must be chosen so large that although the wave packets are elongated, they do not leak into the adjacent time bins. For the QKD network the delay was chosen to 3.03 ns, which is much longer than the time bin width (cf. Fig. 4a). Leakage due to chromatic dispersion is, therefore, avoided. When the wave packets become longer, the time bin width can be increased such that all photons are still assigned to the correct time bins. However, the large separation of the time bins increases the total pulse repetition cycle time and in turn reduces the pulse repetition rate and thereby the key rate. For short transmission distances where the chromatic dispersion is low, it would be desirable to use the empty time intervals between the time bins to keep the key rate high.
We initially run the source at a fundamental repetition frequency of 110 MHz, leading to an equally distributed three-peak structure in the arrival time histogram of each receiver. Provided the optical pulsewidth does not lead to pulse overlapping, a second three-peak structure can be interleaved with the first one by doubling the repetition rate to 220 MHz (cf. Fig. 4b). By simultaneously increasing the repetition frequency and the SHG pump power in the source, we can achieve higher key rates at equal QBER values. This can be performed a second time and thus, for the first time, we demonstrate QKD with four interleaved pulse cycles, i.e., at a 440 MHz repetition frequency (cf. Fig. 4c). Table 1 shows the system performance at constant \(\mu\) operated with the different repetition frequencies.
When the average SHG pump power is kept constant while the repetition rate is increased, the effective mean photon pair number per repetition \(\mu\) decreases. Lowering \(\mu\) leads to a lower multi-pair emission probability per repetition and, therefore, to a reduceded QBER. The pulse interleaving can, therefore, also be used to reduce the QBER.
3.2 SPDC type-II and type-0 modules
Our QKD system can be operated with both type-0 and type-II SPDC modules. In type-II measurements, photon pairs emerge in a 125-GHz wide spectrum as shown in Ref. [17] and are separated by a polarization beam splitter. The conversion efficiency is 7.6(2) × 10-10 photon pairs per pump photon. In type-0 measurements, photons are produced in a 9.3 THz wide spectrum and separated by WDM before being sent to all four users. The conversion efficiency density in the center of the spectrum is 6.81 × 10-7/THz. The conversion efficiency per channel is the product of this density and the channel width.
Due to the lower conversion efficiency, the source must be operated at a higher mean SHG power for type-II SPDC. An advantage of the type-II setup is the photon separation by the polarization beam splitter which has a much lower insertion loss than the WDMs, yielding higher key rates at the same \(\mu\). Alternatively, at comparable key rates, the type-II key exchange occurs with a lower \(\mu\) value resulting in a reduced QBER due to fewer multi-photon pair emissions.
Using the source with the type-II module is favorable when the setup is used to distribute quantum keys between only two users. Table 2 compares the results between inserted type-0 and type-II module for a QKD exchange between Alice and Bob. Alice was connected to the source via the 27 km deployed fiber loop and Bob via a 50 km long fiber spool. The secret key rate is calculated as [18]
with the sifted key rate \(r_{\rm sift}\) and the QBER q. The function \(H_b(p) = -p\log _2(p)-(1-p)\log _2(1-p)\) is the binary entropy. As an estimate for the reconciliation efficiency we use \(f=1.5\) [18] . Although the type-II and type-0 processes have been recorded with the same sifted key rate, the lower QBER in the type-II measurement yielded an approximately 37 % higher secret key rate.
3.3 Double-pass configuration
The photon pair source configuration discussed so far requires two nonlinear optical crystals for SHG and SPDC. Both crystals are 34 mm long periodically poled lithium niobate (PPLN) crystals of the same type. Therefore, in principle, only a single crystal is required when passed in forward direction for SHG and in backward direction for SPDC. Using the same crystal for SHG and SPDC significantly reduces the cost of the source. Here, we demonstrate a bidirectional operating scheme producing time-bin entangled photon pairs. A similar scheme has been used to produce polarization-entangled photon pairs [19].
For double-pass operation, a polarization-maintaining circulator is placed in front of the type-0 module, after which a 2 m tightly curled 775 nm fiber is placed acting as a filter for remaining pump light. A retro-reflector then directs the SHG light back into the crystal for the SPDC process. An additional narrow filter for 1550 nm pump light consisting of two dense wavelength division multiplexing (DWDM) filters and two fiber Bragg gratings is inserted to suppress residual laser photons at the center wavelength leaking into the output of the circulator.
The double-pass setup requires a careful design in order to avoid effects deteriorating the QKD performance. The crystal has angle-cut anti-reflection-coated end facets suppressing reflections in order to avoid noise in the photon pair production. Photon pairs down-converted during the forward pass are removed by propagating them through a tightly coiled fiber.
The pump laser light at 1550 nm can generate a broad Raman background in the optical fibers again increasing the noise level [20]. Raman photons generated at wavelengths outside of the WSS are filtered out by the C-band filter. Raman noise generated in the optical fibers before the crystal within the bandwidth of the filter is filtered out by the coiled fiber, similar to the pump light. However, Raman photons generated from pump light in the fiber between the circulator and the SHG crystal traveling in the backward direction could lead to background noise. The effect can be reduced by shortening this fiber section to a minimum.
Table 3 compares the QKD performance over 77 km transmission distance between the single-pass and double-pass configuration. In double-pass configuration, the key rate is significantly lower due to additional losses introduced by the filters after the pair generation. Additional losses ahead of the SPDC process are compensated by adjusting the pump power of the EDFA and thus do not affect the measured key rate and QBER. However, we observe an increased and unstable QBER in the phase basis compared to the QBER determined in the time basis caused by phase instabilities of the pump-interferometer due to the considerably higher power dissipated in the interferometer.
This is confirmed by repeating a QKD measurement with a slightly lower \(\mu\) by reducing the pump power showing that the fluctuations and mean value of the QBER in the phase basis match the QBER in the time basis. However, this problem can easily be solved. By reversing the order of the EDFA and the pump interferometer (cf. Fig. 2), the weak pulses pass the interferometer before they are amplified such that phase instabilities are drastically reduced. We have confirmed that in this configuration, the QBER in the phase basis reaches values as low as in the time basis proving that Raman noise does not limit the performance of the double-pass source.
4 Network topology
The distribution of photon pairs to multiple communication partners is realized by demultiplexing the type-0 SPDC spectrum of the source. We demonstrate the flexibility of our system to allocate WDM channels with three different commercial wavelength demultiplexers. Two standard arrayed-waveguide gratings with 100 GHz and 50 GHz channel spacing as well as a \(1 \times 9\) wavelength-selective switch (Lumentum TrueFlex) are at our disposal. The C-band filter suppresses cross-talk with higher diffraction orders of the arrayed-waveguide gratings after the SPDC module. The filter reduces the accessible photon pair spectrum to 5 THz. The QKD performance using the three different WDMs is shown in Fig. 5. Using the 50 GHz AWG, up to 78 participants can be connected to the network.
4.1 Optical switching
Using the WSS, channels can be configured to any of the fiber output ports [8] and the channel’s widths can be adjusted individually and down to a minimum of 6.25 GHz. Thus, adaptive bandwidth allocation based on the user’s key demands becomes possible, constituting another way to control the effective mean photon pair number \(\mu\) received by each two-party combination [21, 22] . Furthermore, the predefined party combinations can now be dynamically switched during operation, turning the presented static star-shaped network into a dynamic reconfigurable network. We demonstrate for the first time such dynamic network allocation in an entanglement-based QKD network using a time-bin protocol. The results of a key exchange measurement with dynamic switching between all possible network combinations every six hours are shown in Fig. 6. After reconfiguration, the interferometer phases of the newly connected user pairs are generally not aligned, resulting in a high QBER. Therefore, after each reconfiguration, re-alignment by the phase alignment algorithm is automatically executed. Once the QBER is minimal, key exchange can commence.
4.2 Co-propagation of QKD signals
In the standard star-shaped network configuration, each party is connected to the photon pair source through a dedicated optical fiber. However, it might be either necessary or beneficial to shorten the total length of dark fibers used for QKD to save on infrastructure costs. The fiber resources can be used more efficiently by sending multiple wavelength channels through the same optical fiber. Based on this approach, a modification of the star-shaped network structure is feasible, where a single source connection fans out into sub-nets. Users located close to each other can be connected to a node, which is connected to the photon pair source by a single fiber. The node receives all wavelength channels assigned to this sub-net and carries out demultiplexing, as depicted in Fig. 7. To demonstrate such a network configuration, a QKD measurement between Alice-Bob, and Charlie–Diana was performed, with two nodes, each connecting two users over the same optical fiber to the source. The sub-net of Alice and Diana was connected through the 27 km deployed fiber, whereas the sub-net of Bob and Charlie was connected through a 50 km fiber spool. Two channels were assigned to the same output of the wavelength-selective switch before they were demultiplexed after transmission by dense–wavelength–division–multiplexing filters (DWDMs). The DWDMs were specified with a pass bandwidth of 200 GHz, and two 100 GHz channels were configured with the WSS. A secure key rate between Alice and Bob of 16.9(45) bits/s was achieved over a duration of 2 h. The rate for Charlie–Diana was slightly lower with 13.6(22) bits/s due to relatively high losses in the DWDM filter connected to Diana.
To achieve the full flexibility in such a topology, the filters can be replaced by wavelength-selective switches (WSSs). They allow for channel widths as low as 6.25 GHz and are commercially available with more than 30 add/drop ports. With the current WSS, a bandwidth of 4.5 THz of the photon pair spectrum can be used. By connecting each of the outputs of the first WSS to a second WSS, a remotely switchable QKD network with hundreds of users could be established with only one further layer of WSSs.
5 Discussion and outlook
We have demonstrated the flexibility and versatility of a robust and scalable QKD system using a time-bin entanglement-based protocol. It can be used e.g. to establish metropolitan-scale QKD networks covering distances up to 100 km between the users. The network enables flexible and continuous QKD via a robust, all-fiber photon pair source in a modular setup. We achieve key rates over 77 km distance above 40 bits\(/s\) with a QBER below 3 %. Implementing fourfold pulse interleaving by setting the pulse repetition rate to 440 MHz, we can increase the sifted key rate to 63 bits\(/s\) at comparable QBERs.
Increasing the repetition frequency to even higher powers of two of the fundamental frequency would be possible by further shortening the SHG pulse in the source and by employing detectors with significantly lower timing jitter. The timing jitter of the currently used single-photon avalanche detectors is 250 ps. By using commercially available superconducting-nanowire single-photon detectors with a jitter below 25 ps and detection efficiencies around 70 %, the system could be operated at GHz repetition frequencies and key rates in the kbits/s become feasible.
We have demonstrated photon pair generation using a cascade of SHG and SPDC within a single nonlinear PPLN crystal, reducing costs significantly. Our system is compatible with time- and wavelength-division multiplexing schemes, similar to fully connected networks presented in Ref. [8, 9], but does not require polarization control of the transmitted photons. By wavelength demultiplexing of the SPDC pair spectrum, multiple users can share keys pairwise in a star-shaped network topology via a single untrusted source.
We prove the direct scalability of our current system to 78 users, using an AWG with 50 GHz wide channels. Employing a WSS, we demonstrate dynamic and on-demand reconfiguration of the network links during system operation. As the output ports of the implemented WSS are limited, scalability can still be achieved by cascading a second demultiplexing stage. While this can occur at the central photon source of the star-shaped network, we also demonstrate cascaded demultiplexing with DWDM filters after the co-propagation of two distinct quantum channels in a single optical fiber. If instead of the DWDM filters, wavelength selective switches are implemented, a fully connected network can be realized.
We thank Paul Wagner, Felix Wissel and Matthias Gunkel from Deutsche Telekom Technik GmbH for lending us AWG, WSS, and fiber spools and for the opportunity of field-testing the QKD system with a deployed dark fiber.
Data availability statement
The data that support the findings of this study are available from the corresponding author upon reasonable request.
References
E. Gerjuoy, Shor’s factoring algorithm and modern cryptography. An illustration of the capabilities inherent in quantum computers. Am. J. Phys. 73, 521–540 (2005). https://doi.org/10.1119/1.1891170
F. Xu, X. Ma, Q. Zhang et al., Secure quantum key distribution with realistic devices. Rev. Mod. Phys. 92(2), 020341 (2020). https://doi.org/10.1103/RevModPhys.92.025002
E. Fitzke, L. Biathlons, M. Tippmann et al., Scalable network for simultaneous pairwise quantum key distribution via entanglement-based time-bin coding. PRX Quant. 3(2), 020341 (2022). https://doi.org/10.1103/PRXQuantum.3.020341
C.H. Bennett, G. Brassard, N.D. Mermin, Quantum cryptography without bell’s theorem. Phys. Rev. Lett. 68, 557–559 (1992). https://doi.org/10.1103/PhysRevLett.68.557
W. Tittel, J. Brendel, H. Zbinden et al., Quantum cryptography using entangled photons in energy-time bell states. Phys. Rev. Lett. 84, 4737–4740 (2000). https://doi.org/10.1103/PhysRevLett.84.4737
J. Brendel, N. Gisin, W. Tittel et al., Pulsed energy-time entangled twin-photon source for quantum communication. Phys. Rev. Lett. 82, 2594–2597 (1999). https://doi.org/10.1103/PhysRevLett.82.2594
S.K. Joshi, D. Aktas, S. Wengerowsky et al., A trusted node-free eight-user metropolitan quantum communication network. Sci. Adv. 6, 859 (2020). https://doi.org/10.1126/sciadv.aba0959
M. Alshowkan, B.P. Williams, P.G. Evans et al., Reconfigurable quantum local area network over deployed fiber. PRX Quant. 2(040), 304 (2021). https://doi.org/10.1103/PRXQuantum.2.040304
S. Wengerowsky, S.K. Joshi, F. Steinlechner et al., An entanglement-based wavelength-multiplexed quantum communication network. Nature 564, 225–228 (2018). https://doi.org/10.1038/s41586-018-0766-y
X. Liu, X. Yao, R. Xue, et al., An entanglement-based quantum network based on symmetric dispersive optics quantum key distribution. APL Photon. 5(7), 076104 (2020). https://doi.org/10.1063/5.0002595, https://arxiv.org/abs/https://pubs.aip.org/aip/app/article-pdf/doi/10.1063/5.0002595/13386837/076104_1_online.pdf
X. Liu, J. Liu, R. Xue et al., 40-user fully connected entanglement-based quantum key distribution network without trusted node. PhotoniX 3(1), 2 (2022). https://doi.org/10.1186/s43074-022-00048-2
W. Wen, Z. Chen, L. Lu et al., Realizing an entanglement-based multiuser quantum network with integrated photonics. Phys. Rev. Appl. 18(024), 059 (2022). https://doi.org/10.1103/PhysRevApplied.18.024059
J.H. Kim, J.W. Chae, Y.C. Jeong et al., Quantum communication with time-bin entanglement over a wavelength-multiplexed fiber network. APL Photon. 7, 1 (2022). https://doi.org/10.1063/5.0073040
X. Zhong, W. Wang, R. Mandil et al., Simple multiuser twin-field quantum key distribution network. Phys. Rev. Appl. 17(014), 025 (2022). https://doi.org/10.1103/PhysRevApplied.17.014025
J.D. Franson, Bell inequality for position and time. Phys. Rev. Lett. 62, 2205–2208 (1989). https://doi.org/10.1103/PhysRevLett.62.2205
ITU-T G.652, Characteristics of a single-mode optical fibre and cable (Recommendation, International Telecommunication Union - Telecommunication Standardization Sector, 2016)
S. Euler, E. Fitzke, O. Nikiforov et al., Spectral characterization of SPDC-based single-photon sources for quantum key distribution. Eur. Phys. J. Spec. Top. 230(4), 1073–1080 (2021). https://doi.org/10.1140/epjs/s11734-021-00081-5
D. Elkouss, A. Leverrier, R. Alleaume, et al., Efficient reconciliation protocol for discrete-variable quantum key distribution, in 2009 IEEE International Symposium on Information Theory, pp. 1879–1883 (2009). https://doi.org/10.1109/ISIT.2009.5205475
M. Cabrejo-Ponce, C. Spiess, A.L.M. Muniz et al., GHz-pulsed source of entangled photons for reconfigurable quantum networks. Quant. Sci. Technol. 7(45), 022 (2022). https://doi.org/10.1088/2058-9565/ac86f0
S. Bahrani, M. Razavi, J. Salehi, Wavelength assignment in hybrid quantum-classical networks. Sci. Rep. 8, 85 (2018). https://doi.org/10.1038/s41598-018-21418-6
F. Appas, F. Baboux, M.I. Amanti et al., Flexible entanglement-distribution network with an AlGaAs chip for secure communications. NPJ Quant. Inf. 7, 118 (2021). https://doi.org/10.1038/s41534-021-00454-7
N.B. Lingaraju, H.H. Lu, S. Seshadri et al., Adaptive bandwidth management for entanglement distribution in quantum networks. Optica 8(3), 329–332 (2021). https://doi.org/10.1364/OPTICA.413657
Funding
Open Access funding enabled and organized by Projekt DEAL. This research has been funded by the Deutsche Forschungsgemeinschaft (DFG, German Research Foundation) - SFB 1119 - 236615297.
Author information
Authors and Affiliations
Corresponding author
Rights and permissions
Open Access This article is licensed under a Creative Commons Attribution 4.0 International License, which permits use, sharing, adaptation, distribution and reproduction in any medium or format, as long as you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons licence, and indicate if changes were made. The images or other third party material in this article are included in the article's Creative Commons licence, unless indicated otherwise in a credit line to the material. If material is not included in the article's Creative Commons licence and your intended use is not permitted by statutory regulation or exceeds the permitted use, you will need to obtain permission directly from the copyright holder. To view a copy of this licence, visit http://creativecommons.org/licenses/by/4.0/.
About this article
Cite this article
Dolejsky, T., Fitzke, E., Bialowons, L. et al. Flexible reconfigurable entanglement-based quantum key distribution network. Eur. Phys. J. Spec. Top. 232, 3553–3560 (2023). https://doi.org/10.1140/epjs/s11734-023-00980-9
Received:
Accepted:
Published:
Issue Date:
DOI: https://doi.org/10.1140/epjs/s11734-023-00980-9