Resource Allocation in Optical Networks Secured by Quantum Key Distribution

Abstract

Optical-network security is attracting increasing research attention, as loss of confidentiality of data transferred through an optical network could impact a huge number of users and services. Data encryption is an effective way to enhance optical network security. In particular, quantum key distribution (QKD) is being investigated as a secure mechanism to provide keys for data encryption at the end-points of an optical network. In a QKD-enabled optical network, apart from traditional data channels (TDChs), two additional channels, called quantum signal channels (QSChs) and public interaction channels (PIChs), are required to support the secure key synchronization. How to allocate network resources to QSChs, PIChs, and TDChs is emerging as a novel problem for the design of a security-guaranteed optical network. This article addresses the resource-allocation problem in optical networks secured by QKD. We first discuss a possible architecture for a QKD-enabled optical network, where a software-defined networking (SDN) controller is in charge of allocating the three types of channels (TDCh, QSCh, and PICh) over different wavelengths exploiting wavelength-division multiplexing (WDM). To save wavelength resources, we propose to adopt optical time-division multiplexing (OTDM) to allocate multiple QSChs and PIChs over the same wavelength. A routing, wavelength, and time-slot assignment (RWTA) algorithm is designed to allocate wavelength and time-slot resources for the three types of channels. Different security levels are included in the RWTA algorithm by considering different key-updating periods (i.e., the period after which the secure key between two end-points has to be updated). Illustrative simulation results show the effects of different security-level configuration schemes on resource allocation.

Multi-Tenant Provisioning for Quantum Key Distribution Networks With Heuristics and Reinforcement Learning: A Comparative Study

“…In order to improve the physical-layer performance such as secret-key rate and achievable distance, a number of analytical studies [30], [43], system experiments [31], [34], [36], and field trials [33], [44] have been carried out. On the other hand, several resource assignment strategies have been proposed to optimize the network-layer performance such as blocking probability and resource utilization when QKD coexists with the classical networks [32], [35]. In [45], [46], the protection and recovery schemes were described for resilient QKD-integrated classical networks.…”

“…In [51], a new concept of QKD as a service was proposed where multiple users can obtain their required secret-key rates from the same QKD network infrastructure by applying for their dedicated QKD services. On the other hand, QKD can be adopted in several use cases, e.g., data service security enhancement [35], [40], physical-layer attack mitigation [49], security enhancement of SDN control [52], energy efficiency improvement for Internet of things [53], and virtual network security enhancement [54], [55].…”

Quantum-Key-Distribution (QKD) Networks Enabled by Software-Defined Networks (SDN)

“…In 2016, Alejandro et al discussed the impact of SDN on QKD-device deployment, and proposed a quantum sensing SDN architecture by dividing the network into three layers, i.e., application layer, control layer, and infrastructure layer [16]. In 2017, Aguado et al proposed a distributed NFV MANO architecture by combining NFV orchestration with QKD technology through the scheduling of SDN controller, and integrating IDQ QKD system with experiments [10]. In the same year, as shown in Figure 1a, Yu et al proposed a three-layer architecture of QKD networks named software-defined QKD network to solve the problem of complex management caused by excessive resource consumption [17].…”

“…In the same year, as shown in Figure 1a, Yu et al proposed a three-layer architecture of QKD networks named software-defined QKD network to solve the problem of complex management caused by excessive resource consumption [17]. In addition, as shown in Figure 1b, Zhao et al proposed a four-layer architecture from the perspective of how to use QKD to enhance the security of SDONs, including application layer, control layer, QKD layer, and data layer [10]. and upgrade the network efficiently.…”

“…Therefore, there are some researches focused on the topics of QKD networks with SDN. A QKD-enabled optical network architecture is proposed to add an additional layer, i.e., QKD layer, for secret keys in software-defined optical networks (SDONs) [10]. Moreover, some key-assignment schemes are developed to secure control signals and data services and enhance their security in SDONs [11][12][13] with wavelength division multiplexing (WDM) [14] and optical time division multiplexing (OTDM) [15,16].…”