本講主要內(nèi)容20.1量子通信網(wǎng)絡(luò)的體系結(jié)構(gòu)20.2量子通信網(wǎng)絡(luò)中的交換技術(shù)20.3量子通信實(shí)驗(yàn)網(wǎng)絡(luò)20.4量子互聯(lián)網(wǎng)120.1量子通信網(wǎng)絡(luò)的體系結(jié)構(gòu)[1]

裴昌幸，朱暢華，聶敏，閻毅，權(quán)東曉，量子通信，西安電子科技大學(xué)

出版社，2013.62Configurationexampleof

QKDuseforsecuring

a

Point-to-Point

application

linkITU-TY.3800基于QKD的量子保密通信Encryptor

DecryptorApplicationlinkClassical

channelQuantum

channelQKDlinkQKDmoduleY.3800(19)_F01ApplicationsenderPlain

textApplicationreceiverPlain

textCipher

text

01001011Key

10110100Key

10110100QKD

module3量子保密通信網(wǎng)絡(luò)的一般架構(gòu)QKD網(wǎng)絡(luò)QKDN◆QKDN

可根據(jù)用戶需

求產(chǎn)生端到端密鑰，包括QKD

模塊、量

子中繼節(jié)點(diǎn)、可信中

繼、交換機(jī)等用戶網(wǎng)絡(luò)◆

用戶網(wǎng)絡(luò)及經(jīng)典的通

信網(wǎng)絡(luò)，包括有線、

無(wú)線及衛(wèi)星網(wǎng)絡(luò)等。UsernetworkNetworkdevicesCryptographicCryptographicapplicationapplicationY.3800(19)_F02QKDNQKDnode(trustednode)QuantumrelaypointOpticalswitch/splitter■■QKDlinkQKDmodule●4量子保密通信網(wǎng)絡(luò)體系結(jié)構(gòu)QKD

moduleQKDlinkQKD

modulemodule

QKD

link

QKDmoduleQKD

node

QKD

node

QKD

node

Y.3800(19)_F03(trustednodeA)(trustednodeB)(trusted

node

C)ITU-TY.3800Application

Applicationlink□_SecuritydemarcationKM

KM

link

KM

link

KMKBC

一

Key

QKDNServicelayerlayercontrollayermanagementlayerQuantumQKDN

QKDNcontrollericontroller!QKDNmanagement

layermanagement

layerNetworkmanagerQKDN

controller!QKDNmanagerUsernetworkser

networkQKDN5Quantumlayer■Inthislayer,eachpair

of

QKDmodules

connected

by

a

QKD

linkgenerates

symmetricrandombit

stringsinits

own

way.■Each

QKDmodulepushesthe

random

bit

strings

up

to

a

KM

that

is

located

in

the

same

QKD

node.■Each

QKD

module

also

sends

QKD

link

parameters(e.g.,quantum

bit

error

rates

(QBERs),etc.)to

the

QKDN

manager.■Pairsof

QKDmodulesconnectedby

a

QKD

link

are

concatenated

via

QKD

nodes.6Keymanagementlayer■Each

KM

is

located

in

a

QKD

node.The

KMs

are

connected

via

KM

links.TheKM

receives

random

bit

strings

from

QKD

module(s)located

in

the

same

QKDnode.The

KM

synchronizes

and

re-formats

these

bit

strings,and

stores

themas

keys

in

the

storage.

Interfaces

for

various

cryptographic

applications

areinstalled

into

the

KM.The

KM

receives

key

requests

from

a

cryptographicapplication,acquires

the

necessary

amount

ofkeysfrom

the

storage,synchronizes,authenticates

the

acquired

keys

via

a

KM

link,and

supplies

themin

an

appropriate

format

to

the

cryptographic

application.■

If

KMs

do

not

have

direct

KM

links

between

them,they

should

share

thenecessary

number

ofkeys

by

key

relay.KMs

then

ask

the

QKDN

controller(s)

about

an

appropriate

relay

route.Upon

control

from

the

QKDN

controller(s),

each

KMrelayskeysvia

a

KM

link,withthe

other

key

in

another

KM

in

highlysecure

encryption

(e.g.,OTP).7QKDNcontrollayer■QKDN

control

functions

are

provided

by

QKDN

controller(s).Thesefunctionsinclude

routingcontrolforkeyrelay,controlof

QKD

linksand

KM

links,session

control

for

QKD

services,authentication

andauthorization

control,aswell

as

QoS

and

chargingpolicy

control.■NOTE-Inacentralizedarchitecture,asingleQKDNcontrollerexecutesQKDNcontrolfunctionsasillustrated

in

node

B

in

Figure

3.

In

a

distributed

architecture,each

QKD

node

should

contain

a

QKDNcontrollertoperformthesefunctionsasdepicted

by

QKDN

controllers

enclosedby

solid

and

dottedlines.8QKDNmanagementlayer■AQKDN

manager

located

in

this

layer

monitors

and

manages

theQKDN

as

a

whole.Its

tasks

may

include

fault,configuration,accounting,performance

and

security

management.■The

QKDN

manager

gathers

information

about

the

performance

ofQKD

modules

and

QKD

links

(including

quantum

relay

points)in

the

quantum

layer

and

key

management

information

in

the

keymanagement

layer,to

monitor

these

two

layers.9Servicelayer■Cryptographicapplicationsarelocated

in

this

layer,supplied

with

keys

fromtheQKDN

andconductsecure

communications

in

applicationlinks.10Usernetworkmanagementlayer■The

functionsintheusernetworkmanagement

layerperformmanagement

and

orchestration

of

virtualized

andnon-virtualized

resourcesinthe

user

network.11量子通信網(wǎng)絡(luò)的功能分層連接管理鏈路資

連接

連

接

源管理

建立

釋放控制光量子傳輸信道量子信

量子

量子

量子

道編碼

中繼

多址

交換量子交換機(jī)管理配置

性能

故障

管理

管理管理應(yīng)用管理應(yīng)用

應(yīng)用

查詢

修改量子

通信

網(wǎng)絡(luò)

管理層光量子信

源編碼經(jīng)典信息傳輸信道經(jīng)典信

息傳輸用戶接

入控制控制信

令處理用戶身

份鑒別量子通信控制層連接維護(hù)路由

選擇路由

控制路由

運(yùn)算傳輸信道層輔助建立信道管理用戶管理12管理呼叫/連接加密數(shù)據(jù)密性放大糾錯(cuò)誤碼檢驗(yàn)篩選管理呼叫/連接加密數(shù)據(jù)密性放大糾錯(cuò)誤碼檢驗(yàn)篩選TCP

TCPIP

IP

控制

IPEthernet

DLC

Ethernet量子通信網(wǎng)絡(luò)的協(xié)議體系隨機(jī)數(shù)產(chǎn)生或

數(shù)據(jù)采集光子發(fā)送或接收隨機(jī)數(shù)產(chǎn)生或

數(shù)據(jù)采集光子發(fā)送或接收驅(qū)動(dòng)OXC

NICNICsNIC13量子通信網(wǎng)絡(luò)拓?fù)浣Y(jié)構(gòu)量子交換機(jī)量子中繼器量子交換機(jī)一

量子交換機(jī)量子交換機(jī)一量子交換機(jī)QKQ

網(wǎng)絡(luò)重疊網(wǎng)絡(luò)結(jié)構(gòu)，由量子交換機(jī)和量子中繼器構(gòu)成光纖量

子傳輸網(wǎng)絡(luò)，而控制、管理和密文等經(jīng)典信息采用互聯(lián)網(wǎng)

進(jìn)行傳輸。兩個(gè)拓?fù)淇梢砸恢?，也可以不同?/p>

14量子中繼器Networking2014

CHINANETWORKSof

LinksManagementSection

5.1BBN

Protocol

suite

[90-95],IPSec

IKE

modification

[29],KeyRelay

[14,29,91],OSPFv2

routing

[29,98]2002

USABBN

DARPA2004

EU

SECOQCM.Mehic,Quantum

Key

Distribution:ANetworking

Perspective,ACMComputing

Surveys,53,2020QSIP[174]Section

9SoftwareDefinedNetworking[157-162],NetworkFunctionVirtualization

[157],SDN-WDM[167,168],Keyas

a

Service

[170]QKD網(wǎng)絡(luò)Section

4OpticalSwitching[10,69],TrustedRepeater,Multipathrouting[32,36,54,76,81-85]Overlay

Networking[28,32,82,88]Supp.Mat.(Section2)QKDNetSim[20],Quantum

Circuit

[11],qkdX[16],SimulaQron[10],Quirk

[15]QualitySection6,Supp.Mat.(Section3)ServiceSimilaritiesbetween

MANET

andQKD[136-140],OSPFv2[28,33,92,141-143,146],DSDV[148],GPSRQ[136],RSVP[supp.supp.21,22,25,26],Section

5.4Beijing-Shanghai

BackboneQKD

Network[119,120],Jinan

Government

PrivateQKD

Network[121-125],Hefei,Chaohu

and

Wuhu

QKD

Network

[115-118]Section

2CV-QKD

[72,130],QuatumChannel

[B-12],MDI-QKD[130-132],Satellite-to-ground

[17-24],Entaglementswapping[59-67]Supp.Mat.(Section

5)ETSI

ISG[33,34],ITU-T

SG13&SG17[36,37],FG-QIT5N

[38],IETF

QIRG

[40],ISO/IEC

JTC1/SC

27[39]Section

5.2QuantumBackbone

[57,106],Hop-by-Hop[106],Q3Pmodules[28],OSPFv2routing[33]ArchitectureSimulationsSection

5.3KeyManagementAgents

[38,58],TrustedRepeater[170]Quantum

Key

DistributionNetworking2010

JAPAN

UQCCKey

Rate

and

DistanceStandardsTestbeds15(a)Topologyofaswitched

QKD

net-(b)QKDNetworkwith

trusted

repeaters.work.Fig.3.QKDNetworkTypes.M.Mehic,QuantumKeyDistribution:

ANetworking

Perspective,ACMComputingSurveys,53,2020QKD

網(wǎng)絡(luò)分類BDE

FXOpticalSwitchCDABA16c20.2量子通信網(wǎng)絡(luò)中的交換技術(shù)17量子空分交換■量子空分交換是指通過(guò)改變光量子信號(hào)的物理傳輸通道(

空間物理位置),從而實(shí)現(xiàn)光量子信號(hào)交換。交換網(wǎng)絡(luò)(開關(guān)矩陣)控制單元輸入接口輸出接口2N182量子空分交換的指標(biāo)(1)端口數(shù)：決定交換容量；(2)光開關(guān)數(shù)：不同的交換網(wǎng)絡(luò)設(shè)計(jì)所需開關(guān)通道數(shù)不同，

一般開關(guān)

數(shù)越多成本越高，其控制復(fù)雜度也更高；(3)插損：主要由開關(guān)矩陣決定，插損對(duì)光量子通信系統(tǒng)的傳輸

距離及成碼率影響較大，

一般期望該指標(biāo)越小越好；(4)連通性：指開關(guān)矩陣的每一個(gè)輸入是否均能到達(dá)任一輸出。190

1

2

3

4

56

701234567Crossbar互連結(jié)構(gòu)

Knockout型互連結(jié)構(gòu)Crossbar結(jié)構(gòu)20234Banyan

網(wǎng)絡(luò)的內(nèi)部結(jié)構(gòu)是一組二叉樹，級(jí)數(shù)

k=log?NBanyan結(jié)構(gòu)21Benes結(jié)構(gòu)012346071Benes網(wǎng)絡(luò)為多通路網(wǎng)絡(luò)，具有可重構(gòu)無(wú)阻塞的特點(diǎn)，即可根據(jù)

需求靈活的重新制定通路，避免了競(jìng)爭(zhēng)。Benes網(wǎng)絡(luò)有2log?N-1級(jí)22若m

為第2級(jí)所需

要交換單元的個(gè)

數(shù)，n為第1級(jí)交

換單元的入線數(shù)

和第3級(jí)交換單元

的出線數(shù)，則當(dāng)

m≥2n-1時(shí)

，Clos

網(wǎng)絡(luò)不存在內(nèi)部

阻塞。但是通過(guò)

重構(gòu)，3級(jí)Clos網(wǎng)

絡(luò)無(wú)阻塞條件是

m≥n。Clos結(jié)構(gòu)r3級(jí)Clos網(wǎng)絡(luò)23■量子空分交換網(wǎng)絡(luò)常由開關(guān)矩陣構(gòu)成。在經(jīng)典的光交換中

有各種不同的光開關(guān)，如機(jī)械光開關(guān)、電光開關(guān)、熱光開

關(guān)、聲光開關(guān)、全息光開關(guān)、MEMS光開關(guān)、毛細(xì)管光開

關(guān)、表面收縮減反射膜光開關(guān)和微光柵衍射光開關(guān)等?！?/p>

機(jī)械光開關(guān)/Product/6409711939.html

/products/scd0352/SCD-0352B.pdf24量子空分交換網(wǎng)絡(luò)的實(shí)現(xiàn)量子空分交換網(wǎng)絡(luò)的實(shí)現(xiàn)(續(xù))■

電光開關(guān)■利用材料的電光效應(yīng)來(lái)改變光量子信號(hào)的通道，如：通過(guò)外加電

場(chǎng)或控制電壓電流改變材料，如LiNbO3矩陣等，

InP

、GaAs通用

材

料

等

。+V電極324LiNbO?

襯

底基于MZ

干涉儀的電光開關(guān)2502345量子空分交換網(wǎng)絡(luò)的實(shí)現(xiàn)(續(xù))■

基于量子門的空分交換(a)量子交換門

(b)

量子交換門符號(hào)Fredkin門量子Benes網(wǎng)絡(luò)26量子時(shí)分交換與波分交換波長(zhǎng)

濾波器

波長(zhǎng)

濾波器波長(zhǎng)

濾波器波長(zhǎng)

變換器波長(zhǎng)變換器波長(zhǎng)

變換器T′T?'T?'Ti輸出端波長(zhǎng)

濾波器

波長(zhǎng)

濾波器波長(zhǎng)

濾波器T?T?T?T?輸入端2?22…2輸出端輸入端

λ12….M光量子緩存器波分解復(fù)用器波分復(fù)用器控制單元控制單元分路器合路器2720.3量子通信實(shí)驗(yàn)網(wǎng)絡(luò)28量子通信網(wǎng)絡(luò)實(shí)驗(yàn)DARPAQuantumNetworkInternet

Protocol

(IP)

Internet

Protocol(IP)QKD

NetworkSource

SuiteQKDProtocolsRawKey

SymbolsQKDProtocolsRawKeySymbolsFigure2.AVirtual

Private

Network(VPN)based

on

Quantum

Key

Distribution.IPsecRed802.2

Red

EnetIPsecRed802.2

Red

EnetVirtualPrivateNetwork(VPN)Optical

Process

Control

(OPC)Optical

Process

Control(OPC)VirtualPrivateNetwork(VPN)Black802.2Black

EnetBlack802.2BlackEnetQKDPhysicalQKDPhysicalInternetDetector

SuiteCrypto29量子通信實(shí)驗(yàn)網(wǎng)絡(luò)(續(xù))ConventionalEthernetQKD

EndpointDARPA:Qnet,2004QKD

SwitchQKD

EndpointQKD

Switch

QKD

EndpointDark

MetroFiberBBNAlice

SwitchBBNPrivateEnclaveLab

FiberQKD

SwitchHarvardPrivateEnclaveBUPrivateEnclaveEavesdropping30量子通信實(shí)驗(yàn)網(wǎng)絡(luò)(續(xù))■

歐盟第六框架資助，研究小組：SECOQC(SecureCommunicationbasedonQuantumCryptography)QKDnetwork

。41家單位參與，2004-2008Node

BRTNode

SIEVienna85kmNode2GUDNode

519kmid0-331Node

ERD80mNode

STPTosh量子通信實(shí)驗(yàn)網(wǎng)絡(luò)(續(xù))■

歐盟第六框架資助，研究小組：SECOQC(SecureCommunicationbasedonQuantumCryptography)QKDnetwork

。41家單位參與，2004-2008Node

BRTNode

SIEVienna85kmNode2GUDNode

519kmid0-332Node

ERD80mNode

STPToshKey

Management

ServerCantareno345kmMAgent

1km

45km

13kmKoganei-3

Koganel-1Otemachi-

1Koganel-2

HongoJGN2Hakusan12km13km

HongoOtemachiUltra-stablefrequencydisseminationNetworkTopologyoftheTokyoQKD

NetworkKoganel-1

Otemachi-1NEC-NICT(45km,13

dB)量子通信實(shí)驗(yàn)網(wǎng)絡(luò)(續(xù))TokyoQKDNetwork,2010AlIViennaToshiba[TREL]IDQuantique(1km,0.5dB)(45km,13dB)(13km,11dB)Koganei-3

Koganel-2Otemachi-2HongoFig.3TopologicalMap

ofthe

Tokyo

QKDNetworkToshibaAllVienna

(TREL)

IDQFig.2Network

Layer

Structure

ofthe

Tokyo

QKD

Network(90km,26dB)(24km,13dB)ure

keyMitsubishiOtemachi-2HakusanCNTT-NICTOtemachi45km可濟(jì)南量子通信試驗(yàn)網(wǎng)2009年蕪湖量子政務(wù)網(wǎng)試量子通信監(jiān)測(cè)系統(tǒng)業(yè)務(wù)表試驗(yàn)網(wǎng)被7

A

?

中443月26日濟(jì)南量子通信試驗(yàn)網(wǎng)正式投入使用I

東

印濟(jì)

聲臺(tái)

衛(wèi)

海

政東小口望

京南

沙灘皇城根量子通信實(shí)驗(yàn)網(wǎng)絡(luò)(中國(guó))潘建偉，2008:量子電話，20Km濟(jì)南量子通信試驗(yàn)

網(wǎng)，2014.32007年北京四端口QKD網(wǎng)絡(luò)實(shí)驗(yàn)Q-3

節(jié)點(diǎn)

995點(diǎn)Q-105點(diǎn)

o-10點(diǎn)g2節(jié)點(diǎn)Q節(jié)點(diǎn)0-17節(jié)點(diǎn)

0-19節(jié)點(diǎn)P18集拉站2集

拉

站

3Q-29節(jié)點(diǎn)

Q-30

節(jié)點(diǎn)

Q-31節(jié)點(diǎn)

Q-32節(jié)點(diǎn)

Q-33節(jié)點(diǎn)

9-34節(jié)點(diǎn)0-35節(jié)點(diǎn)

Q-36

節(jié)點(diǎn)Q-37

節(jié)點(diǎn)0-38節(jié)點(diǎn)0-39節(jié)點(diǎn)040節(jié)點(diǎn)Q-41節(jié)點(diǎn)量子通信實(shí)驗(yàn)網(wǎng)絡(luò)(中國(guó))合肥城域網(wǎng)：41個(gè)節(jié)點(diǎn)Q-15節(jié)點(diǎn)0-14節(jié)點(diǎn)

1市

點(diǎn)0-25點(diǎn)集控站-10-23節(jié)點(diǎn)4-25節(jié)點(diǎn)2

1

節(jié)3520LegendXXXAccess

nodeShanghaiNanjingTrustedrepeaterwithonlykey

relayingfunctionBeijingJinan

FuliHefeiNote:

Beijing,Jinan,Hefeiand

Shanghai

are

connected

to

their

own

metropolitanQKDnetworkFig.11.Topology

of

theBeijing-Shanghai

backbone

QKD

link.量子通信實(shí)驗(yàn)網(wǎng)絡(luò)-京滬干線36量子通信實(shí)驗(yàn)網(wǎng)絡(luò)-濟(jì)南QKD網(wǎng)絡(luò)}-sm

sLegendCentralized

control

stationservingasthe

network

key

relay

server.It

also

provides

end

user

functionsNodes

with

end

user

functionNodeswith

key

relayfunction

onlyFig.12.Topology

of

the

Jinan

QKD

Network.37CS量子通信實(shí)驗(yàn)網(wǎng)絡(luò)-濟(jì)南QKD網(wǎng)絡(luò)Legendcs

Centralized

controlstationserving

as

the

network

key

relay

server.It

also

provides

end

user

functionsNodes

with

end

user

function

Nodes

with

key

relayfunction

only60end

user

nodesFig.13.Topology

of

the

Wuhan

metropolitan

area

QKD

Network.38■經(jīng)典-量子波分復(fù)用技術(shù)，將量子信道、協(xié)商信道和業(yè)

務(wù)信道進(jìn)行融合，節(jié)省項(xiàng)目光纖投資■構(gòu)建核心環(huán)網(wǎng)+星型接入網(wǎng)的雙層網(wǎng)絡(luò)架構(gòu)服務(wù)等■8個(gè)核心網(wǎng)站點(diǎn)和159個(gè)接入網(wǎng)站點(diǎn)■量子密鑰分發(fā)網(wǎng)絡(luò)光纖全長(zhǎng)1147公里■目前規(guī)模最大、用戶最多、應(yīng)用最全的量子保密通信城域網(wǎng)■政務(wù)應(yīng)用、金融、能源、醫(yī)療、科技等各行業(yè)用戶提供量子安全接入服務(wù)合肥量子通信網(wǎng)絡(luò)3920.4量子互聯(lián)網(wǎng)[1]Stephanie

Wehner,David

Elkouss,and

Ronald

Hanson.2018.Quantuminternet:Avisionfor

the

road

ahead.Science

362,6412(2018),eaam9288[2]W.Kozlowski,S.Wehner,TowardsLarge-ScaleQuantumNetworks,NANOCOM'19,September25-27,2019,Dublin,Ireland40switch-Routerwith

classical

and

quantumdata

planesWorkstationrepeater目

目

○量子網(wǎng)絡(luò)Routerwithclassical

data

plane

onlyClassical

linkQuantumcapable

end-nodeQuantum

link41量子互聯(lián)網(wǎng)發(fā)展階段fault-tolerant

few

qubit

networksentanglementdistribution

networksprepare

and

measure

networksquantum

memory

networksquantumcomputing

networkstrusted

repeater

networksFUNCTIONALITYTIME42Leaderelection,fastbyzantineagreement.

…Clock

synchronization,distributed

quantumcomputation

…Blind

quantum

computing,simple

leaderelection

and

agreementprotocol.

…Device

independent

protocolsQuantumkey

distribution,secureidentific