Quantum key distribution protocol
View Patent ↗A quantum key distribution protocol is provided that reduces the maximum value of the leaked information amount over the same distance when an adversary makes a photon number splitting attack more than the reduction by the BB84 protocol and the SARG protocol, by making use of the advantages of the BB84 protocol and the SARG protocol. By properly proportioning the existing BB84 protocol and the SARG protocol in accordance with the rate determined by the communication distance between the sender and the receiver of the coherent light, a protocol that is more robust against photon number splitting attack than the known existing protocols can be realized, and long distance quantum key distribution, which was not possible until now, becomes possible.
1. A quantum key distribution protocol used in a quantum key distribution system implemented by using a pulse of weak coherent light, comprising:
determining a ratio of usage of one of two kinds of existing protocols to usage of the other of the two kinds of existing protocols in accordance with a communication distance between a sender and a receiver of the weak coherent light; and
switching a protocol to be used between the two kinds of existing protocols in accordance with the ratio,
wherein the two kinds of existing protocols are the BB84 protocol vulnerable to storage attacks, and the SARG protocol vulnerable to intercept-resend with unambiguous discrimination attacks, and
if an average number of photons in the pulse of the weak coherent light when the BB84 protocol is used independently is taken as μ, and if an average number of photons in the pulse of the weak coherent light when the SARG protocol is used independently is taken as 2μ, and if the minimum distance at which a mutual information amount that can be acquired by an eavesdropper reduces more than when the BB84 protocol and the SARG protocol are each used independently is taken as m, and if the maximum distance at which the mutual information amount that can be acquired by the eavesdropper becomes less than 1 when the protocol to be used is switched between the two kinds of existing protocols in accordance with the ratio is taken as M, and if the communication distance is taken as L, L being a value between m and M, the ratio a of usage of the BB84 protocol to usage of the SARG protocol is determined as a≦(L−m)/(M−m), a being a value other than 0 and 1, and the average number of photons is determined as μ×2/(1+a).
2. The quantum key distribution protocol as recited in claim 1 , wherein if the average number of photons in the pulse of the weak coherent light when the BB84 protocol is independently used is 0.1 [photon/pulse], and if the average number of photons in the pulse of the weak coherent light when the SARG protocol is independently used is 0.2 [photon/pulse], and if M=125 km and m=87.5 km, the ratio a is determined as a≦(L−87.5)/(125−87.5), a being a value other than 0 and 1 and L being a value between 87.5 km and 125 km, and the average number of photons is determined as 0.2/(1+a).
3. A quantum key distribution protocol used in a quantum key distribution system implemented by using a pulse of weak coherent light, comprising:
determining a ratio of usage of one of two kinds of existing protocols to usage of the other of the two kinds of existing protocols in accordance with a communication distance between a sender and a receiver of the weak coherent light; and
switching a protocol to be used between the two kinds of existing protocols in accordance with the ratio,
wherein the two kinds of existing protocols are the BB84 protocol vulnerable to storage attacks and the SARG protocol vulnerable to intercept-resend with unambiguous discrimination attacks, and
if an average number of photons in the pulse of the weak coherent light when the BB84 protocol is used independently is taken as μ, and if an average number of photons in the pulse of the weak coherent light when the SARG protocol is used independently is taken as 2μ, and if the minimum distance at which a mutual information amount that can be acquired by an eavesdropper reduces more than when the BB84 protocol and the SARG protocol are each used independently is taken as m, and if the maximum distance at which the mutual information amount that can be acquired by the eavesdropper becomes less than 1 when the protocol to be used is switched between the two kinds of existing protocols in accordance with the ratio is taken as M, and if the maximum distance at which the mutual information amount that can be acquired by the eavesdropper becomes less than 1 when the BB84 protocol and the SARG protocol are each used independently is taken as n, and if the communication distance is taken as L, L being a value between n and M, the ratio a of usage of the BB84 protocol to usage of the SARG protocol is determined as a≦(L−m)/(M−m), a being a value other than 0 and 1, and the average number of photons is determined as μ×2/(1+a).
4. The quantum key distribution protocol as recited in claim 3 , wherein if the average number of photons in the pulse of the weak coherent light when the BB84 protocol is independently used is 0.1[photon/pulse], and if the average number of photons in the pulse of the weak coherent light when the SARG protocol is independently used is 0.2[photon/pulse], and if M=125 km, m=87.5 km, and n=100 km, the ratio a is determined as a≦(L−87.5)/(125−87.5), a being a value other than 0 and 1 and L being a value between 100 and 125 km, and the average number of photons is determined as 0.2/(1+a).
5. The quantum key distribution protocol as recited in claim 1 , wherein the two kinds of existing protocols use four quantum states throughout a range that is greater than zero and is less than M.
6. The quantum key distribution protocol as recited in claim 3 , wherein the two kinds of existing protocols use four quantum states throughout a range that is greater than zero and is less than M.
7. The quantum key distribution protocol as recited in claim 1 , wherein an average number of photons per pulse is restricted than that of the SARG protocol.
8. The quantum key distribution protocol as recited in claim 3 , wherein an average number of photons per pulse is restricted than that of the SARG protocol.
9. The quantum key distribution protocol as recited in claim 1 , wherein
when the communication distance is less than or equal to m, the SARG protocol is always used, m being the minimum distance at which a mutual information amount that can be acquired by an eavesdropper reduces more than when the BB84 protocol and the SARG protocol are each used independently, and
when the communication distance is greater than m, the BB84 protocol or the SARG protocol is used in accordance with the ratio.
10. The quantum key distribution protocol as recited in claim 3 , wherein
when the communication distance is less than or equal to m, the SARG protocol is always used, m being the minimum distance at which a mutual information amount that can be acquired by an eavesdropper reduces more than when the BB84 protocol and the SARG protocol are each used independently, and
when the communication distance is greater than m, the BB84 protocol or the SARG protocol is used in accordance with the ratio.