Key exchange protocol for satellite based quantum network
A system for performing a key exchange using a quantum key distribution protocol between first, second, and intermediary devices, wherein the intermediary device: receives first symbol set over a first quantum channel transmitted from first device and sends first receiving basis information to first device, receives second symbol set over a second quantum channel transmitted from second device and sends second receiving basis information to second device, generates first and second intermediate sets of symbols based on received first and second sets of symbols, generates third intermediate symbol set by combining first and second intermediate sets and sends third intermediate set to first and/or second device, whereby first and second devices perform the key exchange by exchanging with themselves first and second transmitting basis information and/or first and second receiving basis information to determine a final shared key based on first, second, and third intermediate symbol sets.
1 . A computer-implemented method of key exchange between a first device and a second device, the method, performed by an intermediary device, comprising:
generating a first intermediate set of symbols based on exchanging first key information with the first device, the first key information comprising data representative of a first set of symbols received from the first device on a first quantum channel, wherein the first device withholds from the intermediary device a first transmitting random basis set used by the first device for transmitting said first set of symbols over said first quantum channel;
generating a second intermediate set of symbols based on exchanging second key information with the second device, the second key information comprising data representative of a second set of symbols received from the second device on a second quantum channel, wherein the second device withholds from the intermediary device a second transmitting random basis set used by the second device when transmitting said second set of symbols over said second quantum channel; and
sending, to one or more of the first device and second device, a third intermediate set of symbols based on combining the first and second intermediate sets of symbols;
wherein the first and second devices securely exchange at least first and second transmitting basis information with each other for determining a final shared key based on the first set of symbols, the second set of symbols and the third intermediate set of symbols.
2 . The computer-implemented method as claimed in claim 1 , further comprising:
generating the first intermediate set of symbols by exchanging first key information with the first device, the first key information comprising data representative of the first set of symbols sent from the first device over the first quantum channel and a first receiving random basis set used by the intermediary device when receiving said first set of symbols, the first receiving random basis set transmitted to the first device over a first communication channel;
generating the second intermediate set of symbols further comprising exchanging second key information with the second device, the second key information comprising data representative of the second set of symbols sent from the second device over the second quantum channel and second receiving random basis set used by the intermediary device when receiving said second set of symbols, the second receiving random basis set transmitted to the second device over a second communication channel; and
sending, to one or more of the first device and second device over the corresponding communication channel(s), a third intermediate set of symbols based on combining the first and second intermediate sets of symbols;
wherein the first and second devices securely exchange the first and second transmitting basis information and first and second receiving basis information with each other over a third communication channel therebetween for determining the final shared key based on the first set of symbols, the second set of symbols and the third intermediate set of symbols.
3 . The computer-implemented method as claimed in claim 1 , wherein generating the first intermediate set of symbols further comprises generating the first intermediate set of symbols based on discarding all the received first set of symbols except those symbols of the first set of symbols with symbol positions from the received first set of symbols that were successfully or validly received by the intermediary device.
4 . The computer-implemented method as claimed in claim 1 , wherein exchanging second key information with the second device further comprising:
receiving the second set of symbols over the second quantum channel transmitted by the second device, each symbol of the second set of symbols received using a basis state randomly selected from the set of bases to form a second receiving random basis set;
transmitting the second receiving random basis set over a second communication channel to the second device, the second receiving random basis set comprising data representative of the randomly selected bases used to receive each symbol of the second set of symbols; and
transmitting, to the second device over the second communication channel, data representative of the symbol positions of the symbols in the second set of symbols received over the second quantum channel that were successfully or validly received by the intermediary device.
5 . The computer-implemented method as claimed in claim 1 , wherein generating the second intermediate set of symbols further comprises generating the second intermediate set of symbols based discarding all the received second set of symbols except those symbols of the second set of symbols with symbol positions from the received second set of symbols that were successfully or validly received by the intermediary device.
6 . The computer-implemented method as claimed in claim 2 , wherein the first and second devices perform error correction and/or privacy amplification in relation to the first and second shared keys over the third communication channel for determining the final shared key.
7 . The computer-implemented method according to claim 1 , wherein the first and second device perform error detection and/or correction on the first and second common sets of sifted bits or the first and second shared keys.
8 . The computer-implemented method as claimed in claim 1 , wherein the first set of symbols is a random set of symbols.
9 . The computer-implemented method as claimed in claim 8 , wherein the first set of symbols that are transmitted from the first device are randomly generated by the first device.
10 . The computer-implemented method as claimed in claim 8 , wherein the first set of symbols that are transmitted from the first device are retrieved from an entropy store of randomly generated symbols stored on the first device.
11 . The computer-implemented method as claimed in claim 1 , wherein the second set of symbols is a random set of symbols.
12 . The computer-implemented method as claimed in claim 11 , wherein the second set of symbols that are transmitted from the second device are randomly generated by the second device.
13 . The computer-implemented method as claimed in claim 11 , wherein the second set of symbols that are transmitted from the second device are retrieved from an entropy store of randomly generated symbols stored on the second device.
14 . The computer-implemented method as claimed in claim 1 , wherein generating the first intermediate set of symbols occurs simultaneously to or at the same time.
15 . The computer-implemented method according to claim 2 , wherein the first and second devices use encryption for communications over the third communication channel.
16 . The computer-implemented method according to claim 2 , wherein the first and second devices authenticate each other using communications over the third communication channel.
17 . The computer-implemented method according to claim 1 , wherein the set of bases comprises at least two bases, each basis comprising at least two basis states, wherein the at least two basis states of each basis are orthogonal and the at least two basis states of said each basis are non-orthogonal to the at least two basis states of another basis of the set of bases.
18 . The computer-implemented method as claimed in any preceding claim , wherein one or both of the first and second quantum channels are based on one or more types of quantum communication channels from the group of:
optical quantum communications;
free-space optical quantum communications;
optical fibre quantum communications; and
optical laser quantum communications.
19 . A computer-implemented method of key exchange between a first ground receiving station and a second ground receiving station, the method, performed by a satellite configured to operate as an intermediary device, comprising:
generating a first intermediate set of symbols based on exchanging first key information with the first ground receiving station, the first key information comprising data representative of a first set of symbols received from the first ground receiving station on a first quantum channel, wherein the first ground receiving station withholds from the satellite a first transmitting random basis set used by the first ground receiving station for transmitting said first set of symbols over said first quantum channel;
generating a second intermediate set of symbols based on exchanging second key information with the second ground receiving station, the second key information comprising data representative of a second set of symbols received from the second ground receiving station on a second quantum channel, wherein the second ground receiving station withholds from the satellite a second transmitting random basis set used by the second ground receiving station when transmitting said second set of symbols over said second quantum channel; and
sending, to one or more of the first ground receiving station and second ground receiving station, a third intermediate set of symbols based on combining the first and second intermediate sets of symbols;
wherein the first and second ground receiving stations securely exchange at least first and second transmitting basis information with each other for determining a final shared key based on the first set of symbols, the second set of symbols and the third intermediate set of symbols.
20 . A non-transitory computer-readable storage medium comprising computer code or instructions stored thereon, which when executed on a processor of an intermediary device, causes the processor to implement a method of key exchange between a first device and a second device by:
generating a first intermediate set of symbols based on exchanging first key information with the first device, the first key information comprising data representative of a first set of symbols received from the first device on a first quantum channel, wherein the first device withholds from the intermediary device a first transmitting random basis set used by the first device for transmitting said first set of symbols over said first quantum channel;
generating a second intermediate set of symbols based on exchanging second key information with the second device, the second key information comprising data representative of a second set of symbols received from the second device on a second quantum channel, wherein the second device withholds from the intermediary device a second transmitting random basis set used by the second device when transmitting said second set of symbols over said second quantum channel; and
sending, to one or more of the first device and second device, a third intermediate set of symbols based on combining the first and second intermediate sets of symbols;
wherein the first and second devices securely exchange at least first and second transmitting basis information with each other for determining a final shared key based on the first set of symbols, the second set of symbols and the third intermediate set of symbols.