Quantum key distribution network management service
A system and method enabling a management service to dynamically select a key relay technique between at least a first relay technique that uses more quantum key distribution (QKD) bits and a second relay technique that uses less QKD key bits and select a path for relaying a key between a source QKD node and a destination QKD node. Respective QKD nodes may relay information about QKD key bit inventory to the management service, wherein the management service may store respective data in a repository. Management service may receive a request for distribution of a QKD key and select one or more key relay techniques to relay the key at respective QKD node links. Additionally, the management service may dynamically select and optimize the relay path and the key relay technique for respective links based on QKD key bit information.
1 . A system comprising:
a quantum key distribution (QKD) network comprising a plurality of QKD nodes, wherein respective ones of the QKD nodes comprise:
a quantum particle receiver; and
a measurement device configured to measure one or more properties of a received quantum particle, wherein respective pairs of the nodes are configured to generate shared QKD key bits based on the measured one or more properties of respective particles and store the shared QKD key bits in a local shared QKD key bit inventory, wherein the shared QKD key bits are known only to respective pairs of the nodes; and
one or more computing devices of the QKD network configured to implement a management service configured to:
receive a request for distribution of a QKD key;
determine a path, comprising one or more links between respective pairs of the QKD nodes of the plurality of QKD nodes that share a local shared QKD key bit inventory, between a QKD node and an additional QKD node of the plurality of QKD nodes, wherein:
the QKD key is to be distributed between the QKD node and the additional QKD node; and
the path comprises one or more intermediate QKD nodes of the plurality of QKD nodes;
select one or more techniques to be used to relay the QKD key, wherein the one or more techniques are selected from a set of techniques comprising at least a first technique using more QKD key bits and a second technique using less QKD key bits, wherein the QKD key bits used are from the local shared QKD key bit inventory of the given pair of nodes; and
cause the one or more selected techniques to be performed to relay the QKD key between respective pairs of nodes along the path.
2 . The system of claim 1 , wherein the management service is further configured to determine local shared QKD key bit inventory levels of respective pairs of nodes of the plurality of QKD nodes.
3 . The system of claim 2 , wherein the management service is further configured to:
determine the path based on the respective local shared QKD key bit inventory levels of respective pairs of nodes of the plurality of QKD nodes;
select, for respective links in the path, the first technique based on respective local shared QKD key bit inventory levels of respective pairs of nodes being greater than or equal to a predetermined first inventory threshold; and
select, for respective links in the path, the second technique based on respective local shared QKD key bit inventory levels of respective pairs of nodes being less than or equal to a predetermined second inventory threshold.
4 . The system of claim 3 , wherein each of the selected one or more techniques is selected on a link-by-link basis.
5 . The system of claim 1 , wherein the management service is further configured to:
determine a bit consumption rate of QKD key bits of a given pair of nodes of the plurality of QKD nodes;
determine the path based on one or more QKD key bit consumption rates of the given pair of nodes of the plurality of QKD nodes;
select the first technique based on the respective bit consumption rate of the given pair of nodes of the plurality of QKD nodes being less than or equal to a predetermined first bit use rate threshold; and
select the second technique based on the respective bit consumption rate of the given pair of nodes of the plurality of QKD node being greater than or equal to a predetermined second bit use rate threshold.
6 . The system of claim 5 , wherein each of the selected one or more techniques is selected on a link-by-link basis.
7 . A method for relaying a key between nodes from a plurality of nodes in a quantum key distribution (QKD) network, the method comprising:
receiving a request for distribution of a key comprising one or more QKD key bits, wherein the one or more QKD key bits are generated from quantum particles measured by respective nodes of the plurality of nodes;
determining a path, comprising one or more links between the respective pairs of nodes, between a node of the plurality of nodes and an additional node of the plurality of nodes, wherein the path comprises one or more intermediate nodes of the plurality of nodes;
selecting one or more techniques to be used to relay the key, wherein the one or more techniques are selected from a set of techniques comprising at least a first technique using more QKD key bits and a second technique using less QKD key bits; and
causing a selected technique to be used to relay the key between respective pairs of nodes along the path.
8 . The method of claim 7 further comprising determining a QKD key bit demand and a QKD key bit inventory level of a given pair of nodes of the plurality of nodes.
9 . The method of claim 8 further comprising determining the path based on the QKD key bit demand or the QKD key bit inventory level of respective given pairs of nodes of the plurality of nodes.
10 . The method of claim 9 , wherein a technique is selected based on the QKD key bit inventory level and one or more predetermined thresholds.
11 . The method of claim 10 , wherein an additional technique is selected based on the QKD key bit inventory level and one or more predetermined thresholds.
12 . The method of claim 7 further comprising determining a QKD key bit consumption rate of a given pair of nodes of the plurality of nodes.
13 . The method of claim 12 , wherein the path is determined based on the QKD key bit consumption rate of respective given pairs of nodes of the plurality of nodes.
14 . The method of claim 13 , wherein a technique is selected based on the QKD key bit consumption rate and one or more predetermined thresholds.
15 . The method of claim 14 , wherein an additional technique is selected based on the QKD key bit consumption rate and one or more predetermined thresholds.
16 . The method of claim 7 further comprising updating the path based on a QKD key bit inventory level of a given pair of nodes of the plurality of nodes.
17 . The method of claim 7 wherein the selecting the one or more techniques is performed on a link-by-link basis.
18 . One or more non-transitory, computer-readable, storage media storing program instructions, that when executed on or across one or more processors, cause the one or more processors to:
receive a request for distribution of a key comprising one or more QKD key bits, wherein the one or more QKD key bits are generated from quantum particles measured by respective nodes of the plurality of nodes;
determine a path, comprising one or more links between the respective pairs of nodes, between a node of the plurality of nodes and an additional node of the plurality of nodes, wherein the path comprises one or more intermediate nodes of the plurality of nodes;
select one or more techniques to be used to relay the key, wherein the one or more techniques are selected from a set of techniques comprising at least a first technique using more QKD key bits and a second technique using less QKD key bits; and
cause a selected technique to be used to relay the key between respective pairs of nodes along the path.
19 . The one or more non-transitory, computer-readable storage media of claim 18 , wherein the selecting the one or more techniques to be used to relay the key comprises selecting one or more techniques based on a QKD key bit inventory level and one or more predetermined thresholds.
20 . The one or more non-transitory, computer-readable storage media of claim 18 , wherein the selecting the one or more techniques to be used to relay the key comprises selecting one or more techniques based on a QKD key bit use rate and one or more predetermined thresholds.