Key exchange protocol for satellite based quantum network
A method for performing a key exchange using a quantum key distribution protocol between a first device (D 1 ), a second device (D 2 ), and an intermediary device (ID), wherein: ID receives first symbol set (SS 1 ) over first quantum channel (QC 1 ) transmitted from D 1 and sends first receiving basis information (RBI 1 ) to D 1 which withholds from ID first transmitting basis information (TBI 1 ); ID transmits second symbol set (SS 2 ) over second quantum channel (QC 2 ) and second transmitting basis information (TBI 2 ) to D 2 which withholds from ID second receiving basis information (RBI 2 ); ID generates first (IS 1 ) and second intermediate symbol (IS 2 ) sets based on valid SS 1 and SS 2 ; wherein ID generates third intermediate symbol (IS 3 ) set by combining IS 1 and IS 2 and sends IS 3 set to D 1 and/or D 2 ; wherein D 1 and D 2 exchange TBI 1 and RBI 2 and/or RBI 1 and TBI 2 to determine a final shared key based on SS 1 , SS 2 , and IS 3 sets.
1 . A computer-implemented method of key exchange between a first device and a second device, the method, performed by an intermediary device, comprising:
generating a first intermediate set of symbols based on exchanging first key information with the first device, the first key information comprising data representative of a first set of symbols received from the first device on a first quantum channel, wherein the first device withholds from the intermediary device a first transmitting random basis set used by the first device for transmitting said first set of symbols over said first quantum channel;
generating a second intermediate set of symbols based on exchanging second key information with the second device, the second key information comprising data representative of a second set of symbols transmitted to the second device on a second quantum channel, wherein the second device withholds from the intermediary device a second receiving random basis set used by the second device when receiving said second set of symbols over said second quantum channel; and
sending, to one or more of the first device and second device, a third intermediate set of symbols based on combining the first and second intermediate sets of symbols, wherein each symbol in the first, second, and the third set of intermediate symbols is represented by one or more binary bits;
wherein the first and second devices securely exchange at least first transmitting and second receiving basis information with each other for determining a final shared key based on the first set of symbols, the second set of symbols and the third intermediate set of symbols.
2 . The computer-implemented method as claimed in claim 1 , further comprising:
generating the first intermediate set of symbols by exchanging the first key information with the first device, the first key information comprising data representative of the first set of symbols sent from the first device over the first quantum channel and a first
receiving random basis set used by the intermediary device when receiving said first set of symbols, the first receiving random basis set transmitted to the first device over a first communication channel;
generating the second intermediate set of symbols further comprising exchanging second key information with the second device, the second key information comprising data representative of the second set of symbols transmitted from the intermediary device over the second quantum channel and second transmitting random basis set used by the intermediary device when transmitting said second set of symbols, the second transmitting random basis set transmitted to the second device over a second communication channel; and
sending, to one or more of the first device and second device over the corresponding communication channel(s), a third intermediate set of symbols based on combining the first and second intermediate sets of symbols;
wherein the first and second devices securely exchange the first and second transmitting basis information and first and second receiving basis information with each other over a third communication channel therebetween for determining the final shared key based on the first set of symbols, the second set of symbols and the third intermediate set of symbols.
3 . The computer-implemented method as claimed in claim 1 , wherein generating the first intermediate set of symbols further comprises generating the first intermediate set of symbols based on discarding all the received first set of symbols except those symbols of the first set of symbols with symbol positions from the received first set of symbols that were successfully or validly received by the intermediary device.
4 . The computer-implemented method as claimed in claim 1 , wherein exchanging second key information with the second device further comprising:
transmitting the second set of symbols over the second quantum channel to the second device, each symbol of the second set of symbols transmitted using a basis state randomly selected from the set of bases to form a second transmitting random basis set;
transmitting the second transmitting random basis set over a second communication channel to the second device, the second transmitting random basis set comprising data representative of the randomly selected bases used to transmit each symbol of the second set of symbols; and
receiving, from the second device over the second communication channel, data representative of the symbol positions of the symbols in the second set of symbols received by the second device over the second quantum channel that were successfully or validly received by the second device.
5 . The computer-implemented method as claimed in claim 1 , wherein generating the second intermediate set of symbols further comprises generating the second intermediate set of symbols based on discarding all the transmitted second set of symbols except those symbols of the second set of symbols with symbol positions from the transmitted second set of symbols that were successfully or validly received by the second device.
6 . The computer-implemented method as claimed in claim 2 , wherein the first and second devices perform error correction and/or privacy amplification in relation to the first and second shared keys over the third communication channel for determining the final shared key.
7 . The computer-implemented method according to claim 1 , wherein the first and second device perform error detection and/or correction on the first and second common sets of sifted bits or the first and second shared keys.
8 . The computer-implemented method as claimed in claim 1 , wherein the first set of symbols is a random set of symbols.
9 . The computer-implemented method as claimed in claim 8 , wherein the first set of symbols that are transmitted from the first device are randomly generated by the first device.
10 . The computer-implemented method as claimed in claim 8 , wherein the first set of symbols that are transmitted from the first device are retrieved from an entropy store of randomly generated symbols stored on the first device.
11 . The computer-implemented method as claimed in claim 1 , wherein the second set of symbols is a random set of symbols.
12 . The computer-implemented method as claimed in claim 11 , wherein the second set of symbols that are transmitted from the intermediary device are randomly generated by the intermediary device.
13 . The computer-implemented method as claimed in claim 11 , wherein the second set of symbols that are transmitted from the intermediary device are retrieved from an entropy store of randomly generated symbols stored on the intermediary device.
14 . The computer-implemented method as claimed in claim 1 , wherein generating the first intermediate set of symbols occurs simultaneously to or at the same time.
15 . The computer-implemented method according to claim 2 , wherein the first and second devices use encryption for communications over the third communication channel.
16 . The computer-implemented method according to claim 2 , wherein the first and second devices authenticate each other using communications over the third communication channel.
17 . The computer-implemented method according to claim 1 , wherein the set of bases comprises at least two bases, each basis comprising at least two basis states, wherein the at least two basis states of each basis are orthogonal and the at least two basis states of said each basis are non-orthogonal to the at least two basis states of another basis of the set of bases.
18 . The computer-implemented method as claimed in claim 1 , wherein one or both of the first and second quantum channels are based on one or more types of quantum communication channels from the group of:
optical quantum communications;
free-space optical quantum communications;
optical fibre quantum communications; and
optical laser quantum communications.
19 . An intermediary device comprising a processor unit, a memory unit, and a communication interface, the processor unit connected to the memory unit and the communication interface, wherein the processor unit, memory unit and communication interface are adapted to implement a computer-implemented method of key exchange between a first device and a second device, the intermediary device configured to:
generate a first intermediate set of symbols based on exchanging first key information with the first device, the first key information comprising data representative of a first set of symbols received from the first device on a first quantum channel, wherein the first device withholds from the intermediary device a first transmitting random basis set used by the first device for transmitting said first set of symbols over said first quantum channel;
generate a second intermediate set of symbols based on exchanging second key information with the second device, the second key information comprising data representative of a second set of symbols transmitted to the second device on a second quantum channel, wherein the second device withholds from the intermediary device a second receiving random basis set used by the second device when receiving said second set of symbols over said second quantum channel; and
send, to one or more of the first device and second device, a third intermediate set of symbols based on combining the first and second intermediate sets of symbols, wherein each symbol in the first, second, and the third set of intermediate symbols is represented by one or more binary bits;
wherein the first and second devices securely exchange at least first transmitting and second receiving basis information with each other for determining a final shared key based on the first set of symbols, the second set of symbols and the third intermediate set of symbols.
20 . A non-transitory computer-readable storage medium comprising computer code or instructions stored thereon, which when executed on a processor, causes the processor to implement a computer-implemented method of key exchange between a first device and a second device, the method, performed by an intermediary device, comprising:
generating a first intermediate set of symbols based on exchanging first key information with the first device, the first key information comprising data representative of a first set of symbols received from the first device on a first quantum channel, wherein the first device withholds from the intermediary device a first transmitting random basis set used by the first device for transmitting said first set of symbols over said first quantum channel;
generating a second intermediate set of symbols based on exchanging second key information with the second device, the second key information comprising data representative of a second set of symbols transmitted to the second device on a second quantum channel, wherein the second device withholds from the intermediary device a second receiving random basis set used by the second device when receiving said second set of symbols over said second quantum channel; and
sending, to one or more of the first device and second device, a third intermediate set of symbols based on combining the first and second intermediate sets of symbols, wherein each symbol in the first, second, and the third set of intermediate symbols is represented by one or more binary bits;
wherein the first and second devices securely exchange at least first transmitting and second receiving basis information with each other for determining a final shared key based on the first set of symbols, the second set of symbols and the third intermediate set of symbols.