Quantum key distribution using card, base station and trusted authority
Techniques and tools for quantum key distribution (“QKD”) between a quantum communication (“QC”) card, base station and trusted authority are described herein. In example implementations, a QC card contains a miniaturized QC transmitter and couples with a base station. The base station provides a network connection with the trusted authority and can also provide electric power to the QC card. When coupled to the base station, after authentication by the trusted authority, the QC card acquires keys through QKD with a trust authority. The keys can be used to set up secure communication, for authentication, for access control, or for other purposes. The QC card can be implemented as part of a smart phone or other mobile computing device, or the QC card can be used as a fillgun for distribution of the keys.
1. A method comprising, with a computing system that implements a first trusted authority:
establishing quantum communication between the first trusted authority and a quantum communication device through a base station in communication with the first trusted authority, wherein the base station and the quantum communication device are separate devices;
with the first trusted authority in communication with the quantum communication device, transmitting or receiving first information in a first quantum channel, the first information being encoded in quantum states;
establishing quantum communication between the first trusted authority and a second trusted authority; and
with the first trusted authority in communication with the second trusted authority, transmitting or receiving second information in a second quantum channel, the second information being encoded in quantum states.
2. The method of claim 1 , further comprising:
establishing a parent key based at least in part on the second information; and
establishing a pairwise key based at least in part on the parent key; and
using the pairwise key to encrypt information for non-quantum communication between the first trusted authority and a third trusted authority,
wherein establishing the pairwise key does not require quantum communication between the first and third trusted authorities.
3. The method of claim 2 , wherein the quantum communication in the second quantum channel between the first trusted authority and the second trusted authority uses a free space optical link.
4. The method of claim 3 , wherein at least one of the first and second trusted authorities is located on a satellite.
5. The method of claim 3 , wherein at least one of the first and second trusted authorities is located on an airplane.
6. The method of claim 2 , wherein at least one of the first and second trusted authorities is located in a ground-based installation.
7. The method of claim 2 , wherein the quantum communication device is included in a first user device, the method further comprising:
establishing a device key based at least in part on the first information;
producing a session key based at least in part on the device key; and
providing the session key to the first user device,
wherein the session key allows encrypted, non-quantum communication between the first user device and a second user device, without requiring quantum communication between the first and second user devices or between the second user device and the first trusted authority.
8. A computing system implementing a first trusted authority, comprising:
a first quantum communication module adapted to transmit or receive first information in a first quantum channel as part of quantum communication with a quantum communication device that is detachably coupled to a base station in communication with the first trusted authority, the base station and the quantum communication device being separate devices;
a second quantum communication module adapted to transmit or receive second information in a second quantum channel as part of quantum communication with a second trusted authority; and
a computer-readable memory for storing one or more keys based on at least one of the first information and the second information.
9. The computing system of claim 8 , further comprising:
programmable logic operable to perform steps that comprise:
establishing a parent key based at least in part on the second information;
establishing a pairwise key based at least in part on the parent key; and
encrypting, using the pairwise key, information for non-quantum communication between the first trusted authority and a third trusted authority,
wherein establishing the pairwise key does not require quantum communication between the first and third trusted authorities.
10. The computing system of claim 9 , wherein at least one of the first and second quantum communication modules is operable to transmit or receive information over a free space optical link.
11. The computing system of claim 10 , wherein the computing system is configured to be installed on a satellite.
12. The computing system of claim 10 , wherein the computing system is configured to be installed on an airplane.
13. The computing system of claim 10 , wherein the computing system is configured to be installed on a ground-based installation.
14. The computing system of claim 9 , wherein the quantum communication device is included in a first user device, the system further comprising:
programmable logic operable to perform steps that comprise:
establishing a device key based at least in part on the first information;
producing a session key based at least in part on the device key; and
providing the session key to the first user device,
wherein the session key allows encrypted, non-quantum communication between the first user device and a second user device, without requiring quantum communication between the first and second user devices or between the second user device and the first trusted authority.