In this paper, we propose a deterministic secure quantum communication (DSQC) protocol based on the BB84 system. We developed this protocol to include quantum entity authentication in the DSQC procedure. By first performing quantum entity authentication, it was possible to prevent third-party intervention. We demonstrate the security of the proposed protocol against the intercept-and-re-send attack and the entanglement-and-measure attack. Implementation of this protocol was demonstrated for quantum channels of various lengths. Especially, we propose the use of the multiple generation and shuffling method to prevent a loss of message in the experiment.

We propose an entanglement-based quantum digital signature (QDS) protocol optimized for quantum networks. The protocol follows the Lamport-inspired QDS paradigm but eliminates QKD post-processing by signing and verifying with raw conclusive keys, thereby reducing latency and implementation complexity. We provide a finite-size security analysis of robustness, unforgeability, and non-repudiation. Under standard fiber-loss and detector models, simulations show a consistent signature rate advantage over a representative Lamport-inspired QDS baseline across metro-to-regional distances. The proposed protocol is practical for near-term deployment while preserving end-to-end, finite key security guarantees.

With the increasing importance of securing quantum communication networks, practical and robust entity authentication is a critical requirement. Accordingly, we propose and experimentally validate a quantum entity authentication (QEA) protocol specifically designed for integration with BB84-type quantum key distribution (QKD) workflows and existing terminal architectures. We analyze the protocol’s security against intercept–resend man-in-the-middle (MitM) impersonation, showing that an unauthenticated adversary induces a characteristic 25% correlation error and that the rejection probability approaches unity as the number of detected authentication events increases. For practical realization, the protocol is deployed using weak coherent pulses (WCPs) with decoy-state estimation to bound single-photon contributions and mitigate photon-number-splitting (PNS)-enabled leakage. The system is demonstrated over a field-deployed fiber link of approximately 20 km with ~8 dB optical loss using signal/decoy intensities of ~0.5/~0.15 and sending probabilities 0.88/0.10/0.02 (signal/decoy/vacuum). Across both verification directions, stable operation is observed with quantum bit error rate (QBER) typically fluctuating between 1% and 4% while the sifted key rate remains constant over time. These results provide an experimental basis for integrating physical-layer entity authentication into deployed quantum communication networks.

With the increasing importance of securing quantum communication networks, practical and robust entity authentication is a critical requirement. Accordingly, we propose and experimentally validate a quantum entity authentication protocol specifically designed for integration with BB84-type QKD workflows and existing terminal architectures. We analyze the protocol's security against intercept–resend man-in-the-middle impersonation, showing that an unauthenticated adversary induces a characteristic 25% correlation error and that the rejection probability approaches unity as the number of detected authentication events increases. For practical realization, the protocol is deployed using weak coherent pulses with decoy-state estimation to bound single-photon contributions and mitigate photon-number-splitting–enabled leakage. The system is demonstrated over a field-deployed fiber link of approximately 20 km with ~8 dB optical loss using signal/decoy intensities of ~0.5/~0.15 and sending probabilities 0.88/0.10/0.02 (signal/decoy/vacuum). Across both verification directions, stable operation is observed with QBER typically fluctuating between 1% and 4% while the sifted key rate remains constant over time. These results provide an experimental basis for integrating physical-layer entity authentication into deployed quantum communication networks.