Quantum key distribution (QKD) constitutes a symmetric secret key negotiation protocol capable of maintaining information-theoretic security. Given the recent advances in QKD networks, they have evolved from academic research to some preliminary applications. A QKD network consists of two or more QKD nodes interconnected by optical fiber or free space links. The secret keys are negotiated between any pair of QKD nodes, and then they can be delivered to multiple users in various areas for ensuring long-term protection and forward secrecy. We commence by introducing the QKD basics, followed by reviewing the development of QKD networks and their implementation in practice. Subsequently, we describe the general QKD network architecture, its elements, as well as its interfaces and protocols. Next, we provide an in-depth overview of the associated physical layer and network layer solutions, followed by the standardization efforts as well as the application scenarios associated with QKD networks. Finally, we discuss the potential future research directions and provide design guidelines for QKD networks.

Quantum key distribution (QKD) networking over wavelength division multiplexing (WDM) network infrastructure provides a new paradigm for secure communications across the networks. With limited wavelength resources in existing WDM networks, how to efficiently schedule QKD to provision sufficient secret keys over WDM networks becomes a new challenge. This study proposes a new time-scheduled scheme in combination with quantum key pool (QKP) technique to overcome this challenge. A new architecture of QKD-over-WDM networks is presented, in which QKPs are constructed to decouple secret-key resources from the underlying infrastructure for timely secret-key provisioning. In the time-scheduled scheme, routing, wavelength and time-slot allocation (RWTA) problem is proposed for efficient QKP construction (QKPC) over WDM networks, in which three sub-problems (i.e., secret-key consumption, time-slot allocation, and time-slot continuity) are discussed respectively. An integer linear programming (ILP) model and a novel joint path-and-link -based RWTA (JPL-RWTA) heuristic algorithm are designed to solve the RWTA problem, in which the three sub-problems are addressed together. Simulation results indicate that the ILP model and JPL-RWTA algorithm are effective approaches to obtain the positive balance between resource utilization of QKPC (RUQKPC) and successful probability of QKPC (SPQKPC). Moreover, the SPQKPC can be increased at the cost of reducing the flexibility of secret-key consumption, the uniformity of time-slot allocation, and the proportion of time-slot continuous QKPC (TC-QKPC) to time-slot discrete QKPC (TD-QKPC) requests.

Software-defined optical networking (SDON) will become the next generation optical network architecture. However, the optical layer and control layer of SDON are vulnerable to cyberattacks. While, data encryption is an effective method to minimize the negative effects of cyberattacks, secure key interchange is its major challenge which can be addressed by the quantum key distribution (QKD) technique. Hence, in this paper we discuss the integration of QKD with WDM optical networks to secure the SDON architecture by introducing a novel key on demand (KoD) scheme which is enabled by a novel routing, wavelength and key assignment (RWKA) algorithm. The QKD over SDON with KoD model follows two steps to provide security: i) quantum key pools (QKPs) construction for securing the control channels (CChs) and data channels (DChs); ii) the KoD scheme uses RWKA algorithm to allocate and update secret keys for different security requirements. To test our model, we define a security probability index which measures the security gain in CChs and DChs. Simulation results indicate that the security performance of CChs and DChs can be enhanced by provisioning sufficient secret keys in QKPs and performing key-updating considering potential cyberattacks. Also, KoD is beneficial to achieve a positive balance between security requirements and key resource usage.

As a concept to enhance and extend cloud-computing capabilities, edge-computing aims to provide Internet-based services in the close proximity to users by placing IT infrastructures at network edge in forms of tiny datacenters. Taking the advantage of the close distance to end user and access networks, edge datacenters can provide low-latency and context-aware services, and further improve users’ quality-of-experience. As the network edge is a geographically spread concept, the edge datacenters are usually highly distributed so that they can provide nearby storage and processing capabilities to most of the end users. Further, edge datacenters also co-work with centralized cloud datacenters for service orchestration. Such decentralization and collaboration are expected to introduce significant transformations to both infrastructures and applications. To provide an overview of how edge can be integrated with cloud computing and how edge computing can benefit applications, this work studies the infrastructure and application issues of edge computing and networking in several sub-aspects, including related concepts, infrastructures, resource management and virtualization, performance, and applications.

Quantum key distribution (QKD) has demonstrated a great potential to provide future-proofed security, especially for 5G and beyond communications. As the critical infrastructure for 5G and beyond communications, optical networks can offer a cost-effective solution to QKD deployment utilizing the existing fiber resources. In particular, measurement-device-independent QKD shows its ability to extend the secure distance with the aid of an untrusted relay. Compared to the trusted relay, the untrusted relay has obviously better security, since it does not rely on any assumption on measurement and even allows to be accessed by an eavesdropper. However, it cannot extend QKD to an arbitrary distance like the trusted relay, such that it is expected to be combined with the trusted relay for large-scale QKD deployment. In this work, we study the hybrid trusted/untrusted relay based QKD deployment over optical backbone networks and focus on cost optimization during the deployment phase. A new network architecture of hybrid trusted/untrusted relay based QKD over optical backbone networks is described, where the node structures of the trusted relay and untrusted relay are elaborated. The corresponding network, cost, and security models are formulated. To optimize the deployment cost, an integer linear programming model and a heuristic algorithm are designed. Numerical simulations verify that the cost-optimized design can significantly outperform the benchmark algorithm in terms of deployment cost and security level. Up to 25% cost saving can be achieved by deploying QKD with the hybrid trusted/untrusted relay scheme while keeping much higher security level relative to the conventional point-to-point QKD protocols that are only with the trusted relays.

Quantum Key Distribution (QKD) is a promising technology that provides proven unconditional security based on fundamentals of quantum physics, especially for point-to-point communications. It could be applied in large-scale optical networks for long-distance key provisioning mainly by three relaying methods: quantum-repeater-based QKD, trusted-relay-based QKD, and measurement-device-independent QKD (MDI-QKD). However, quantum-repeater-based QKD is still under study because of the immature technologies such as the preliminary quantum memory. The trusted-relay-based QKD is vulnerable since insecurity of non-ideal single-photon sources and detectors cannot be ignored in practical applications. On the other hand, for MDI-QKD, there exists a limitation on its key rate under long-distance communications. According to these limitations, embedding protocols like MDI-QKD into the existing trusted-relay-based QKD secured optical networks (QKD-ON) with usage of untrusted relays is a promising key-provisioning scheme. In this paper, we study such partially-trusted relay scenarios and focus on its routing of keys in different kinds of typical network topologies. A partially-trusted-relay-based QKD method is described, which can allow a pair of optical nodes sharing secret keys under the coexistence of trusted relays and untrusted relays. The secret-key provisioning with collaborative routing ( SKP-CR ) algorithm is proposed to search for the optimal key-relay routing path. We perform the simulations with different proportion of trusted relays versus untrusted relays, initial secret keys in the quantum key pools (QKPs), and traffic load. The simulations verify that the SKP-CR algorithm can significantly outperform the conventional trusted-relay-based scheme in terms of key-distribution success rate with an improvement of up to 62% with a mesh topology.