The present invention relates to quantum cryptography, and in particular relates to quantum key distribution (QKD) systems, and more particularly to two-way QKD systems.
Quantum key distribution involves establishing a key between a sender (“Alice”) and a receiver (“Bob”) by using weak (e.g., 0.1 photon on average) optical signals transmitted over a “quantum channel.” The security of the key distribution is based on the quantum mechanical principle that any measurement of a quantum system in unknown state will modify its state. As a consequence, an eavesdropper (“Eve”) that attempts to intercept or otherwise measure the quantum signal will introduce errors into the transmitted signals, thereby revealing her presence.
The general principles of quantum cryptography were first set forth by Bennett and Brassard in their article “Quantum Cryptography: Public key distribution and coin tossing,” Proceedings of the International Conference on Computers, Systems and Signal Processing, Bangalore, India, 1984, pp. 175-179 (IEEE, New York, 1984). Specific QKD systems are described in U.S. Pat. No. 5,307,410 to Bennett, and in the article by C. H. Bennett entitled “Quantum Cryptography Using Any Two Non-Orthogonal States”, Phys. Rev. Lett. 68 3121 (1992).
The general process for performing QKD is described in the book by Bouwmeester et al., “The Physics of Quantum Information,” Springer-Verlag 2001, in Section 2.3, pages 27-33. During the QKD process, Alice uses a random number generator (RNG) to generate a random bit for the basis (“basis bit”) and a random bit for the key (“key bit”) to create a qubit (e.g., using polarization or phase encoding) and sends this qubit to Bob.
The article by Ribordy et al., entitled “Automated ‘Plug and play” quantum key distribution,” Electronics Letters Vol. 34, No. 22 Oct. 29, 1998 (“the Ribordy paper”) and the U.S. Pat. No. 6,188,768 each describe a so-called “two way” system wherein quantum signals are sent from a first QKD station to a second QKD station and then back to the first QKD station. Typically, the quantum signals sent from the first QKD station to the second QKD station are relatively strong (e.g., hundreds or thousands of photons per pulse on average), and are attenuated down to quantum levels (i.e., one photon per pulse or fewer) at the second QKD station prior to being returned to the first QKD station.
The performance of a two-way QKD system is degraded by noise in the form of photons generated from the initially relatively strong quantum signal by three different mechanisms: 1) forward Raman scattering, in which frequency-shifted photons are generated and co-propagate with the quantum signal photons; 2) Raman backscattering, in which frequency-shifted photons are generated and propagate in the opposite direction to the quantum signal photons; and 3) Rayleigh scattering, in which photons from the quantum signal are elastically scattered back in the opposite direction of the quantum signal photons.
It is possible to minimize noise from Raman forward scattering and backscattering by wavelength-division multiplexing (WDM), time-division multiplexing (TDM) or wavelength filtering. However, Rayleigh backscattering presents a more difficult problem because Rayleigh backscattered photons have the same frequency as the quantum signal photons. Thus, WDM solutions that attempt to separate quantum signals from the noise they generate are not applicable. In addition, since the Rayleigh backscattered photons are elastically scattered throughout the transmission fiber, they arrive at the detectors at a constant (continuous wave) rate, making TDM solutions ineffective.
It is important to note that the two-way QKD system described in the Ribordy paper uses a “storage line” in the form of a 13.2 km long fiber loop to suppress the detection of Rayleigh backscattered light. Such a storage line adversely affects the transmission rate of a two-way QKD system.
One aspect of the invention is a QKD station adapted for optical coupling via an optical fiber to a second QKD station of a QKD system. The QKD station includes first and second laser sources each adapted to emit outgoing optical pulses into the optical fiber. The outgoing optical pulses have first and second wavelengths corresponding to that of the first and second laser sources. The QKD station also includes first and second single-photon detectors (SPDs) respectively adapted to detect optical pulses of the first and second wavelengths as incoming weak optical pulses returned to the first QKD station from another QKD station. In an example embodiment, the SPDs are arranged as pairs, where each pair detects a given wavelength. Also included in the QKD station is a controller operably coupled to the first and second laser sources and to the first and second SPDs. The controller is adapted to sequentially activate and deactivate the first and second laser sources to generate corresponding first and second sets of the outgoing optical pulses. The controller is additionally adapted to sequentially activate and deactivate the first and second SPDs to reduce an amount of backscattered light formed in the optical fiber by the outgoing pulses from being detected by the first and second SPDs.
Another aspect of the invention is a method of detecting optical pulses in a QKD system having first and second QKD stations. The method includes transmitting a first set of optical pulses having a first wavelength from a first QKD station to a second QKD station, terminating the transmission of the first set of optical pulses, and transmitting a second set of optical pulses having a second wavelength from the first QKD station to the second QKD station at a time that prevents backscattered radiation from the first set of optical pulses from being detected in the first QKD station.
Another aspect of the invention is a method of reducing Rayleigh backscattering in a QKD system having first and second QKD stations optically coupled via an optical fiber link. The first QKD station has first and second selectively activatable single-photon detectors (SPDs) optically coupled to the optical fiber link and adapted to detect single photons having respective first and second wavelengths. In an example embodiment, the SPDs are arranged in pairs, where each pair is adapted to detect a single wavelength. The method includes multiplexing in the first QKD station first and second sets of pairs of optical pulses into the optical fiber link. The first and second sets have the first and second wavelengths, respectively. The method also includes selectively activating the first and second SPDs to reduce or prevent backscattered light formed in the optical fiber link from being detected by the SPDs when detecting single photons.
The various elements depicted in the drawings are merely representational and are not necessarily drawn to scale. Certain sections thereof may be exaggerated, while others may be minimized. The drawings are intended to illustrate various embodiments of the invention that can be understood and appropriately carried out by those of ordinary skill in the art.
The present invention relates to a two-way QKD system, and in particular to a method of suppressing noise in such a QKD system that arises from Rayleigh backscattering.
The optical (quantum) pulses returned from Alice to Bob, as described below, generally have an average number of photons of 1 or fewer, and preferably about 0.1. The details of Bob according to the present invention are below.
With continuing reference to
In an example embodiment, Alice and Bob are also coupled via a synchronization channel SC that allows for synchronization signals SS to be sent from one station to the other to control the timing and operation of the various elements making up the QKD system. In an example embodiment, the synchronization channel SC is multiplexed with the quantum channel over optical fiber link FL.
Bob
Lasers L1, L2 and L3 are optically coupled to respective polarization-maintaining (PM) VOAs 51, 52 and 53 e.g., via respective fiber sections F1, F2 and F3. PM VOAs 51, 52 and 53 are in turn optically coupled to respective couplers 61, 62 and 63 e.g., via fiber sections F4, F5 and F6. Couplers 61, 62 and 63 are arranged in series, with coupler 63 optically coupled to coupler 62, e.g., via fiber section F7, and coupler 62 optically coupled to coupler 61, e.g., via fiber section F8. Lasers L1, L2 and L3, and PM VOAs 51, 52 and 53 are operably (e.g., electrically) coupled via a (branching) line 64 (e.g., a wire) to a controller 66 that controls the activation and timing of these elements, as discussed in detail below.
Bob further includes a circulator 70 with ports 70A, 70B and 70C. Coupler 61 is optically coupled to first circulator port 70A, e.g., via a fiber section F9. Also, a 3 dB coupler 80 with four ports 80A-80D is optically coupled to third circulator port 70C, e.g., via a fiber section F10 connected to the coupler at port 80A.
Coupler 80 is coupled to two fiber sections 82 and 84 at respective ports 80D and 80C. The opposite ends of fibers 82 and 84 are coupled to respective faces 88A and 88B of a polarizing beam splitter 88, thereby forming an interferometer loop 100 with arms 82 and 84. A phase modulator 110 is arranged in one of the arms (e.g., arm 82). Phase modulator 110 is operatively coupled to controller 66.
Bob also includes a first WDM demultiplexer 120 optically coupled to port 70B of circulator 70 and a second WDM demultiplexer 122 optically coupled to coupler 80 at port 80B. First demultiplexer 120 is optically coupled to a detector unit 128 having three single-photon detectors (SPDs) 130, 132 and 134 (e.g., via respective optical fibers 136). Second demultiplexer 122 is optically coupled to a detector unit 138 having three single-photon detectors 140, 142 and 144 (e.g., via respective optical fibers 146). Each of the single-photon detectors is in turn coupled to controller 66. SPDs 130 and 140 corresponding to laser source L1 and λ1, SPDs 132 and 142 correspond to laser source L2 and λ2, and SPDs 134 and 144 correspond to laser source L3 and λ3. The SPD pairs constitute a set of SPDs that correspond to each wavelength used.
Note that the above description is an example embodiment of an arrangement for Bob. Other arrangements are possible, and the above-described arrangement is for the sake of illustration. For example, rather than SPD pairs, Bob can operate using a single SPD for each wavelength of light, e.g., by means of a delay line and gating pulses provided by controller 66. The discussion below uses SPD pairs for ease of illustration and understanding.
Method of Operation
In the present invention, both time and wavelength demultiplexing can be used to suppress the adverse effects associated with Rayleigh backscattering. Generally, backscattering occurs over the length of the optical fiber and backscattered light can reach the SPDs from portions of the optical fiber as far as at or near Alice. In certain instances, however, most of the backscattering in QKD system 10 (
With continuing reference to
Each returned pair of pulses is recombined (interfered) at coupler 80 to form a single interfered pulse IP1 (see
Backscattering Along The Entire Fiber Length
In the most general case, backscattering in QKD system 10 (
With reference also to
In the meantime, controller 66 sequentially activates SPD pairs 130 and 140, 132 and 142, and 134 and 144 to detect respective interfered optical pulses IP1, IP2 and IP3 having respective wavelengths λ1, λ2 and λ3 as the different optical pulse sets sequentially arrive at Bob.
Switching the wavelength of optical pulses P from one wavelength to another wavelength just as the optical pulses of one wavelength arrive at Alice prevents Rayleigh backscattered light of the one wavelength from reaching the SPDs designated to detect photons of that wavelength just as the quantum pulses of that wavelength are being detected.
With reference to
Strongest Backscattering Near Bob
As mentioned above, in certain instances, most of the backscattering in QKD system 10 (
Accordingly, with reference also to
Likewise, with reference to
At or about the time when interfered pulses IP3 (not shown) start arriving at SPDs 134 and 144, controller 66 deactivates laser source L3 and activates. laser source L1, and the above-described process repeated until a desired number of qubits are exchanged. Generally, each laser source L1, L2 . . . Ln emits for a time duration of 2(LF)/c and is off for the consecutive period of 2(n−1)(LF)/c.
Switching the wavelength of optical pulses P from a first wavelength to a second wavelength just as the optical pulses of the first wavelength are being detected decreases the amount of Rayleigh backscattered light of the first wavelength from reaching the SPDs designated to detect photons of the first wavelength just as the quantum pulses of that wavelength are being detected. The amount of the decrease is non-uniform and increases exponentially with time during each cycle.
The amount of Rayleigh backscattered photons, R, of a certain wavelength reaching the SPDs as this wavelength is being detected can be expressed as R=Ae−Bt, where time t varies between 0 and 2(LF)/C during each cycle, and where A and B are the system parameters that depend on fiber length (FL), its loss and the system architecture.
Key Generation
In the present invention, the conventional QKD protocols are used to extract a key from the exchanged optical pulses. When photons (pulses) are detected (i.e., as detector clicks) in the SPDs, it is important to know which SPD pair generated the click. When a detection event occurs in an SPD set that is not presently activated (gated), this event (click) should be discarded, since it corresponds to the wrong wavelength—and thus can be considered to originate from dark current or another type of detector error.
Other Example Embodiment of Bob
There are many other variations and example embodiments that could be set forth to describe the present invention. For example, the SPDs need not be arranged in pairs as described above, but may be arranged as single SPDs for each wavelength. Accordingly, the many features and advantages of the present invention are apparent from the detailed specification, and, thus, it is intended by the appended claims to cover all such features and advantages of the described apparatus that follow the true spirit and scope of the invention. In the foregoing Detailed Description, various features are grouped together in various example embodiments for ease of understanding. Furthermore, since numerous modifications and changes will readily occur to those of skill in the art, it is not desired to limit the invention to the exact construction, operation and example embodiments described herein.