1、 ETSI GR QKD 003 V2.1.1 (2018-03) Quantum Key Distribution (QKD); Components and Internal Interfaces Disclaimer The present document has been produced and approved by the Group Quantum Key Distribution (QKD) ETSI Industry Specification Group (ISG) and represents the views of those members who partic
2、ipated in this ISG. It does not necessarily represent the views of the entire ETSI membership. GROUP REPORT ETSI ETSI GR QKD 003 V2.1.1 (2018-03) 2 Reference RGR/QKD-003ed2 Keywords interface, quantum key distribution ETSI 650 Route des Lucioles F-06921 Sophia Antipolis Cedex - FRANCE Tel.: +33 4 92
3、 94 42 00 Fax: +33 4 93 65 47 16 Siret N 348 623 562 00017 - NAF 742 C Association but non lucratif enregistre la Sous-Prfecture de Grasse (06) N 7803/88 Important notice The present document can be downloaded from: http:/www.etsi.org/standards-search The present document may be made available in el
4、ectronic versions and/or in print. The content of any electronic and/or print versions of the present document shall not be modified without the prior written authorization of ETSI. In case of any existing or perceived difference in contents between such versions and/or in print, the only prevailing
5、 document is the print of the Portable Document Format (PDF) version kept on a specific network drive within ETSI Secretariat. Users of the present document should be aware that the document may be subject to revision or change of status. Information on the current status of this and other ETSI docu
6、ments is available at https:/portal.etsi.org/TB/ETSIDeliverableStatus.aspx If you find errors in the present document, please send your comment to one of the following services: https:/portal.etsi.org/People/CommiteeSupportStaff.aspx Copyright Notification No part may be reproduced or utilized in an
7、y form or by any means, electronic or mechanical, including photocopying and microfilm except as authorized by written permission of ETSI. The content of the PDF version shall not be modified without the written authorization of ETSI. The copyright and the foregoing restriction extend to reproductio
8、n in all media. ETSI 2018. All rights reserved. DECTTM, PLUGTESTSTM, UMTSTMand the ETSI logo are trademarks of ETSI registered for the benefit of its Members. 3GPPTM and LTETMare trademarks of ETSI registered for the benefit of its Members and of the 3GPP Organizational Partners. oneM2M logo is prot
9、ected for the benefit of its Members. GSMand the GSM logo are trademarks registered and owned by the GSM Association. ETSI ETSI GR QKD 003 V2.1.1 (2018-03) 3 Contents Intellectual Property Rights 5g3Foreword . 5g3Modal verbs terminology 5g31 Scope 6g32 References 6g32.1 Normative references . 6g32.2
10、 Informative references 6g33 Definitions, symbols and abbreviations . 9g33.1 Definitions 9g33.2 Symbols 10g33.3 Abbreviations . 10g34 QKD systems 11g34.1 Generic description. 11g34.2 Weak Laser Pulse QKD Implementations 12g34.2.1 Generic Description 12g34.2.2 One-Way Mach-Zehnder 13g34.2.3 Send-and-
11、return scheme (Mach-Zehnder) 14g34.2.4 Phase-Intensity Modulator Implementation 15g34.2.5 Coherent One-Way (COW) 15g34.3 Entanglement-based QKD Implementations 16g34.4 Continuous-Variable QKD Implementations . 17g34.4.1 Generic Description 17g34.4.2 Transmitted Local Oscillator: TLO-CV-QKD scheme .
12、17g34.4.3 Local Local Oscillator: LLO-CV-QKD scheme . 19g35 Photon Detector 20g35.1 Single-Photon Detector 20g35.1.1 Generic Description and Parametrization . 20g35.1.2 InGaAs Single-Photon Avalanche Photodiodes 23g35.1.2.1 Generic Description 23g35.1.2.2 Gated-mode operation . 23g35.1.2.3 Free-runn
13、ing operation 25g35.1.3 Superconducting nanowire single-photon detectors (SNSPDs) 25g35.2 Photon Detector for a CV-QKD Set-up 26g35.2.1 Coherent Detection . 26g35.2.2 Single-quadrature homodyne detection 28g35.2.3 Dual-quadrature homodyne detection . 28g35.2.4 Heterodyne Detection . 28g35.2.5 CV-QKD
14、 Detector Parameters . 29g36 QKD Source . 30g36.1 Single-photon source 30g36.1.1 Generic Description and Parametrization . 30g36.1.2 True Single-Photon Sources . 33g36.1.3 Weak Pulses 34g36.1.3.1 Weak Laser . 34g36.1.3.2 Intensity-Modulated Weak Laser 34g36.1.3.3 Phase-Coherent Weak Laser . 35g36.1.
15、3.4 Composite Weak Laser . 35g36.1.4 Entangled-photon sources . 36g36.2 Continuous-Variable QKD Source . 37g37 Modulators . 37g3Annex A: Discrete Variable Protocols 40g3ETSI ETSI GR QKD 003 V2.1.1 (2018-03) 4 A.1 BB84. 40g3A.1.1 Basic protocol . 40g3A.1.2 Refinements 40g3A.1.2.1 State preparation -
16、imperfections 40g3A.1.2.2 Multi-photon emission 40g3A.1.2.2.1 Security loophole 40g3A.1.2.2.2 Decoy state method . 41g3A.1.2.2.3 SARG04 41g3A.2 Entanglement-based . 41g3A.2.1 Overview 41g3A.2.2 E91 . 41g3A.2.3 BBM92 . 41g3A.3 Distributed-phase reference protocols 42g3A.3.1 Overview 42g3A.3.2 Differe
17、ntial phase shift (DPS) 42g3A.3.3 Coherent One-Way (COW) 42g3A.4 Measurement-Device Independent (MDI) . 43g3A.4.1 Overview 43g3Annex B: Continuous Variable Protocols 44g3B.1 Basic Protocols . 44g3B.1.1 Basic protocols . 44g3Annex C: Authors Essential, or potentially Essential, IPRs notified to ETSI
18、in respect of ETSI standards“, which is available from the ETSI Secretariat. Latest updates are available on the ETSI Web server (https:/ipr.etsi.org/). Pursuant to the ETSI IPR Policy, no investigation, including IPR searches, has been carried out by ETSI. No guarantee can be given as to the existe
19、nce of other IPRs not referenced in ETSI SR 000 314 (or the updates on the ETSI Web server) which are, or may be, or may become, essential to the present document. Trademarks The present document may include trademarks and/or tradenames which are asserted and/or registered by their owners. ETSI clai
20、ms no ownership of these except for any which are indicated as being the property of ETSI, and conveys no right to use or reproduce any trademark and/or tradename. Mention of those trademarks in the present document does not constitute an endorsement by ETSI of products, services or organizations as
21、sociated with those trademarks. Foreword This Group Report (GR) has been produced by ETSI Industry Specification Group (ISG) Group Quantum Key Distribution (QKD). Modal verbs terminology In the present document “should“, “should not“, “may“, “need not“, “will“, “will not“, “can“ and “cannot“ are to
22、be interpreted as described in clause 3.2 of the ETSI Drafting Rules (Verbal forms for the expression of provisions). “must“ and “must not“ are NOT allowed in ETSI deliverables except when used in direct citation. ETSI ETSI GR QKD 003 V2.1.1 (2018-03) 6 1 Scope The present document is a preparatory
23、action for the definition of properties of components and internal interfaces of QKD Systems. Irrespective of the underlying technologies, there are certain devices that appear in most QKD Systems. These are e.g. quantum physical devices such as photon sources and detectors, or classical equipment s
24、uch as protocol processing computer hardware and operating systems. For these components, relevant properties should be identified that will subsequently be subject to standardization. Furthermore, a catalogue of relevant requirements for interfaces between components should be established, to suppo
25、rt the upcoming definition of internal interfaces. 2 References 2.1 Normative references Normative references are not applicable in the present document. 2.2 Informative references References are either specific (identified by date of publication and/or edition number or version number) or non-speci
26、fic. For specific references, only the cited version applies. For non-specific references, the latest version of the referenced document (including any amendments) applies. NOTE: While any hyperlinks included in this clause were valid at the time of publication, ETSI cannot guarantee their long term
27、 validity. The following referenced documents are not necessary for the application of the present document but they assist the user with regard to a particular subject area. i.1 J. F. Dynes, Z. L. Yuan, A. W. Sharpe, and A. J. Shields: “Practical quantum key distribution over 60 hours at an optical
28、 fiber distance of 20km using weak and vacuum decoy pulses for enhanced security“, Opt. Express 15, 8465 (2007). i.2 G. Ribordy, J-D. Gautier, N. Gisin, O. Guinnard and H. Zbinden: “Fast and user-friendly quantum key distribution“, J. Mod Opt. 47, 513-531 (2000). i.3 N. Gisin, G. Ribordy, W. Tittel,
29、 H. Zbinden, Quantum Cryptography, Rev. Mod. Phys. 74, 145-195 (2002). i.4 Y. Zhao, B. Qi, H.-K. Lo, L. Qian: “Security analysis of an untrusted source for quantum key distribution: passive approach“, New Journal of Physics, 12, 023024 (2010). i.5 L. Duraffourg, J.-M. Merolla, J.-P. Goedgebuer, Y. M
30、azurenko, W. T. Rhodes: “Compact transmission system using single-sideband modulation of light for quantum cryptography“, Opt. Lett 26(18) 1427-1429 (2001). i.6 D. Stucki, N. Brunner, N. Gisin, V. Scarani, and H. Zbinden: “Fast and simple one-way quantum key distribution“ Applied Physics Letters 87(
31、19); 194108, (2005). i.7 D. Stucki, N. Walenta, F. Vannel, R. T. Thew, N. Gisin, H. Zbinden, S. Gray, C. R. Towery, S. Ten: “High rate, long-distance quantum key distribution over 250uni2009km of ultra low loss fibres“, New J. Phys. 11(7), 75003 (2009). i.8 A. Poppe, A. Fedrizzi, R. Ursin, H. R. Bhm
32、, T. Lornser, O. Maurhardt, M. Peev, M. Suda, C. Kurtsiefer, H. Weinfurter, T. Jennewein, and A. Zeilinger: “Practical quantum key distribution with polarization entangled photons“, Opt. Express 12(16), 3865-3871 (2004). i.9 A. Treiber, A. Poppe, M. Hentschel, D. Ferrini, T. Lornser, E. Querasser, T
33、. Matyus, H. Hbel and A. Zeilinger: “A fully automated entanglement-based quantum cryptography system for telecom fiber networks“, New Journal of Physics 11, 045013 (2009). ETSI ETSI GR QKD 003 V2.1.1 (2018-03) 7 i.10 Juan Yin, Yuan Cao, Yu-Huai Li, Ji-Gang Ren, Sheng-Kai Liao, Liang Zhang, Wen-Qi C
34、ai, Wei-Yue Liu, Bo Li, Hui Dai, Ming Li, Yong-Mei Huang, Lei Deng, Li, Qiang Zhang, Nai-Le Liu, Yu-Ao Chen, Chao-Yang Lu, Rong Shu, Cheng-Zhi Peng, Jian-Yu Wang, and Jian-Wei Pan: “Satellite-to-ground entanglement-based quantum key distribution“, Phys. Rev. Lett. 119, 200501 (2017). i.11 S. Fossier
35、, E. Diamanti, T. Debuisschert, A. Villing, R. Tualle-Brouri, P. Grangier: “Field test of a continuous-variable quantum key distribution prototype“, New J. Phys. 11(4), 045023 (2009). i.12 A. Leverrier and ii) to monitor for so-called Trojan-horse attacks. The transmitted pulses are reflected by a F
36、araday mirror (FM) which compensates for any birefringence in the quantum channel, and returns the pulses to Bob orthogonally polarised with respect to their emitted states. An attenuator (AT) reduces the intensity of the pulses to a suitably weak intensity (depending on the protocol used). 1 applie
37、s a phase shift to Plong(but not to Pshort) to encode a bit value. At the receiving unit, Plongtakes the short path and Pshorttakes the long path where g5882 applies a phase shift to it to implement the measurement basis choice. Both pulses reach BS1 simultaneously with identical polarisation, leadi
38、ng to interference. Single-photon detectors D1 and D2 indicate which output port is taken by the photon. The circulator C ensures isolation between the laser source and D1. With this scheme, the security of a protocol has to be carefully investigated. In particular, without any knowledge of the stat
39、e Alice sends to Bob, the security is difficult to guarantee. Therefore, some monitoring has to be performed on the outgoing pulses from Alice i.4. Figure 4.3: Schematic of a send-and-return scheme in a Mach-Zehnder system ETSI ETSI GR QKD 003 V2.1.1 (2018-03) 15 4.2.4 Phase-Intensity Modulator Impl
40、ementation Figure 4.4 depicts a simplified Single Sideband (SSB) system, according to L. Duraffourg et al.,i.5. The source S1 is an attenuated pulsed laser diode operating at optical frequency g6640(quantum signal). An unbalanced integrated Mach-Zehnder modulator MZ1 modulates the intensity of the r
41、eference beam at g591 g1575 g6640with a modulation depth m 1. The modulating signal is produced by a local oscillator (OS) that drives simultaneously a second integrated Mach-Zehnder MZ2. The light emitted by the source S2 (synchronization signal), operating at optical frequency g664s, is then modul
42、ated at the same frequency g591. Both optical signals are launched in a standard fibre. Their optical spectra are composed by a central peak and two sidebands g6640 g591 (g664s g591) with phase g5881(0)relative to the central peak. At the receiver, a WDM demultiplexer allows to separate the transmit
43、ted signals. The synchronization signal is converted by a detector (DS) that generates an electrical signal at frequency g591. The amplitude of the electrical signal is matched to the modulation depth m and drives a phase modulator MZ2 with a 3g644 / 4-optical path difference bias. When a phase shif
44、t g5882is added to the electrical signal, it can be shown that the probability P1and P2 of detecting one photon in the lower-sideband and the upper-sideband of the quantum signal is governed respectively by a sine-squared and a cosine-squared function of the phase difference (g5881 - g5882). One of
45、the sidebands and the reference beam are separated by optical filter F. Any protocol can in principle be implemented with this system, which features two outputs with complementary probabilities of photon detection. The advantage of transmitting the synchronization signal in the same fibre link is t
46、o reduce drastically the sensitivity of the system to optical path fluctuations and thus allow long distance key distribution. Figure 4.4: Schematic of a one-way, weak-laser-pulse frequency-domain QKD system 4.2.5 Coherent One-Way (COW) In the COW protocol i.6 and i.7, the encoding is provided by a
47、high-visibility intensity modulator, which generates weak pulses in specific time-bins. Each bit is encoded by sending a weak coherent pulse in one out of two possible time-bins, while the other time-bin contains ideally the vacuum. These states can be discriminated by a simple time-of-arrival measu
48、rement on each state. In addition, a third state called a decoy sequence, with both time-bins containing weak coherent pulses is randomly prepared. ETSI ETSI GR QKD 003 V2.1.1 (2018-03) 16 Figure 4.5: Schematic of the Coherent One-Way (COW) QKD protocol Quantum states are prepared by Alice by intens
49、ity modulation of the output of a continuous-wave (CW) laser and subsequent attenuation to the single-photon level. On the receiver side (Bob), two single-photon detectors are used to decode the bit value (Dbit) and to monitor the coherence (Dmon) of the received states. Importantly, the receiver is completely passive, without the need for active elements or random numbers to choose the measurement basis. 4.3 Entanglement-based QKD Implementations A schematic of a polarisation-entanglement-based QKD implementation from i.9 is depicted
