Ad-hoc hybrid-heterogeneous metropolitan-range quantum key distribution network

This paper presents the development and implementation of a versatile ad-hoc metropolitan-range Quantum Key Distribution (QKD) network. The approach presented integrates various types of physical channels and QKD protocols, and a mix of trusted and untrusted nodes. Unlike conventional QKD networks that predominantly depend on either fiber-based or free-space optical (FSO) links, the testbed presented amalgamates FSO and fiber-based links, thereby overcoming some inherent limitations. Various network deployment strategies have been considered, including permanent infrastructure and provisional ad-hoc links to eradicate coverage gaps. Furthermore, the ability to rapidly establish a network using portable FSO terminals and to investigate diverse link topologies is demonstrated. The study also showcases the successful establishment of a quantum-secured link to a cloud server.

💡 Research Summary

The paper presents a comprehensive design, implementation, and experimental evaluation of an ad‑hoc, metropolitan‑scale quantum key distribution (QKD) network that combines heterogeneous physical channels—standard single‑mode fiber and free‑space optical (FSO) links—and mixes trusted and untrusted nodes. Building on the ITU‑T Y.3800 recommendation, the authors structure the system into three logical layers. The Service Layer hosts Quantum‑Secure Gateways (Q‑GWs) that expose quantum‑generated keys to external applications. The Key Management Layer provides a Global Key Management System (GKMS) and a “trusted‑node relay” function that propagates keys across intermediate nodes using information‑theoretically secure XOR operations, thereby enabling key distribution even over very lossy links. The Quantum Layer contains the actual QKD devices.

Three types of portable FSO terminals are described. TFT‑1 is a 200 mm aperture, 20× off‑axis mirror telescope equipped with a 1064 nm beacon laser and dual position‑sensitive detectors (PSDs) for closed‑loop beam stabilization. TFT‑2 adds an automated pointing‑acquisition‑tracking (PAT) system based on a coarse pointing assembly (CPA), a fine steering mirror (FSM), and a real‑time control platform (Speedgoat), achieving sub‑80 µrad jitter under turbulence. The QuBUS is a rugged 15‑foot shipping‑container laboratory that houses an optical table, power, and cooling, serving as a mobile transceiver platform for field campaigns.

Four distinct QKD protocols are simultaneously operated across the heterogeneous links: (1) a 1550 nm discrete‑variable BB84 system used on fiber‑wireless‑fiber (FWF) links, delivering secret‑key rates (SKR) up to 100 Mbps; (2) an entanglement‑based BBM92 system at 1550 nm for direct key exchange between untrusted nodes; (3) a high‑dimensional (HD‑QKD) prepare‑and‑measure scheme that exploits multiple phase and time bins to achieve 2–3× higher SKR than standard BB84 on the same bandwidth; and (4) continuous‑variable (CV‑QKD) implementations at 810 nm (free‑space coupled) and 1550 nm (fiber‑coupled) demonstrating low‑power, low‑cost key generation suitable for edge scenarios.

Key‑management experiments showcase the trusted‑node relay: a 2 km composite path (FSO + fiber) yields a final key rate of about 1 Mbps, which is then fed to a Q‑GW that terminates a TLS session with an external cloud server. The quantum‑secure key is injected as the session key, providing information‑theoretic confidentiality for real‑world data traffic. This end‑to‑end demonstration proves that the QKD layer can be seamlessly integrated into existing service architectures.

Field trials were conducted in the Jena region of Germany, covering link distances of 1.6–1.7 km for FSO and up to 685 m for fiber. The authors measured link availability under varying meteorological conditions (fog, wind, temperature gradients), automatic alignment recovery times (~30 s), and the time required to restore connectivity after a simulated fiber cut using portable FSO terminals (~1 hour). Beam‑stabilization performance reached 10–20 dB loss over the FSO links, and jitter statistics indicated a standard deviation of 338 µrad (open loop) reduced to 80 µrad (closed loop).

The paper’s contributions can be summarized as follows:

1. Hybrid‑heterogeneous physical layer – simultaneous use of fiber and FSO over the same network, mitigating the vulnerability of fiber‑only backbones.
2. Multi‑protocol stack – integration of discrete‑variable, entanglement‑based, high‑dimensional, and continuous‑variable QKD, demonstrating protocol‑agnostic network operation.
3. Standardized three‑layer architecture – clear separation of service, key‑management, and quantum functions with open APIs, enabling modular upgrades and interoperability with future standards.
4. Portable FSO terminals with automated PAT – robust, rapid‑deployment hardware that can be set up within hours and maintain sub‑100 µrad pointing accuracy under turbulence.
5. Trusted‑node relay for long‑distance key propagation – information‑theoretically secure XOR‑based key forwarding that allows key distribution over links with prohibitive loss.
6. Real‑world application integration – a quantum‑secured link to a cloud server, illustrating how QKD can protect actual data services rather than remaining a laboratory curiosity.

Overall, the work provides a practical roadmap for building resilient, dynamic metropolitan QKD networks that can complement existing telecom infrastructure, support emergency communication scenarios, and pave the way for future integration with 5G/6G and post‑quantum cryptographic services.