Multi-community network with quantum key distribution

摘要

This invention relates to an optical star network in which different communities of users, such as different businesses, are provided through use of quantum key distribution (QKD). At least one QKD device is located at the central hub of the star network and communicates with QKD devices at the endpoints to establish a separate quantum key, i.e. a cryptographic key established by QKD, with each endpoint. A separate key manager is provided for each different community and each key manager is arranged to use the appropriate quantum keys for endpoints within that community to deliver the same community key to each endpoint. This community key can be used by for encrypting network traffic between members of the same community with security. Traffic passing through the network switch is encrypted, but the community keys are not delivered via the switch and hence the switch an error in the switch does not compromise security.

主权项

1. A system to implement a switched optical star network having a plurality of distinct user communities, the network comprising:
a hub and a plurality of endpoints optically connected to the hub; wherein the hub comprises a network switch and at least one quantum key distribution (QKD) device; each endpoint comprises a QKD device in optical communication with a QKD device at the hub, so as to, in use, derive a quantum key for that endpoint; the hub further comprises a separate key transmitter for each respective community, and each key transmitter is connected only to those endpoints which are within its respective community; each key transmitter is arranged to transmit only to endpoints within its respective community and is arranged to transmit to each endpoint within its respective community a community key encrypted using the quantum key for the particular endpoint; the hub mounted and endpoint QKD devices communicate on a quantum channel and a classical channel; the quantum and classical channels are established as different wavelengths transmitted over the same medium; the system to implement a switched optical star network further comprises a plurality of QKD devices at the hub; and each QKD device located at the hub is arranged to only communicate with endpoints within a single community.