Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
  • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
  • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
  • H04L9/0852—Quantum cryptography
  • H04L9/0858—Details about key distillation or coding, e.g. reconciliation, error correction, privacy amplification, polarisation coding or phase coding

Definitions

• the present invention generally relates to the field of the Quantum Key Distribution (QKD).
• QKD Quantum Key Distribution
• the type of technology used falls under the framework of Continuous-Variable quantum key distribution (CV-QKD).
• CV-QKD Continuous-Variable quantum key distribution
• the invention relates to a device and a method for refining QKD data (e.g., retaining signals of good quality in QKD data) to be processed further for error correction and privacy amplification in the CV-QKD.
• This invention also relates to devices and methods that generate a secret key based on the QKD.
• Conventional QKD post-processing is a process performed on a classical computing device that transforms a raw key to a final secret key. It generally comprises three main steps: parameter estimation, information reconciliation, and privacy amplification.
• the present invention particularly relates to the information reconciliation.
• a conventional Discrete-Variable (DV)-QKD device generates key at rate of 10 kbps at the distance of 50 km, which is considered as a low key generation rate.
• all key signals present at the information reconciliation stage are used to generate a final key, which results in a higher computational demand.
• embodiments of the present invention aim to improve the conventional devices and methods, in particular with respect to performing information reconciliation.
• An objective is to provide a device and a method for post-processing data of a QKD system, e.g. refining sequences of symbols in QKD data, in order to obtain signals of better quality.
• the device and method should perform post-processing such that the information reconciliation conditionally improves the signal to noise ratio (SNR) of the signals.
• SNR signal to noise ratio
• a first aspect of the invention provides a device for communicating with a remote device in a Continuous-Variable Quantum Key Distribution, CV-QKD, system to generate a secret key shared among the device and the remote device, the device being configured to refine a local sequence of symbols and cooperate with the remote device to generate the secret key based on the refined local sequence of symbols, wherein the device is configured to refine the local sequence by performing the following operations: determining a local characteristic, the local characteristic being a characteristic of two or more symbols selected from the local sequence; initiating determining a measure of dissimilarity between the local characteristic and a remote characteristic; retaining at least one of the selected symbols in the local sequence when the measure of dissimilarity is below a predefined threshold, and dropping at least one of the selected symbols from the local sequence when the measure of dissimilarity is above the predefined threshold.
• CV-QKD Continuous-Variable Quantum Key Distribution
• the device of the first aspect may be a local device, which communicates with the remote device. Moreover, any device may be considered a“local” device, and any device which is physically separated from the local device may be considered a“remote” device.
• the device of the first aspect may be (or may be incorporated in) the transmitting device and/or the receiving device in the QKD system.
• the device may comprise hardware and software.
• the hardware may comprise analog or digital circuitry, or both analog and digital circuitry.
• the device comprises one or more processors and a non volatile memory connected to the one or more processors.
• the non-volatile memory may carry executable program code, which, when executed by the one or more processors, causes the device to perform the operations or methods described herein.
• the CV-QKD system may comprise the device and the remote device.
• the CV-QKD system may comprise further devices, e.g., relay or control devices, which are capable of communicating with the device and/or the remote device.
• the local sequence is local in the sense that it is known to the device. That is, the device has access to the local sequence.
• the local sequence may be kept in a memory of the device, and a processing unit of the device may read the sequence from the memory and modify the sequence in the memory, or may store modified versions of the sequence in the memory.
• the remote characteristic may be a characteristic of two or more symbols selected from a sequence (herein referred to as the remote sequence) of symbols at the remote device.
• the symbols from the local sequence (local symbols) and the symbols from the remote sequence (remote symbols) may be selected such that they correspond to each other one- to-one.
• the one-to-one correspondence may be such that, in the hypothetical absence of information degradation, the remote symbols are identical to the local symbols (note that information degradation is inherent to the CV-QKD system).
• it may be assumed that the local sequence and the remote sequence are aligned with each other.
• Each local symbol and its corresponding remote symbol then have the same sequence index.
• Each of the two sequences may, for example, be ordered following the order in which the symbols have been transmitted over the quantum channel (e.g. from the device to remote device or vice versa).
• the device may initiate determining the measure of dissimilarity between the local characteristic and the remote characteristic. It may be expected that the measure of dissimilarity will correlate inversely with the signal quality. If the signal is perfect, it may be expected that the local characteristic and the remote characteristic will be identical, i.e. that there will be no dissimilarity. In this situation the measure of dissimilarity may be taken as zero. The poorer the signal (i.e. the lower the signal quality) is, the greater the measure of dissimilarity will be.
• the signals may be the physical (e.g., optical) signals that represent the symbols in the sequences.
• the device itself may determine the measure of dissimilarity.
• the device may trigger another device (e.g., the remote device) to determine the measure of dissimilarity.
• the device may send a message to the other device in accordance with a communication protocol, and the other device may determine the measure of dissimilarity in response to that message.
• the device may refine the local sequence of symbols.
• the measure of dissimilarity may correlate inversely with the signal quality.
• the signal representing the selected two or more symbols likely has a good signal quality, and therefore, at least one of the selected symbols may be retained.
• the local sequence of symbols is refined.
• the measure of dissimilarity between the local characteristics and the remote characteristics is above the threshold value, that means, the signal representing the selected two or more symbols has a lower signal quality, and therefore, at least one of the selected symbols may be dropped.
• the local sequence of symbols is refined.
• the key rate (also known as the key generation rate) is the rate at which a new key can be generated or, equivalently, the number of key bits that can be generated per time.
• the measure of dissimilarity may be, for example, a binary quantity (e.g., with allowed values of 0 and 1 and a threshold anywhere between 0 and 1).
• the measure of dissimilarity may be determined based on comparing the local characteristics with the remote characteristics of the remote device.
• the refined local sequence of symbols e.g., the signals that represent the symbols in the refined local sequence of symbols
• has a better quality e.g., it has a higher SNR or lower Bit error rate (BER)). Consequently, a forward error correction code may be chosen to match this better quality.
• the eavesdropper’s information (Eve’s information) in the QKD system, about the retained symbols (e.g., the retained data) may be increased. Moreover, this increase of Eve’s information may further be estimated, and it may be used for determining the amount of privacy amplification to be performed.
• a mapping procedure may be used in order to map the continuous CV-QKD data to one or more bits. For example, some binary operations may be performed, e.g., to determine the local characteristic and/or the remote characteristic.
• the local characteristic and/or the remote characteristic may be directly determined from the CV-QKD data.
• the refining of the local sequence may represent an Advantage Distillation (AD) operation being performed on the CV-QKD data, wherein the data is of continuous values.
• AD Advantage Distillation
• the operations comprise: selecting the two or more symbols from the local sequence at random sequence positions; or obtaining the sequence positions of the two or more selected symbols from the remote device.
• each symbol in the local sequence represents a complex number comprising a real part and an imaginary part.
• the real part may indicate an in-phase component of a physical (e.g. optical) signal representing the symbol and the imaginary part may indicate a quadrature component of the physical signal.
• a physical e.g. optical
• the local characteristic is based on differences between the two or more symbols selected from the local sequence.
• the difference between two symbols may be obtained, for example, by subtracting one of the two symbols from the other one, i.e. by subtracting the real part and the imaginary part of one of the two symbols from the real part and the imaginary part of the other symbol, respectively.
• the local characteristic and the remote characteristic may be defined similarly.
• the remote characteristic may be based on differences between two or more symbols selected from the remote sequence.
• the device is further configured to determine the measure of dissimilarity based on receiving the remote characteristic from the remote device; and comparing the local characteristic with the remote characteristic.
• the measure of dissimilarity is a difference between the local characteristic and the remote characteristic.
• determining the local characteristic comprises converting the selected two or more symbols to two or more bits, wherein each symbol is converted to one or more bits.
• determining the local characteristic further comprises determining one or more parities of the two or more bits.
• the device is further configured to determine the measure of dissimilarity based on: comparing the one or more parities determined by the device with the one or more parities determined by the remote device.
• the comparison i.e., comparing the one or more parities
• another device e.g., the remote device
• the measure of dissimilarity is zero when the one or more parities determined by the device are equal to the one or more parities determined by the remote device.
• the device is further configured to, when a symbol is retained, output an indication that this symbol is retained.
• the device may retain a symbol (e.g., when the measure of dissimilarity is below the predefined threshold).
• the device may then output the indication, for example, the device may send a message to the other device (e.g., the remote device) that this symbol is retained.
• the remote device may also refine the remote sequence of symbols by retaining a (remote) symbol, e.g., a (remote) symbol having the same sequence index as the retained (local) symbol.
• the device is further configured to receive a message indicating whether the measure of dissimilarity is above or below the predefined threshold.
• another device may determine whether the measure of dissimilarity is above or below the predefined threshold and it may further send a corresponding message to the device.
• the local device receives the message and drops or retains at least one of the selected local symbols depending on whether the measure of dissimilarity is above or below the predefined threshold.
• the device is further configured to generate the local sequence based on a quantum signal transmitted or received by the device.
• the signals (e.g., the quantum signals) which may represents the symbols may be used and furthermore, the device (and/or the remote device) may obtain (e.g., generate) the symbols from the signals, generate the local sequence, etc. Moreover, in some embodiments, the device (and/or the remote device) may directly selects two or multiple signals, refine the signals (e.g., retain or drop at least one signal), collect the retained signals, etc.
• a second aspect of the invention provides a method for performing information reconciliation in a Continuous -Variable Quantum Key Distribution, CV-QKD, system, the method comprising refining a local sequence of symbols by: determining a measure of dissimilarity between a local characteristic and a remote characteristic, the local characteristic being a characteristic of two or more symbols selected from the local sequence of symbols, the remote characteristic being a characteristic of two or more symbols selected from a remote sequence of symbols; retaining at least one of the selected symbols in the local sequence when the measure of dissimilarity is below a predefined threshold; and dropping at least one of the selected symbols from the local sequence when the measure of dissimilarity is above the predefined threshold.
• the method further comprises generating a secret key based on the refined local sequence of symbols.
• the method further comprises determining a local characteristic, the local characteristic being a characteristic of two or more symbols selected from the local sequence.
• the method further comprises selecting the two or more symbols from the local sequence at random sequence positions; or obtaining the sequence positions of the two or more selected symbols from the remote device.
• each symbol in the local sequence represents a complex number comprising a real part and an imaginary part.
• the method further comprises determining the local characteristic, based on differences between the two or more symbols selected from the local sequence. In a further implementation form of the second aspect, the method further comprises determining the measure of dissimilarity based on receiving the remote characteristic from the remote device; and comparing the local characteristic with the remote characteristic. In a further implementation form of the second aspect, the measure of dissimilarity is a difference between the local characteristic and the remote characteristic.
• the method further comprises converting the selected two or more symbols to two or more bits, wherein each symbol is converted to one or more bits.
• the method further comprises determining one or more parities of the two or more bits. In a further implementation form of the second aspect, the method further comprises determining the measure of dissimilarity based on: comparing the one or more parities determined by the device with the one or more parities determined by the remote device.
• the measure of dissimilarity is zero when the one or more parities determined by the device are equal to the one or more parities determined by the remote device.
• the method further comprises, when a symbol is retained, outputting an indication that this symbol is retained.
• the method further comprises receiving a message indicating whether the measure of dissimilarity is above or below the predefined threshold. In a further implementation form of the second aspect, the method further comprises generating the local sequence based on a quantum signal transmitted or received by the device.
• a third aspect of the invention provides a program code, which, when executed by a processor, causes the method according to the second aspect or an implementation form of the second aspect to be performed.
• the program code may be provided on a non-transitory computer-readable medium.
• FIG. 1 schematically illustrates an example of a device for communicating with a remote device in a CV-QKD system, for refining a local sequence of symbols, according to an embodiment of the invention.
• FIG. 2 shows the key rate performance of an example of CV-QKD as a function of the distance for an original (unrefined) local sequence of symbols and the refined local sequence of symbols.
• FIG. 3 shows a flowchart of an example of a method for performing an information reconciliation including retaining/dropping signals based on a mapping to binary data and computing a parity of signals.
• FIG. 4 shows a flowchart of an example of a method including running CV advantage distillation on all pairs/sets of signals, collecting retaining signals and further performing a privacy amplification procedure.
• FIG. 5 shows a flowchart of an example of a method for performing an information reconciliation procedure including retaining/dropping signals based on computing a syndrome of signals and comparing the syndrome.
• FIG. 6 shows a flowchart of an example of a method for performing an information reconciliation procedure including selecting multiple signals, retaining/dropping signals based on determining a relative characteristic and comparing the relative characteristic.
• FIG. 7b show flowcharts of examples of two methods, each for performing an information reconciliation procedure including selecting two signals, retaining/dropping signals based on determining a relative characteristic and comparing the relative characteristic.
• FIG. 8 shows a flowchart of an example of a method for performing an information reconciliation procedure including running multiple CV advantage distillation procedures.
• FIG. 9 is a flowchart of an example of a method for performing information reconciliation in a CV-QKD system, according to an embodiment of the present invention.
• FIG. 10 is a flowchart of an example of a method including QKD post processing, according to prior art. DETAILED DESCRIPTION OF EMBODIMENTS
• FIG. 10 is a flowchart of a QKD post processing procedure 1000.
• a transmitting device 1100 (corresponding to the user Alice) generates quantum states, and further transmits the quantum states to a receiving device 1200 (corresponding to the user Bob), in the presence of an eavesdropper 1300, (corresponding to Eve).
• the terms“transmitting device” and“Alice” will be used interchangeably.
• the terms“receiving device” and“Bob” will be used interchangeably.
• the receiving device 1200 further measures the transmitted quantum states. Moreover, the transmitting device 1100 and the receiving device 1200 may further generate the raw keys based on their corresponding quantum states and/or the measurement results of them. Additionally, post processing of the data of QKD system is performed, for example, the transmitting device 1100 may perform the QKD post-processing (i.e., SI 101 in FIG. 10) and/or the receiving device 1200 may perform the QKD post-processing (i.e., S1201 in FIG. 10). In the parameter estimation step, Alice and Bob estimate the properties of the quantum channel, which allow them to infer how much error is in the raw key and how much information about the raw key has been leaked to Eve.
• the transmitting device 1100 may perform the QKD post-processing (i.e., SI 101 in FIG. 10) and/or the receiving device 1200 may perform the QKD post-processing (i.e., S1201 in FIG. 10).
• Alice and Bob estimate the properties of the quantum channel, which allow them
• Alice and Bob correct the differences in their keys to arrive at matching keys. In most cases, only one of them performs error correction on one’s key to match the other’s key.
• Alice and Bob perform a length-shortening operation that is specially designed to remove Eve’s information on the key.
• FIG. 1 schematically illustrates a device 100 for communicating with a remote device 110 in a CV-QKD system 1, for refining a local sequence of symbols 101, according to an embodiment of the invention.
• the device 100 is exemplarily shown as the transmitting device
• the remote device 110 is exemplarily shown as the receiving device, in the CV-QKD system 1, without limiting the present invention.
• the device 100 communicates with the remote device 110 in the CV-QKD system 1 to generate a secret key 104 shared among the device 100 and the remote device 110.
• the device 100 is configured to refine a local sequence of symbols 101 and cooperate with the remote device 110 to generate the secret key 104 based on the refined local sequence of symbols 101.
• the device 100 is configured to refine the local sequence 101 by performing the following operations: determining a local characteristic 103, the local characteristic 103 being a characteristic of two or more symbols 102 selected from the local sequence 101; initiating determining a measure of dissimilarity between the local characteristic 103 and a remote characteristic 113; retaining at least one of the selected symbols 102 in the local sequence 101 when the measure of dissimilarity is below a predefined threshold, and dropping at least one of the selected symbols 102 from the local sequence 101 when the measure of dissimilarity is above the predefined threshold.
• the device 100 refines the local sequence of symbols 101.
• 10 sequence indexes of the local sequence 101 are illustrates in which, initially, each sequence index had one corresponding symbol (symbols are illustrated with a filled circle), without limiting the present invention to a specific sequence indexes or numbers.
• the symbol corresponding to the sequence index 101-1 is a symbol that is retained. Furthermore, the symbol corresponding to the sequence index 101-3 is dropped (i.e., for the illustration purpose, the sequence index 101-3 is shown with an empty circle, that means, its corresponding symbol is dropped). In other words, the symbols (i.e., represented by the bad quality signals) are dropped.
• the local sequence 101 is refined, the retained symbols (e.g., also the signals in which represent the retained symbols) have a better quality, and are used for further generation of the secret key 104.
• FIG. 2 shows the key rate performance of CV-QKD (exemplarily illustrated in Y -axis) as a function of the distance (exemplarily illustrated in X-axis) for an original (unrefined) local sequence of symbols and the refined local sequence of symbols.
• the solid curve 201 is the original key rate performance of CV-QKD when the used local sequence of symbols is not refined.
• the dotted curve 202 is the key rate performance of the CV-QKD when using the refined local sequence of symbols (e.g., performing the advantage distillation method as discussed above).
• the advantage of refining the local sequence of symbols is that a long reach may be established in CV-QKD, as it is shown in FIG. 2. Moreover, the amount of key signals needed to be error corrected using a forward error correction code is smaller (in terms of bits/second). This may lower the computational demand. Furthermore, the SNR of the key signals to be error corrected may be higher. This enables the use of forward error correction code with high code rates and less decoding computation (i.e., a lower computational demand).
• step 301b, 401b, 501b, 601b, 701b, 701d and 801b correspond to obtaining the CV raw data by the receiving device (Bob), and therefore, the repeated explanation of these steps in description of each figure is omitted.
• FIG. 3 shows a flowchart of a method 300 for performing an information reconciliation including retaining/dropping signals based on a mapping to binary data and computing a parity of signals.
• the device 100 may be, or may be incorporated in, the transmitting device (corresponding to Alice) and/or the receiving device (corresponding to Bob).
• the device 100 is the transmitting device (Alice) and performs the steps 301a, 302a, 303a, 304a, 305a and 306a of the method 300.
• the remote device 110 is the receiving device (Bob) and performs the steps 301b, 302b, 303b, 304b, 305b and 306b of the method 300.
• the signals may be the physical (e.g., optical) signals which may represents the symbols in the sequences.
• the device and/or the remote device may obtain (e.g., generate) the symbols from the signals.
• the device may also convert the signals (e.g., directly) to binary values.
• Alice obtains (at 301a), the CV raw key data x 1 , x 2 , x 3 , ... where each may have a real value.
• Bob obtains (at 301b) the CV raw key data y 1 , y 2 , y 3 , ... where each may have a real value.
• FIG. 4 shows a flowchart of a method 400 including running CV advantage distillation on all pairs/sets of signals, collecting retaining signals and further performing a privacy amplification procedure.
• steps shown in the dotted box 300A of FIG. 3 corresponds to the step“Run CV advantage distillation on all pairs” in FIG. 4 or FIG. 8.
• steps 403a, or step 803a or step 806a For example, for transmitting device or Alice 300A corresponds to step 403a, or step 803a or step 806a.
• the receiving device it corresponds to step 403b, or step 803b or 806b.
• the device 100 may perform, e.g., an advantage distillation technique on the local sequence of symbols and refine it.
• the general concept of the AD is that even though Eve may have a significant amount of information about the key signals compared to the mutual information between Alice and Bob, Alice and Bob’s mutual information may be amplified by a procedure where Alice and Bob select portions of the signals that are of good quality for further generation of a final key. For example, the symbols which are represented by those signals to be retained and they further drop the symbols which are represented by the bad quality signals.
• Refining the local sequence of signal may reduce relatively Eve’s knowledge about the retained key signals compared to Alice and Bob’s mutual information, and thus more final key bits may be generated in some situations, in particular at long distances.
• the device 100 is the transmitting device (Alice) and the remote device 110 is the receiving device (Bob).
• Alice and Bob perform the CV advantage distillation (at 403 a and 403b) and all the retained signals are collected (at 404a and 404b) together at Alice’s and Bob’s sides. Alice and Bob further apply a forward error correction code to correct the differences between their retained data.
• the data for Bob may be considered to be correct and at 405b, Bob computes a syndrome of his data using a parity-check matrix of the forward error correction code. He sends the syndrome to Alice, and at 405 a Alice uses it to correct the errors in her data according to the forward error correction code. Now, Alice and Bob have the same string. At 406a and 406b, they run privacy amplification on their own copies of the string to arrive at the final secret key.
• FIG. 5 shows a flowchart of a method 500 for performing an information reconciliation including retaining/dr opping signals based on computing a syndrome of signals and comparing the syndrome.
• the device 100 is the transmitting device (Alice) and the remote device 110 is the receiving device (Bob).
• Alice and Bob select seven signals (e.g., at 502a and 502b, they agree on multiple (seven) signals).
• Alice and Bob map (at 503a and 503b) the selected seven signals to seven bits, and then at 504a and 504b, they compute a syndrome from the bits using a parity-check matrix (e.g., in the language of error correcting code).
• a parity-check matrix e.g., in the language of error correcting code.
• Alice computes the syndrome based on Eq. 4:
• 505a and 505b they compare their syndromes over a channel. If their syndromes are not the same, the signals at positions of 1, 5, 6, 10, 15, 20, and 37 are dropped. However, if their syndromes are the same, Alice and Bob retain one or more of the above signals, for example, they retain the signal at position 5.
• the steps shown in the dotted box 500A corresponds to the step“Run CV advantage distillation on all pairs” in FIG. 4 or FIG. 8.
• the steps shown in the dotted box 500A corresponds to the step“Run CV advantage distillation on all pairs” in FIG. 4 or FIG. 8.
• For example, for transmitting device or Alice 500A corresponds to step 403a, or step 803a or step 806a.
• FIG. 7a shows a flowchart of a method 700-a for performing an information reconciliation including selecting two signals, retaining/dropping signals based on determining a relative characteristic and comparing the relative characteristic.
• the device 100 is the transmitting device (Alice) and the remote device 110 is the receiving device (Bob).
• Alice and Bob perform a procedure similar to that of the embodiment of FIG. 3, the difference being that the characteristic of the two signals are computed without mapping to binary data as in the embodiment of FIG. 3.
• the steps shown in the dotted box 700A corresponds to the step“Run CV advantage distillation on all pairs/sets” in FIG. 4 or FIG. 8.
• the steps shown in the dotted box 700A corresponds to the step“Run CV advantage distillation on all pairs/sets” in FIG. 4 or FIG. 8.
• For example, for transmitting device or Alice 700A corresponds to step 403a, or step 803a or step 806a.
• the receiving device it corresponds to step 403b, or step 803b or 806b.
• FIG. 6 shows a flowchart of a method 600 for performing an information reconciliation including selecting multiple signals, retaining/dropping signals based on determining a relative characteristic and comparing the relative characteristic.
• the device 100 is the transmitting device (Alice) and the remote device 110 is the receiving device (Bob).
• FIG. 6 is similar to the embodiment of FIG. 7a except that in the embodiment of FIG. 6 multiple signals are used to compute a characteristic instead of two signals.
• Alice and Bob perform a procedure similar to that of the embodiment of FIG. 5, the difference being that the characteristic of the multiple signals are computed without mapping to binary data as in the embodiment of FIG. 5.
• the steps shown in the dotted box 600A corresponds to the step“Run CV advantage distillation on all pairs/sets” in FIG. 4 or FIG. 8.
• the steps shown in the dotted box 600A corresponds to the step“Run CV advantage distillation on all pairs/sets” in FIG. 4 or FIG. 8.
• For example, for transmitting device or Alice 600A corresponds to step 403a, or step 803a or step 806a.
• the receiving device it corresponds to step 403b, or step 803b or 806b.
• the characteristic calculator and the characteristic comparison may be designed to suit the QKD information symbols.
• each signal may be represented as a complex number where the real (imaginary) part corresponds to the in-phase (quadrature) component.
• arg(x) is argument of x (which essentially returns the angle)
• conj(x) is the complex conjugate of x (which essentially negates the phase).
• they define a threshold and when the measure of dissimilarity is below the predefined threshold, they retain at least one of the signals. However, when the measure of dissimilarity is above the predefined threshold, they drop at least one of the selected signals. For example, they define a threshold below which the difference in the characteristic values are considered close enough. If
• the steps shown in the dotted box 700B corresponds to the step“Run CV advantage distillation on all pairs” in FIG. 4 or FIG. 8.
• the steps shown in the dotted box 700B corresponds to the step“Run CV advantage distillation on all pairs” in FIG. 4 or FIG. 8.
• For example, for transmitting device or Alice 700B corresponds to step 403a, or step 803a or step 806a.
• the receiving device it corresponds to step 403b, or step 803b or 806b.
• FIG. 8 shows a flowchart of a method 800 for performing an information reconciliation including running multiple CV advantage distillation procedures. Without limiting the present disclosure, in the method 800, it is assumed that the device 100 is the transmitting device (Alice) and the remote device 110 is the receiving device (Bob).
• Alice and Bob run twice (once at 803a, 803b and a second time at 806a, 806b) the CV advantage distillation procedure.
• the retained signals after the first run at 803 a, 803b are further divided into pairs/sets. Furthermore, each pair/set are processed again with the CV advantage distillation which correspond to the steps in the dotted boxes 300A of FIG.3, 500A of FIG.5, 600A of FIG. 6, 700A of FIG.7a or 700B of FIG. 7b. Afterwards, the retained signals of this step are collected for forward error correction at 808a, 808b and privacy amplification at 809a, 809b. Note that, the two stages of CV advantage distillation do not have to be the same.
• FIG. 9 shows a method 900 according to an embodiment of the invention for performing information reconciliation in a CV-QKD system 1, the method 900 comprising refining a local sequence of symbols 101 by performing the following steps.
• the method 900 may be carried out by the device 100 (and/or the device 110), as described above.
• the method 900 comprises a step 901 of determining a measure of dissimilarity between a local characteristic 103 and a remote characteristic 113, the local characteristic 103 being a characteristic of two or more symbols 102 selected from the local sequence of symbols 101, the remote characteristic 113 being a characteristic of two or more symbols selected from a remote sequence of symbols.
• the method 900 further comprises a step 902 of retaining at least one of the selected symbols in the local sequence 101 when the measure of dissimilarity is below a predefined threshold.
• the method 900 further comprises a step 903 of dropping at least one of the selected symbols from the local sequence 101 when the measure of dissimilarity is above the predefined threshold.

Landscapes

• Engineering & Computer Science (AREA)
• Physics & Mathematics (AREA)
• Electromagnetism (AREA)
• Theoretical Computer Science (AREA)
• Computer Security & Cryptography (AREA)
• Computer Networks & Wireless Communication (AREA)
• Signal Processing (AREA)
• Optical Communication System (AREA)
• Selective Calling Equipment (AREA)
• Mobile Radio Communication Systems (AREA)

Priority Applications (3)

Applications Claiming Priority (1)

Publications (1)

Family

ID=66625180

Family Applications (1)

Country Status (3)

Families Citing this family (1)

Family Cites Families (4)

• 2019
  • 2019-05-16 EP EP19725338.8A patent/EP3970312A1/en active Pending
  • 2019-05-16 WO PCT/EP2019/062672 patent/WO2020228961A1/en active Application Filing
  • 2019-05-16 CN CN201980089440.XA patent/CN113302874B/zh active Active

Non-Patent Citations (3)

Also Published As

Similar Documents

Legal Events