QKD Network Resource Allocation for Delay-Sensitive Services
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional quantum key distribution (QKD) networks experience significant time delays due to multiple encryption and decryption operations, which are not suitable for delay-sensitive services like high-frequency stock market information and instant messages, as these services require efficient key distribution across long distances.
Innovation Solution
A method for allocating QKD network resources involves constructing a key topology and network structure based on quantum key distributions, determining service sensitivity, and using the K-shortest path algorithm to select paths with fewer relays for delay-sensitive services and optimizing resource allocation for delay-insensitive services, thereby reducing delays and improving resource utilization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Length of stationary object
If quantum key resources are relayed through multiple nodes for long-distance transmission, then the key distribution coverage is extended, but the time delay increases due to multiple encryption and decryption operations
Solution Approach 1:
The system performs preliminary key distribution between adjacent nodes before service requests arrive. Quantum key resources are pre-generated and stored in quantum key pools at each node along the path. When a service request arrives, the system can immediately allocate pre-prepared keys without performing real-time encryption/decryption operations at intermediate nodes, thus eliminating transmission delay while maintaining extended key distribution coverage.
2Device complexity
If a same pre-determined quantum key distribution route is used for all services, then the network management is simplified, but the delay requirements of different services cannot be met
Solution Approach 1:
The system segments the key distribution process into two independent phases: key generation between adjacent nodes and key allocation for services. By separating key generation from key allocation, the system can maintain simple pre-determined physical routes while providing flexible key selection for different service types. The key allocation phase can choose different keys from quantum key pools based on service delay requirements without changing the underlying network structure.
Solution Approach 2:
The system introduces dynamic key allocation based on service characteristics. While the physical network topology remains static and simple to manage, the key allocation is dynamic and adaptive. The system can select different quantum keys from available pools depending on whether services are delay-sensitive or delay-tolerant, providing service adaptability without increasing network management complexity.
3Reliability
If multiple encryption and decryption operations are performed for key relay, then the key distribution security is enhanced, but the processing time increases
Solution Approach 1:
The system extracts the encryption/decryption operations from the key transmission path. Instead of performing multiple encryption and decryption operations at intermediate relay nodes, the system uses pre-distributed quantum keys that are already in the correct form for end-to-end encryption. The intermediate nodes only perform key forwarding and allocation, not cryptographic operations, thus maintaining security while dramatically improving efficiency.
Data Source
AI summary
Disclosed is a method for allocating QKD network resources, which includes the following steps: obtaining a network structure of a QKD network, and constructing a key topology according to distributions condition of quantum key resources in the QKD network; in response to arrival of a service requiring encryption, judging whether the encrypted service is delay sensitive; when the service is delay sensitive, distributing quantum key resources to the service according to the key topology of the QKD network; and when the service is not delay sensitive, distributing quantum key resources to the service according to the network structure of the QKD network. Moreover, the present disclosure also provides a device for allocating QKD network resources and a non-transitory computer-readable storage medium.