Quantum Key Distribution Microservices for Secure Network Initialization

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing QKD networks rely on software-defined networking (SDN) for QaaS, which is monolithic, difficult to develop, implement, and manage, and lacks security measures during initialization, exposing the network to potential threats.

Innovation Solution

A microservices controller establishes quantum connections with virtual quantum connection managers (vQCMs) to manage QKD networks, providing modular and flexible centralized control, secure initialization, and efficient network management through intelligent routing and SKR microservices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Extent of automation

If SDN-based QaaS is implemented, then centralized control is achieved, but the system becomes monolithic and difficult to develop, implement, and manage

Engineering Contradiction:
Improvecentralized controlVSAvoidsystem structure
Core Design Contradiction:
Extent of automationVSDevice complexity

Solution Approach 1:

The patent divides the monolithic SDN controller into multiple independent microservices controllers, each responsible for specific QKD functions. This segmentation allows each controller to be developed, deployed, and managed independently, reducing overall system complexity while maintaining centralized control capabilities through coordinated microservice interactions.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system transitions from a static monolithic controller to a dynamic microservice architecture where controllers can be added, removed, or updated independently. This dynamic structure enables flexible scaling and easier maintenance while preserving centralized control through service orchestration.

Inventive Principle:
Principle #15Dynamics

2Extent of automation

If SDN-based QaaS is implemented, then QKD network control is centralized, but security measures during initialization are lacking

Engineering Contradiction:
Improvecentralized controlVSAvoidsecurity
Core Design Contradiction:
Extent of automationVSReliability

Solution Approach 1:

The patent implements security verification and authentication procedures during the QKD initialization phase before actual key distribution begins. This preliminary security action ensures that only authenticated users and properly configured quantum channels are established, preventing unauthorized access from the outset.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system incorporates continuous monitoring and verification mechanisms that provide feedback on the security status of quantum channels and user authentication. This feedback loop enables real-time detection and response to security threats while maintaining centralized control.

Inventive Principle:
Principle #23Feedback

3Productivity

If multiple users share QKD network infrastructure, then resource utilization improves, but network management complexity increases

Engineering Contradiction:
Improveresource utilizationVSAvoidnetwork management
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent creates universal microservice controllers that can serve multiple users and quantum channels through standardized interfaces and protocols. These controllers perform multiple functions including authentication, key distribution, and channel management, enabling efficient resource sharing across multiple users without proportionally increasing management complexity.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system introduces intermediary microservice layers that mediate between multiple users and the underlying QKD infrastructure. These intermediaries handle user-specific configurations and requirements, allowing multiple users to share infrastructure resources while maintaining individualized control and reducing overall management complexity.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS12375270B2Quantum key distribution networking as a service
Publication Date: 2025.07.29 AT&T INTELLECTUAL PROPERTY I L P
  • US12375270B2 patent drawing
  • US12375270B2 patent drawing
  • US12375270B2 patent drawing

AI summary

The concepts and technologies disclosed herein are directed to quantum key distribution (“QKD”) networking as a service. According to one aspect disclosed herein, a microservices controller can establish a plurality of quantum connections with a plurality of virtual quantum connection managers (“vQCMs”) deployed in association with a set of quantum user nodes (“QUNs”) in a QKD network. The microservices controller can receive a request to initialize the QKD network. The microservices controller can coordinate with the plurality of vQCMs to handle initialization of the QKD network. The microservices controller can receive a QKD service request from a QKD network operator. The microservices controller can invoke a plurality of microservices to handle the QKD service request.