Zhu Qingcheng, Yu Xiaosong, Wang Zihao, Zhao Yongli, Nag Avishek, Wang Shuang, Chen Wei, Zhang Jie
Opt Express. 2024 May 6;32(10):18317-18333. doi: 10.1364/OE.516443.
Quantum key distribution (QKD) provides future-proof security for data communications over optical networks. Currently, sophisticated QKD systems are developed and the scale of QKD-secured optical networks (QKD-ONs) becomes larger. Given the complex network conditions and dynamic end-to-end security services in QKD-ONs, autonomic management and control becomes a promising paradigm to support end-to-end quality-of-service (QoS) assurance in an efficient and stable way without requiring human intervention. Hence, to enable and utilize the autonomic functionalities over QKD-ONs for realizing the end-to-end QoS assurance becomes a challenge. This work enhances the software defined networking (SDN) technique to tackle this challenge because SDN can add programmability and flexibility for QKD-ON's management and control. A new architecture of SDN-based QKD-ONs supporting autonomic end-to-end QoS assurance is designed, where a knowledge engine with autonomic control loops is developed in the SDN controller. We present the autonomic end-to-end QoS assurance procedure, and the cross-layer collaborative QoS assurance (CLC-QA) strategy for implementing the autonomic functionalities in the network level over QKD-ONs. We also establish an experimental testbed of SDN-based QKD-ONs supporting autonomic end-to-end QoS assurance, and perform the numerical simulation to verify our proposed approaches. Experimental results demonstrate that our presented approaches can achieve the millisecond-level overall latency of 337 ms and 618 ms, during the first and second autonomic adjustment without human intervention in case of the autonomic QoS protection. Moreover, the CLC-QA strategy is evaluated under different traffic loads by being compared with the baseline strategy without cross-layer collaboration. It can improve 22.5% protection success ratio and save 5.7% average key consumption.
量子密钥分发(QKD)为光网络上的数据通信提供了面向未来的安全性。目前,先进的QKD系统不断发展,QKD安全光网络(QKD-ON)的规模也越来越大。鉴于QKD-ON中复杂的网络条件和动态的端到端安全服务,自主管理和控制成为一种有前景的范式,能够在无需人工干预的情况下,高效稳定地支持端到端服务质量(QoS)保证。因此,在QKD-ON上实现并利用自主功能以实现端到端QoS保证成为一项挑战。这项工作增强了软件定义网络(SDN)技术来应对这一挑战,因为SDN可以为QKD-ON的管理和控制增加可编程性和灵活性。设计了一种基于SDN的支持自主端到端QoS保证的QKD-ON新架构,其中在SDN控制器中开发了一个带有自主控制回路的知识引擎。我们提出了自主端到端QoS保证过程,以及用于在QKD-ON的网络层实现自主功能的跨层协作QoS保证(CLC-QA)策略。我们还建立了一个基于SDN的支持自主端到端QoS保证的QKD-ON实验测试平台,并进行了数值模拟以验证我们提出的方法。实验结果表明,在自主QoS保护的情况下,在无需人工干预的第一次和第二次自主调整期间,我们提出的方法可以实现337毫秒和618毫秒的毫秒级总延迟。此外,通过与无跨层协作的基线策略进行比较,在不同流量负载下对CLC-QA策略进行了评估。它可以提高22.5%的保护成功率,并节省5.7%的平均密钥消耗。