Expand this Topic clickable element to expand a topic
Skip to content
Optica Publishing Group

Ultrafast quantum key distribution using fully parallelized quantum channels

Open Access Open Access

Abstract

The field of quantum information processing offers secure communication protected by the laws of quantum mechanics and is on the verge of finding wider application for the information transfer of sensitive data. To improve cost-efficiency, extensive research is being carried out on the various components required for high data throughput using quantum key distribution (QKD). Aiming for an application-oriented solution, we report the realization of a multichannel QKD system for plug-and-play high-bandwidth secure communication at telecom wavelengths. We designed a rack-sized multichannel superconducting nanowire single photon detector (SNSPD) system, as well as a highly parallelized time-correlated single photon counting (TCSPC) unit. Our system is linked to an FPGA-controlled QKD evaluation setup for continuous operation, allowing us to achieve high secret key rates using a coherent-one-way protocol.

© 2023 Optica Publishing Group under the terms of the Optica Open Access Publishing Agreement

1. Introduction

Since secure communication becomes increasingly important for today's society, advanced encryption technology is required. In particular recent advances in the field of quantum computing put classical encryption approaches, such as the RSA public-key cryptosystem, at risk [1,2]. As a consequence, the field of quantum cryptography has become the fastest-growing area in information science, following different candidates for quantum key distribution (QKD) protocols [3,4]. Depending on the chosen QKD protocol, the required components need to fulfill different criteria for practical implementations. Yet a common bottleneck for all QKD implementations results from the imperfections of single photon detector [5]. Scalability, cost-efficiency, and overall performance for single photon detectors have been difficult to reconcile thus for. However, superconducting nanowire single photon detectors (SNSPDs), which achieve near unity efficiency [6,7], up to GHz count rates [8] and single digit picosecond jitter [9], excellently fulfill the requirements for use in the field of quantum information [10], especially for applications using longer wavelengths in the near-infrared (NIR) that are used for optical communication networks.

Independently from the detector technology, effective readout electronics are required to scale up in performance or bandwidth, respectively, especially if time-bin encoding is used on multiple channels. With modern time-correlated single photon counting (TCSPC) units based on time-to-digital converters (TDCs), dead times as short as 650 ps with picosecond timing resolution can be achieved for multiple inputs [11]. While TCSPC systems are typically used for basic fluorescence lifetime measurements that employ hardware histogramming for data reduction, time-bin encoding requires live access to each detected photon's individual arrival time. To handle the resulting high digital data rates, such systems must employ advanced data bus technologies to stream the tag data in real time to a host PC.

QKD systems benefit substantially from highly parallelized single photon detection. When combined with the one-time-pad (OTP) approach, provable information-theoretic secure communication becomes possible [12]. Importantly, a large number of detectors can improve performance tremendously, e.g., by utilizing multiplexing schemes. As in classical communication, multiplexing can be used to increase the capacity per optical link.

By making use of the inherent scalability of advanced SNSPDs and modern TCSPC electronics for high bandwidth QKD, we designed a highly parallel architecture for multiplexing with up to 64 channels. To handle the resulting data rates in real-time, we furthermore designed a new generation of time tagging electronics that can deliver their data streams not only to a host PC but also to an external FPGA through high-speed serial links capable of handling a total photon rate of up to 1.6 GHz.

Our SNSPD and TCSPC technology was then utilized to implement the coherent one-way (COW) QKD protocol. The COW protocol, introduced by Gisin et al. in 2004 [12], belongs to the distributed phase reference protocols and thus is based on time-phase encoding [13]. To benefit from a large number of detectors for increasing performance, multiple QKD channels were parallelized using wavelength division multiplexing (WDM). In a straightforward implementation, each QKD receiver would contain an interferometer to measure in the phase basis. To decrease the complexity and cost of the QKD system, a simplified receiver design was developed and implemented, where only one interferometer is needed on the receiver side without the need for additional phase correction. Each QKD channel uses two SNSPD channels, and the evaluation of a QKD transmission is performed in real-time on the external FPGA.

2. Multichannel implementations for QKD

2.1 COW protocol with WDM for highly parallelized QKD

In the COW protocol, the sender (“Alice”) uses a laser and an intensity modulator for creating three different symbols in the time domain. Each symbol consists of two time bins. The resulting three symbols are the “0” and “1” symbols, where one pulse is in the early (respectively late) time-bin, and the “decoy” symbol, where both time-bins contain a pulse (see Fig. 1). Before transmitting the stream of symbols to the receiver (“Bob”), they are attenuated below single-photon level. At Bob's setup, the symbols are measured either in the time basis or in the phase basis by triggering on the SNSPD's rising edge with the multichannel TCSPC unit. In the time basis, the arrival time of the incoming photons is measured to distinguish between “0” and “1” symbols. In the phase basis, a delay line interferometer (DLI) with a delay matching the distance between two successive pulses (or half a symbol) is used to measure the “visibility” V of the photon states. The visibility depends on the phase between two successive pulses. An attack would decrease the coherence between those pulses, thus decreasing V. Assuming a collective two-pulse attack, as described in [12], the so-called secret key fraction r in the infinite-key-length limit is

$$\textrm{r} = 1 - \textrm{h}(\textrm{Q} )- \textrm{Q} - ({1 - \textrm{Q}} )\textrm{h}({1 + \mathrm{\Delta }} )$$
with
$$\mathrm{\Delta } = ({2V - 1} ){e^{ - \mathrm{\mu}}} - 2\sqrt {V({1 - V} )} \sqrt {1 - {e^{ - 2\mathrm{\mu}}}} , $$
and
$$h(p )= \, - p\,{log _2}(p )- ({1 - p} ){log _2}({1 - p} )$$
where Q is the quantum bit error rate (QBER) in the time basis, and µ is the mean photon number of a pulse. The secret key rate S can then be calculated from r and the sifted key rate R to be S = rR.

 figure: Fig. 1.

Fig. 1. Schematic arrangement of the QKD setup components with the QKD sender unit Alice and the QKD receiver unit named Bob. The QKD sender employs a wavelength multiplexing scheme, using multiple DFB lasers as light sources combined in a polarization-maintaining (PMF) DWDM unit. The combined signals are modified by an optical intensity modulator (Oclaro SD40), and the total intensity is reduced down to single-photon level using an optical attenuator. The receiver unit Bob splits the signal to measure time and phase basis and divides the different channels according to ITU before they are detected using SNSPDs.

Download Full Size | PDF

In our work, the above-described COW protocol was modified to transmit multiple QKD signals simultaneously by employing WDM. The implemented design for a simplified WDM QKD system is shown in Fig. 1. On Alice's side, multiple continuous wave (CW) distributed feedback (DFB) lasers – commonly used for wavelength-division multiplexing in classical communication – were used to create multiple QKD signals with wavelengths in the C-band around 1550 nm. The wavelengths were chosen approximately according to the WDM wavelength grid. The intensity of the CW signals was modulated with a Mach-Zehnder modulator (MZM), creating the desired pulse sequences. For the presented proof-of-principle implementation, all QKD signals were modulated with the same MZM and thus with the same repeating pattern of sent QKD symbols. In a real-world implementation, the sending pattern of each channel should be independent, which would require n MZMs that are all modulated independently with different random symbol patterns. The modulated signal is then multiplexed and sent to Bob.

To decrease the complexity and cost of the QKD system, a simplified receiver design was chosen and implemented, where the different QKD channels share components, as will be elaborated in the following. First, the incoming signal is split by a 10-dB fiber coupler, 90% for the time basis and 10% for the phase basis.

A straightforward approach for multiplexing multiple QKD channels based on time-phase coding would be to use one DLI on the receiver side per quantum communication channel. Thus, multiplexing multiple quantum channels would result in many DLIs. One approach to reducing the number of DLIs would be to apply the so-called “colorless” interferometric technique [14], where only one DLI on the receiving side for all quantum channels is needed. However, a drawback of this technique is a wavelength dependency on the DLI performance. Thus, this approach requires precise tuning of the phase of each QKD channel with respect to the DLI, resulting in the need for at least n – 1 additional phase modulator(s) on the sender side.

Here, we demonstrate that a single DLI on the receiver side is sufficient for multiple quantum communication channels following a different technique. Instead of using phase modulators for phase stabilization, wavelength tuning of the deployed commercial off-the-shelf DFB Lasers was used. The tuning resolution, stability, and range of the DFB lasers allow for maintaining high interference contrasts that enable reliable QKD transmission.

With this technique, the DLI can be inserted in the signal path before de-multiplexing, such that only one DLI is necessary for evaluating the phase basis. For the time basis, the signal is directly multiplexed and forwarded to the SNSPDs. The disadvantage of employing two de-multiplexers is vastly outweighed by the economization of DLIs.

2.2 Single-photon detector system

The detection of single photons is still one of the major challenges of today's quantum technologies and is addressed by different detection approaches based on photomultiplier tubes (PMTs), single photon avalance diodes (SPADs), transition edge sensors (TESs) and the SNSPD. If highest performance is required, SNSPDs offer superior performance which is beneficial for demanding applications such as long-range QKD. On the downside, they are expensive and challenging to scale and thus are rarely used in commercial implementations [1517].

Addressing the previously mentioned technological challenges, here we developed a compact detector system based on waveguide-integrated superconducting nanowire single-photon detectors (WI-SNSPDs) with up to 64 channels, which is depicted in Fig. 2(b) and (c). The integration of SNSPDs on chip allows for pre-selection from a much larger number of nanowires fabricated from a 4.4 nm thick film of superconducting NbTiN using electron beam lithography. Following pre-characterization, waveguides were routed such that the photonic input ports were connected to preselected nanowires of similar characteristics to avoid varying detection properties and maintain a high yield. The waveguide input ports intended for fiber-to-chip coupling, arranged in a 2D grid, are equipped with 3D polymer couplers made by direct laser writing [18,19]. The coupler matrix is later positioned below the facet of a 2D-fiber array (see Fig. 3). Using polymer couplers allows for broadband light coupling, achieving a high system detection efficiency (SDE) over a broad wavelength regime [20]. The packaging order begins with electrically interfacing the detector chip via wire bonds to a printed circuit board and then attaching the fiber array above the detector chip. In the final step, the resulting module is mounted inside a rack-sized cryostat cooled by an air-cooled closed-cycle He-4 system. The small form factor system includes a custom hybrid cryogenic-room-temperature pre-amplification chain that allows for biasing and reading out the different channels individually and continuously operating the detector module without latching. The system achieved SDEs from 20% to 60% in an initial study. On average, SDE of 40% for up to 37 channels was found. The detectors showed count rates of up to 20 MHz with timing precisions below 120 ps (51 ps r.m.s.) and dark count rates (DCR) below 150 Hz at 3.6 K base temperature [21]. A comprehensive analysis of the packaging method and an in-depth study of the achieved performance characteristics of the detector system can be found in [22]. After evaluating the system characteristics, the system was shipped, integrated into the QKD experimental setup, and built up as depicted in Fig. 2(a).

 figure: Fig. 2.

Fig. 2. (a) 64 channel QKD receiver setup including bias electronics for amplifiers and SNSPDs, temperature control system, multichannel TCSPC unit, cryogenic SPSND unit and the WDM unit for de-multiplexing along with Fiber polarization controllers. (b) Front view of the SNSPD unit with LSH/APC connectors for the optical input and SMP connectors for the electrical signal output. (c) Back view of the SNSPD unit with feedthroughs for the optical fiber array, access openings for the vacuum pump system and electrical connectors to bias SNSPD and amplifier circuitry.

Download Full Size | PDF

 figure: Fig. 3.

Fig. 3. Schematic of a 2D-fiber array above a photonic circuit connected to WI-SNSPDs as realized in the 64-channel detector system. The fiber cores (grey, transparent) are aligned above polymer coupling structures (glossy) that are connected via waveguides (blue) to SNSPDs (red) and electrically interfaced by electrodes (gold). Note that a different scale was chosen to illustrate the different details.

Download Full Size | PDF

The system is designed to operate up to 64 detection channels in parallel. However, during the integration into the QKD experiment setup, the configuration was reduced to 32 channels due to limitations of the cooling system. The cause for the observed instabilities could be identified as the changed laboratory operation environment that reduced the cooling power and resulted in an increased base temperature of 3.8 K with a constant drift towards higher temperatures. Due to the observed drift of the cooling system, the number of detection channels had to be further reduced to 22 to maintain detection performance within the required specification.

2.3 Time tagging system with external FPGA interface

For the detector readout with high throughput time tagging, we developed a scalable architecture with up to 64 independent but synchronized channels. The original concept of time tagging TCSPC builds on a modification of classic TCSPC electronics permitting just start-stop measurements and immediate histograms. For the first time-tagging instruments, the start-stop timing circuitry was used as previously, providing the required picosecond time resolution for TCSPC. However, to obtain complete information about the temporal sequence of photon arrivals, the events were stored as separate data sets. In addition, a coarser timing was performed on each photon event with respect to the start of the experiment [23], which is referred to as time-tagged time-resolved (TTTR) data collection or more generically today, just “time tagging”. The TTTR concept avoids redundancy in the data stream and loss of information. As a result, virtually all algorithms and methods for analyzing photon dynamics over different time scales can be implemented.

The high-resolution global arrival time tagging method is extensively used in life sciences [24] and quantum optics [2527], where second-order correlation measurements are required to quantify single-photon emitters. For a single-photon state, g(2)(0) should be zero, and recent solid-state sources come very close to this value [25,28]. These correlation measurements also lie at the heart of experiments in fundamental quantum mechanics [29], e.g., the ability to extract even higher-order correlations from photon arrival times is routinely exploited. Ideally, such correlation measurements are done on independent timing channels such that dead time effects can be eliminated by cross-correlating the detector signals [30]. In quantum communication, the signal-to-noise ratio can be improved drastically by identifying and removing photons from background processes in the time tag analysis [31].

Similarly, time tagging is a routine tool in research on QKD protocols and systems [32,33]. Our new implementation of a time tagging system for the task at hand conceptually builds on earlier work where the number of channels was still limited to 16 and the digital time resolution was only 80 ps [11]. In order to meet the goals for the QKD system described here, it was necessary to extend the number of channels to 64, which was achieved by a modular design employing multiple FPGA modules, each handling a row of 8 timing channels. The modules are fully synchronized so that the overall system behaves like a monolithic solution, delivering a single data stream with the events from all channels arriving in their correct temporal order. This has great benefits in the real-time processing of the data. In addition, the FPGA-based TDCs were significantly improved to achieve a digital resolution of 5 ps, maintaining the very short dead time of only 650 ps.

In addition to the 64 regular timing channels, the system provides a common synchronization channel. This channel serves as a timing reference in classic histogramming measurements and the so-called T3 mode, which is explained further below. The sync channel provides the same resolution and dead time as the regular timing channels and may be used as an additional detector channel if no common sync is required. In order to support high sync rates, e.g., from a fast laser, the sync channel provides a programmable divider permitting sync rates as high as 1.2 GHz.

Furthermore, in addition to the high-resolution timing inputs, the TCSPC electronics provide four inputs for TTL signals that are captured at a lower resolution and inserted in the data stream exactly like regular timing events. These low-resolution signals can serve as markers for different schemes of secondary synchronization, e.g., representing spatial information of scanning devices or control events in a QKD system.

As in our previous systems, a central crystal clock ensures that all timing inputs have a common time base. Optionally, the clock may also be fed in as an industry standard 10 MHz signal from an external source such as an atomic clock or a GPS receiver. The same standard clock signal is also available as an output so that other devices can be daisy-chained. Similarly, the new time tagger provides a White Rabbit interface, allowing long-distance remote synchronization over Gbit Ethernet fiber links that may also carry regular TCP/IP traffic. It was previously shown that the White Rabbit protocol could achieve a synchronization precision of a few tens of picoseconds [34]. Recently we also demonstrated that our implementation is interoperable with commercial White Rabbit Ethernet switches and that the same level of precision can be achieved across switched networks of various topologies [35]. Both the synchronization via 10 MHz from GPS and that via White Rabbit are of great value in QKD scenarios. While GPS has the benefit of wireless transmission, White Rabbit has the benefit of substantially higher synchronization precision and the convenient simultaneous transport of data. With the latter, it should even be possible to employ wavelength multiplexing so that the secret QKD channel could use the same fiber as the public TCP/IP channel.

The data acquisition schemes of the new time tagging system follow proven concepts [11,30,36]. Apart from classic histogramming, the system provides two time-tagging modes, T2 and T3 modes, which differ in their handling of sync events. The T2 mode registers signal inputs equally for all input ports, whether the signal comes from a connected photon detector or contains a sync signal. The divider can be bypassed when the sync input is used for a detector. For all registered events, which in T2 mode are recorded and handled equally, a 32-bit record containing the information about the channel number and the arrival time after the start of the measurement with a resolution of 5 ps is generated. To achieve continuous operation, even when the number of bits reserved for the time tags is exceeded, an overflow record is inserted into the data stream, and continuous processing of the data is thereby possible for any desired period.

For each channel, the timing records from the TDCs are stored in separate front end FiFo buffers, which are fast enough to accept records at the maximum speed of the TDCs of 1.53 GHz. Only if the space of up to 2048 records in the FiFo runs out are events dropped, which will be notified to the host computer by a corresponding flag. An additional, considerably larger FiFo buffer, in which the temporally sorted T2 records from all channels are queued, can store up to 268,435,456 event records and is continuously read via a USB 3.1 Gen 1 interface by the host PC. The FiFo input can cover bursts of a much higher rate and allows to maintain the data integrity if the average data rate to the host is not exceeded for a long time. In the case of such a FiFo overrun, the measurement is aborted. Nevertheless, sustained average rates of 88 Mcps (shared by all input channels) were achieved with a recent host system (Windows 10 Intel Core i7 7740X @4.3 GHz).

The T3 mode is conceptually similar to the TCSPC histogramming mode. It is typically used when the sync channel is needed for an excitation source of a high repetition rate. Frequently used mode-locked laser systems with tens of MHz sync rate would overrun the FiFo buffer very quickly if processed in T2 mode. In T3 mode, only the timing records but not the actual sync events are forwarded. The timing records in T3 mode contain a coarse time tag derived from the counted sync pulses and a high-resolution time difference of the start-stop measurement between the sync and the photon event. The data records are held in a 32-bit format, including information on the channel number.

If the sync count exceeds what the limited number of bits can hold, an overflow record is inserted, allowing unlimited measurement times as in T2 mode. The covered time span of the high-resolution start-stop measurements depends on the chosen resolution R for the time bins of 5 ps to 41.9 µs. With a width of 15 bits for the start-stop record, the resulting time span covers a period of 32768 × R, corresponding to 163.84 ns at the highest resolution and 1372 ms at the lowest resolution. Events of even higher time delay than this time span are not recognized by the system, just as for the classical histogramming mode that is similarly limited by the number of time bins. The T3 mode records are read by the host system from the same FiFo as for the T2 mode, achieving burst buffering and similar maximum average count rates for every individual channel. In contrast to T2 mode, the bus is not loaded with transfers of sync events.

The USB interface provides good performance and flexibility for many use cases. However, its bandwidth becomes limiting when targeting very high count rates in setups using all 64 channels, as in the QKD application. Furthermore, the host computer must keep up with the generated data, which can be challenging when running complex real-time data processing algorithms. In order to address this issue, an external FPGA Interface (EFI) was developed. It uses two or more high-speed serial links (6 Gbits/s each) to transfer data to an external FPGA, where fast parallel data processing and I/O can be performed with virtually unlimited flexibility. Custom logic can be written in VHDL, Verilog or any other language supported by Xilinx Vivado, it only needs to be connected to a set of high-level data stream interfaces. The EFI can deliver raw timing data or pre-processed T2 or T3 mode data. Custom data generated by the external FPGA can be transmitted back to the time tagger unit and retrieved through a loopback interface through the USB interface. Deep customization of the gateware IP is supported, as all required sources for the external FPGA are made openly available.

The EFI's most convenient mode of operation is equivalent to T2 or T3 mode over USB, only with higher bandwidth. It uses two physical serial links aggregated as one 12 Gbits/s logical link over which data is streamed in T2 or T3 format, with records of all (up to 64) channels temporally ordered. To achieve this temporal ordering, the data of all timing modules is passed through the main unit for sorting and aggregation.

The fastest mode of operation of the EFI is the T2 direct mode (T2DM), where each of the four time tagger modules (16 channels each) delivers its data directly via two serial links (6 Gbits/s each) to the external FPGA. Using T2DM, it is possible to process more than 1.6 G events/s using all 64 + 1 channels. It also reduces the latency between measurement and availability in the external FPGA by 80% compared to the regular T2/T3 streams. The downside is that the data is not temporally ordered in this case and must be sorted in the external FPGA if their temporal relation across the individual timing modules matters. The T2DM streams are based on the semantics of the T2 mode. Depending on the different EFI modes, the system can detect up to 200.000.000 event/s as listed in Table 1.

Tables Icon

Table 1. Performance figures of the different EFI modes

2.4 Real-time QKD evaluation on FPGA

To evaluate the QKD transmission, a test pattern with a random but repeating pattern was modulated with the MZM. The symbols consist of two time bins with a total length of 800 ps, which are sent with a symbol clock rate of 1.25 GHz. The transmitted QKD test pattern consists of 96 symbols, where the symbols “0” and “1” occur 43 times each and the Decoy symbols 10 times to roughly match the 10-dB fiber-coupler used as the receiver's basis choice. The symbols are randomly distributed within the 96-symbol sequence. The evaluation was performed in real-time on the previously mentioned external FPGA (here, a Digilent Genesys 2 Kintex-7 FPGA development board). The evaluation was implemented in FPGA logic (not in a softcore). The data was accumulated over a one-second interval. The accumulated data was then evaluated during the following time interval, parallel to accumulating data for the next interval. Note that the evaluation took only around 20 msec of processing time, which allows for additional or more advanced processing if needed.

The evaluation was performed by comparing either the known sending pattern (for the time basis) or the consequential interference pattern (for the phase basis) with the pattern received by Bob. For that purpose, the incoming signal was measured in T3 mode. Then, the sender transmitted the clock signal and clicked with every repetition of the sending pattern.

The detection signals were sorted by the time slot to build a histogram, which was then compared to the data or interference pattern. By counting and processing those events that agreed or disagreed with the sending- or interference pattern, the sifted key rate, Quantum Bit Error Rate (QBER) and visibility were calculated. Since the relative shift between Alice's sent pattern and Bob's received pattern varies with the transmission distance, the evaluation was repeated for all possible shifts. Then, the smallest QBER and highest visibility correspond to the correct shift and thus yield the correct results.

The secret key rate was then calculated offline based on these measurement results. Note that detections within the first and last 40 ps of every 400-ps time bin were discarded and ignored in the evaluation. This measure served as a filter to only process the most unambiguous photon clicks, thus decreasing QBER and increasing visibility at the cost of only a slight decline in the sifted key rate. As a result, both the secret key rate and the range of the QKD transmission increased.

3. Experimental results

3.1 Time tagger performance tests

The new time tagging system was tested in various scenarios to verify functionality and timing accuracy. Even though the digital TDC resolution is fixed at 5 ps, a timing uncertainty (jitter) due to noise is always present, which is the case even for digital signals because of the finite slope of the signal transitions. In order to test this quantity for the prototype design, the following test was performed. A test generator (CG635, Stanford Research Systems) delivered pulses of 10 MHz repetition rate with rise/fall times of 370 ps (10 to 90%). The steep transitions ensure that the time measurement results are only insignificantly influenced by noise, as shown by earlier measurements on TDCs with substantially higher resolution and precision [37]. This signal was fanned out through a reflection-free splitter so that five identical signals were obtained. These were fed to the sync input and four input channels of the device under test. The device was then operated in histogramming mode, recording the time differences between sync and the respective input channel. The result is shown in Fig. 4.

 figure: Fig. 4.

Fig. 4. Constant delay time difference histograms for four exemplary channels versus sync (sharp peaks at about 15, 25, 35 and 45 ns) and result of an exemplary DNL measurement (flat blue line at the top) of the new time tagger.

Download Full Size | PDF

Each peak at 15, 25, 35, and 45 ns represents the histogram obtained for one channel. Using the software adjustable offset of each channel, the 10 ns spacings between the peaks were set arbitrarily for a clear view. A numerical analysis of the distributions shows that the timing jitter is typically 101 ps (43 ps r.m.s.). It should be noted that this is the overall error, including the sync channel and the respective detector channel. The single channel measurement jitter would correspond to 101 ps / √2 or about 70 ps (30 ps r.m.s.).

The next important key characteristic is the differential nonlinearity (DNL), which is a measure of the systematic error of the bin widths of the TDCs. For a quantification measurement of the DNL, the correlation of two different pulse generators, one as sync reference with a frequency of 10 Mhz (Staford Research System, CG635), and one as independent signal source with a 1 MHz pulse train and period dithering of 8% (Dallas Semiconductor, DS1090), were used. The expected start-stop histogram should therefore show uniform counts for the different time bins, only deviated by the statistical or systematical (DNL) error.

To keep the statistical error minimum, the experiment was run until a total of 106 counts was reached (compare Fig. 4). Analysis of the measurement attests a r.m.s. deviation below 2.5% peak-to-peak, averaging at 0.3%. The achieved performance of the TDCs is by orders of magnitude lower than other standard designs for TDCs that often show DNL errors of up to 100%.

3.2 QDK transmission results

For investigating the system performance in a QKD application, the multichannel SNSPD unit and the multichannel time tagger unit were combined with the COW-QKD setup. Between Alice's and Bob's setup, an optical attenuator was used to experimentally simulate the transmission losses of standard glass fibers to evaluate the long-range QKD capabilities. The basic level for the attenuation was set to a value according to the desired average number of photons per pulse of $\mu \le 0.1$ for all channels to ensure a single-photon level intensity. For a back-to-back transmission, no further attenuation was added and sifted key rate, QBER, visibility and secret key rate were measured and tracked for a period of 35 minutes (Fig. 5). For the most part, the QKD system shows consistent performance with secret key rates between 0.6 to 3.2 Mbit\s. As seen in Fig. 5, some minor impairment is caused by a slow drift of the interferometer phase, which is not actively stabilized. However, since this is only one common parameter for all QKD channels, it could easily be stabilized automatically. The differences in the achieved key rates are mainly caused by the efficiency differences of the SNSPD. For two QKD channels, one of the SNSPDs of the two channels suffered from the increasing temperature of the cryogenic system inhibiting reliable QKD transmission. Therefore, only the results of 9 QKD channels were evaluated.

 figure: Fig. 5.

Fig. 5. QKD transmission results of a back-to-back measurement (average number of photons per pulse set to $\mu \le 0.1$) for 9 QKD channels. The sifted key rate (top left), secret key rate (top right), visibility (bottom left) and QBER (bottom right) are shown for each wavelength channel for a 35-minute continuous transmission.

Download Full Size | PDF

To evaluate the long-range capabilities of the QKD system, additional dampening was added to simulate the losses induced by optical fibers. The system achieves secret key rates starting from 13.2 Mbit\s for all channels without additional loss and can maintain operation for attenuation of up to 26.6 dB with a secret key rate of 3.8 kbit\s (Fig. 6), corresponding to the losses of a 130-km-long standard single-mode fiber.

 figure: Fig. 6.

Fig. 6. The secret key rates were averaged for over 1 minute for each attenuation in the detection channel (dashed colored lines). The total secret key rate of all channels (solid black line) declines from 13.2 Mbit\s without additional attenuation to 3.82 kbit\s at 26.6 dB attenuation. The interferometric visibility starts to deteriorate at 10 dB attenuation and falls below 75 % at 16.6 dB for most channels, causing the respective QKD channel loss of function.

Download Full Size | PDF

The different QKD channels should show very similar long-range QKD capabilities since the dark count rate, the main limiting factor for this performance aspect, was measured between 100 to 150 Hz for all detection channels before any QKD measurement was carried out. However, some detectors’ DCRs began deteriorating due to increasing temperature. As a result, the window of DCRs spanned from 0.1 kHz to 10 kHz. Due to the increasing proportion of false events in the phase basis with increasing attenuation, the visibility begins to decline. The phase basis’ high sensitivity towards dark counts is caused by the two orders of magnitude lower event rate in the phase basis, which, in turn, is due to the 10% splitting ratio towards the DLI and the lower fraction of decoy symbols (10 out of 96) in the pattern sequence. Therefore, critical SNRs are reached much faster for channels with a higher DCR, and thus, in comparison, their visibility already declines for lower attenuations. Consequently, the secret fraction quickly approaches zero due to the high impact of the visibility [see Eq. (2) above]. For example, at 26.6 dB attenuation, one QKD channel still achieved a visibility above 90% and thus reached a secret key rate of 3.8 kbit\s.

4. Conclusion

The focus of this work was to implement scalable solutions for the different parts of a COW-QKD system with multiple channels. First, a QKD setup was built based on the COW protocol utilizing WDM to demonstrate QKD on up to 40 wavelength channels in parallel. Secondly, a mobile air-cooled cryogenic single photon detection system offering up to 64 channels was developed for the detection of single photons. In a first configuration, 37 single photon counting channels satisfied the requirements for ultrafast COW-QKD. Secondly, to sense and time tag the signals of up to 64 detectors, a new scalable TCSPC system with 64 independent but synchronized channels was developed and thoroughly characterized. The TCSPC unit can register up to 1.6 Giga event/s with a timing jitter of 30 ps. To evaluate the extremely high data rates at once, the system features a high-bandwidth serial link interface that was later used to process the time bins of a QKD transmission with an FPGA evaluation board. The final QKD experiment combined the novel multichannel approaches in a single rack structure. Due to unexpected thermal limits in the cooling system of the detector unit, successful QKD transmission was carried out on 9 wavelength channels utilizing 18 single photon counting channels with a total maximum back-to-back secret key rate of 13.2 Mbit\s or 3.82 kbit\s for 26.6 dB attenuation.

Funding

HORIZON EUROPE European Research Council (724707); Bundesministerium für Bildung und Forschung (PHOQUANT, QSAMIS, RECONNAITRE, SINPHOSS); Bundesministerium für Bildung und Forschung (13N14953); Studienstiftung des Deutschen Volkes.

Disclosures

The authors declare no conflicts of interest.

Data availability

The data that support the plots are available from the corresponding authors upon reasonable request.

References

1. M. Sharma, V. Choudhary, R. S. Bhatia, S. Malik, A. Raina, and H. Khandelwal, “Leveraging the power of quantum computing for breaking RSA encryption,” Cyber-Physical Systems 7(2), 73–92 (2021). [CrossRef]  

2. R. Rahim, “A Review on Cryptography Protocol for Securing Data,” J. Phys.: Conf. Ser. 1381(1), 012041 (2019). [CrossRef]  

3. S. Pirandola, U. L. Andersen, L. Banchi, M. Berta, D. Bunandar, R. Colbeck, D. Englund, T. Gehring, C. Lupo, C. Ottaviani, J. L. Pereira, M. Razavi, J. Shamsul Shaari, M. Tomamichel, V. C. Usenko, G. Vallone, P. Villoresi, and P. Wallden, “Advances in quantum cryptography,” Adv. Opt. Photonics 12(4), 1012 (2020). [CrossRef]  

4. C. H. Bennett, F. Bessette, G. Brassard, L. Salvail, and J. Smolin, “Experimental quantum cryptography,” J. Cryptology 5(1), 3–28 (1992). [CrossRef]  

5. D. Stucki, N. Brunner, N. Gisin, V. Scarani, and H. Zbinden, “Fast and simple one-way quantum key distribution,” Appl. Phys. Lett. 87(19), 194108 (2005). [CrossRef]  

6. F. Marsili, V. B. Verma, J. A. Stern, S. Harrington, A. E. Lita, T. Gerrits, I. Vayshenker, B. Baek, M. D. Shaw, R. P. Mirin, and S. W. Nam, “Detecting single infrared photons with 93% system efficiency,” Nat. Photonics 7(3), 210–214 (2013). [CrossRef]  

7. D. V. Reddy, R. R. Nerem, S. W. Nam, R. P. Mirin, and V. B. Verma, “Superconducting nanowire single-photon detectors with 98% system detection efficiency at 1550 nm,” Optica 7(12), 1649 (2020). [CrossRef]  

8. J. Münzberg, A. Vetter, F. Beutel, W. Hartmann, S. Ferrari, W. H. P. Pernice, and C. Rockstuhl, “Superconducting nanowire single-photon detector implemented in a 2D photonic crystal cavity,” Optica 5(5), 658 (2018). [CrossRef]  

9. B. Korzh, Q.-Y. Zhao, J. P. Allmaras, S. Frasca, T. M. Autry, E. A. Bersin, A. D. Beyer, R. M. Briggs, B. Bumble, M. Colangelo, G. M. Crouch, A. E. Dane, T. Gerrits, A. E. Lita, F. Marsili, G. Moody, C. Peña, E. Ramirez, J. D. Rezac, N. Sinclair, M. J. Stevens, A. E. Velasco, V. B. Verma, E. E. Wollman, S. Xie, D. Zhu, P. D. Hale, M. Spiropulu, K. L. Silverman, R. P. Mirin, S. W. Nam, A. G. Kozorezov, M. D. Shaw, and K. K. Berggren, “Demonstration of sub-3 ps temporal resolution with a superconducting nanowire single-photon detector,” Nat. Photonics 14(4), 250–255 (2020). [CrossRef]  

10. L. You, “Superconducting nanowire single-photon detectors for quantum information,” Nanophotonics 9(9), 2673–2692 (2020). [CrossRef]  

11. M. Wahl, T. Röhlicke, S. Kulisch, S. Rohilla, B. Krämer, and A. C. Hocke, “Photon arrival time tagging with many channels, sub-nanosecond deadtime, very high throughput, and fiber optic remote synchronization,” Rev. Sci. Instrum. 91(1), 013108 (2020). [CrossRef]  

12. C. E. Shannon, “Communication Theory of Secrecy Systems,” Bell Syst. Tech. J. 28(4), 656–715 (1949). [CrossRef]  

13. N. Gisin, G. Ribordy, H. Zbinden, D. Stucki, N. Brunner, and V. Scarani, “Towards practical and fast Quantum Cryptography,” (2004).

14. A. Tanaka, A. Tomita, and A. Tajima, “Colourless interferometric technique for large capacity quantum key distribution systems by use of wavelength division multiplexing,” in European Conference on Optical Communication, ECOC (2009).

15. E. Diamanti, H.-K. Lo, B. Qi, and Z. Yuan, “Practical challenges in quantum key distribution,” npj Quantum Inf 2(1), 16025 (2016). [CrossRef]  

16. S. Slussarenko and G. J. Pryde, “Photonic quantum information processing: A concise review,” Appl. Phys. Rev. 6(4), 041303 (2019). [CrossRef]  

17. J. L. O’Brien, A. Furusawa, and J. Vučković, “Photonic quantum technologies,” Nat. Photonics 3(12), 687–695 (2009). [CrossRef]  

18. H. Gehring, M. Blaicher, W. Hartmann, P. Varytis, K. Busch, M. Wegener, and W. H. P. Pernice, “Low-loss fiber-to-chip couplers with ultrawide optical bandwidth,” APL Photonics 4(1), 010801 (2019). [CrossRef]  

19. H. Gehring, A. Eich, C. Schuck, and W. H. P. Pernice, “Broadband out-of-plane coupling at visible wavelengths,” Opt. Lett. 44(20), 5089 (2019). [CrossRef]  

20. M. A. Wolff, F. Beutel, J. Schütte, H. Gehring, M. Häußler, W. Pernice, and C. Schuck, “Broadband waveguide-integrated superconducting single-photon detectors with high system detection efficiency,” Appl. Phys. Lett. 118(15), 154004 (2021). [CrossRef]  

21. R. Terhaar, M. Häußler, H. Gehring, M. Wolff, F. Beutel, N. Walter, W. Hartmann, M. Tillmann, M. Wahl, T. Röhlicke, A. Bülter, D. Wernicke, N. Perlot, J. Rödiger, C. Schuck, and W. Pernice, “Multi-channel waveguide-integrated superconducting nanowire single-photon detector system for ultrafast quantum key distribution,” in Quantum Sensing and Nano Electronics and Photonics XVIII, M. Razeghi, G. A. Khodaparast, and M. S. Vitiello, eds. (SPIE, 2022), p. 66.

22. M. Häußler, R. Terhaar, M. A. Wolff, H. Gehring, F. Beutel, W. Hartmann, N. Walter, M. Tillmann, M. Ahangarianabhari, M. Wahl, T. Röhlicke, H.-J. Rahn, W. H. P. Pernice, and C. Schuck, “Scaling waveguide-integrated superconducting nanowire single-photon detector solutions to large numbers of independent optical channels,” Review of Scientific Instruments , 94, 013103 (2023). [CrossRef]  

23. M. Wahl, R. Erdmann, K. Lauritsen, and H.-J. Rahn, “Hardware solution for continuous time-resolved burst detection of single molecules in flow,” in Systems and Technologies for Clinical Diagnostics and Drug Discovery, G. E. Cohn, ed. (SPIE, 1998), Vol. 3259, pp. 173–178.

24. P. Kapusta, M. Wahl, and R. Erdmann, Advanced Photon Counting, Springer Series on Fluorescence (Springer International Publishing, 2015), Vol. 15.

25. P. Senellart, G. Solomon, and A. White, “High-performance semiconductor quantum-dot single-photon sources,” Nat. Nanotechnol. 12(11), 1026–1039 (2017). [CrossRef]  

26. S. Krapick, H. Herrmann, V. Quiring, B. Brecht, H. Suche, and C. Silberhorn, “An efficient integrated two-color source for heralded single photons,” New J. Phys. 15(3), 033010 (2013). [CrossRef]  

27. M. D. Eisaman, J. Fan, A. Migdall, and S. V. Polyakov, “Invited Review Article: Single-photon sources and detectors,” Rev. Sci. Instrum. 82(7), 071101 (2011). [CrossRef]  

28. N. Somaschi, V. Giesz, L. de Santis, J. C. Loredo, M. P. Almeida, G. Hornecker, S. L. Portalupi, T. Grange, C. Antón, J. Demory, C. Gómez, I. Sagnes, N. D. Lanzillotti-Kimura, A. Lemaítre, A. Auffeves, A. G. White, L. Lanco, and P. Senellart, “Near-optimal single-photon sources in the solid state,” Nat. Photonics 10(5), 340–345 (2016). [CrossRef]  

29. L. K. Shalm, D. R. Hamel, Z. Yan, C. Simon, K. J. Resch, and T. Jennewein, “Three-photon energy–time entanglement,” Nat. Phys. 9(1), 19–22 (2013). [CrossRef]  

30. M. Wahl, H.-J. Rahn, I. Gregor, R. Erdmann, and J. Enderlein, “Dead-time optimized time-correlated photon counting instrument with synchronized, independent timing channels,” Rev. Sci. Instrum. 78(3), 033106 (2007). [CrossRef]  

31. T. Kupko, M. von Helversen, L. Rickert, J.-H. Schulze, A. Strittmatter, M. Gschrey, S. Rodt, S. Reitzenstein, and T. Heindel, “Tools for the performance optimization of single-photon quantum key distribution,” npj Quantum Inf 6(1), 29 (2020). [CrossRef]  

32. D. Lowndes, S. Frick, A. Hart, and J. Rarity, “A low cost, short range quantum key distribution system,” EPJ Quantum Technol. 8(1), 15 (2021). [CrossRef]  

33. I. Vagniluca, B. da Lio, D. Rusca, D. Cozzolino, Y. Ding, H. Zbinden, A. Zavatta, L. K. Oxenløwe, and D. Bacco, “Efficient Time-Bin Encoding for Practical High-Dimensional Quantum Key Distribution,” Phys. Rev. Appl. 14(1), 014051 (2020). [CrossRef]  

34. M. Lipinski, E. van der Bij, J. Serrano, T. Wlostowski, G. Daniluk, A. Wujek, M. Rizzi, and D. Lampridis, “White Rabbit Applications and Enhancements,” in 2018 IEEE International Symposium on Precision Clock Synchronization for Measurement, Control, and Communication (ISPCS) (IEEE, 2018), Vol. 2018-Septe, pp. 1–7.

35. Tino Röhlicke, Maximilian Diedrich, and Michael Wahl, “Experimental Set-up,” https://sevensols.com/download/picoquant-seven-solutions-application-note.

36. M. Wahl, T. Röhlicke, H.-J. Rahn, R. Erdmann, G. Kell, A. Ahlrichs, M. Kernbach, A. W. Schell, and O. Benson, “Integrated multichannel photon timing instrument with very short dead time and high throughput,” Rev. Sci. Instrum. 84(4), 043102 (2013). [CrossRef]  

37. M. Wahl, H.-J. Rahn, T. Röhlicke, G. Kell, D. Nettels, F. Hillger, B. Schuler, and R. Erdmann, “Scalable time-correlated photon counting system with multiple independent input channels,” Rev. Sci. Instrum. 79(12), 123113 (2008). [CrossRef]  

Data availability

The data that support the plots are available from the corresponding authors upon reasonable request.

Cited By

Optica participates in Crossref's Cited-By Linking service. Citing articles from Optica Publishing Group journals and other participating publishers are listed here.

Alert me when this article is cited.


Figures (6)

Fig. 1.
Fig. 1. Schematic arrangement of the QKD setup components with the QKD sender unit Alice and the QKD receiver unit named Bob. The QKD sender employs a wavelength multiplexing scheme, using multiple DFB lasers as light sources combined in a polarization-maintaining (PMF) DWDM unit. The combined signals are modified by an optical intensity modulator (Oclaro SD40), and the total intensity is reduced down to single-photon level using an optical attenuator. The receiver unit Bob splits the signal to measure time and phase basis and divides the different channels according to ITU before they are detected using SNSPDs.
Fig. 2.
Fig. 2. (a) 64 channel QKD receiver setup including bias electronics for amplifiers and SNSPDs, temperature control system, multichannel TCSPC unit, cryogenic SPSND unit and the WDM unit for de-multiplexing along with Fiber polarization controllers. (b) Front view of the SNSPD unit with LSH/APC connectors for the optical input and SMP connectors for the electrical signal output. (c) Back view of the SNSPD unit with feedthroughs for the optical fiber array, access openings for the vacuum pump system and electrical connectors to bias SNSPD and amplifier circuitry.
Fig. 3.
Fig. 3. Schematic of a 2D-fiber array above a photonic circuit connected to WI-SNSPDs as realized in the 64-channel detector system. The fiber cores (grey, transparent) are aligned above polymer coupling structures (glossy) that are connected via waveguides (blue) to SNSPDs (red) and electrically interfaced by electrodes (gold). Note that a different scale was chosen to illustrate the different details.
Fig. 4.
Fig. 4. Constant delay time difference histograms for four exemplary channels versus sync (sharp peaks at about 15, 25, 35 and 45 ns) and result of an exemplary DNL measurement (flat blue line at the top) of the new time tagger.
Fig. 5.
Fig. 5. QKD transmission results of a back-to-back measurement (average number of photons per pulse set to $\mu \le 0.1$) for 9 QKD channels. The sifted key rate (top left), secret key rate (top right), visibility (bottom left) and QBER (bottom right) are shown for each wavelength channel for a 35-minute continuous transmission.
Fig. 6.
Fig. 6. The secret key rates were averaged for over 1 minute for each attenuation in the detection channel (dashed colored lines). The total secret key rate of all channels (solid black line) declines from 13.2 Mbit\s without additional attenuation to 3.82 kbit\s at 26.6 dB attenuation. The interferometric visibility starts to deteriorate at 10 dB attenuation and falls below 75 % at 16.6 dB for most channels, causing the respective QKD channel loss of function.

Tables (1)

Tables Icon

Table 1. Performance figures of the different EFI modes

Equations (3)

Equations on this page are rendered with MathJax. Learn more.

r = 1 h ( Q ) Q ( 1 Q ) h ( 1 + Δ )
Δ = ( 2 V 1 ) e μ 2 V ( 1 V ) 1 e 2 μ ,
h ( p ) = p l o g 2 ( p ) ( 1 p ) l o g 2 ( 1 p )
Select as filters


Select Topics Cancel
© Copyright 2024 | Optica Publishing Group. All rights reserved, including rights for text and data mining and training of artificial technologies or similar technologies.