Quantum Key Distribution Network Security Survivability

Abstract

Quantum key distribution network security survivability can be provided by receiving, at a software defined networking controller operating in a control layer of a network, a recommendation from a global analytics service operating in an application layer of the network, the recommendation for replacing a failed communication link in a quantum key distribution layer of the network, the failed communication link being detected by a quantum edge computing device operating in the quantum key distribution layer. The software defined networking controller can generate a command to cause a quantum key distribution resource to perform an action to mitigate impact from the failed communication link. The command can be sent to the quantum key distribution resource and the quantum key distribution resource can perform the action to mitigate the impact from the failed communication link.

1 . A system comprising:
 a processor; and   a memory that stores computer-executable instructions that, when executed by the processor, cause the processor to perform operations comprising
 detecting, at a quantum key distribution layer of a network, a failed communication link in the quantum key distribution layer of the network, wherein the quantum key distribution layer comprises a quantum key distribution resource, 
 receiving, from a software defined networking controller operating in a control layer of the network and at the quantum key distribution resource, a command that causes the quantum key distribution resource to perform an action to mitigate impact from the failed communication link, wherein the software defined networking controller generates the command based on a recommendation from a global analytics service operating in an application layer of the network, wherein the recommendation recommends replacing the failed communication link, and 
 performing, by the quantum key distribution resource, the action to mitigate the impact from the failed communication link. 
   
     
     
         2 . The system of  claim 1 , wherein the quantum key distribution resource comprises a quantum edge computing device, and wherein a closed loop to enable mitigation of the impact from the failed communication link comprises the software defined networking controller, the quantum edge computing device, and the global analytics service. 
     
     
         3 . The system of  claim 1 , wherein the failed communication link comprises a communication link between a first quantum key distribution node and a second quantum key distribution node. 
     
     
         4 . The system of  claim 3 , wherein the quantum key distribution resource comprises a quantum edge computing device, and wherein the action to mitigate the impact from the failed communication link comprises allocating a new communication link between the first quantum key distribution node and the second quantum key distribution node. 
     
     
         5 . The system of  claim 3 , wherein the quantum key distribution resource comprises the first quantum key distribution node, and wherein the action to mitigate the impact from the failed communication link comprises rerouting traffic from the failed communication link to a new communication link between the first quantum key distribution node and the second quantum key distribution node. 
     
     
         6 . The system of  claim 5 , wherein the new communication link comprises a satellite link. 
     
     
         7 . The system of  claim 1 , wherein the recommendation is generated by the global analytics service based on local analysis results generated by a quantum edge computing device, wherein the quantum edge computing device operates at an edge of the quantum key distribution layer of the network and accesses a data set describing failures and security status of quantum key distribution resources of the quantum key distribution layer of the network. 
     
     
         8 . The system of  claim 1 , further comprising:
 a first direct interface between a quantum edge computing device and the software defined networking controller, wherein the quantum key distribution resource comprises the quantum edge computing device; and   a second direct interface between the global analytics service and the software defined networking controller, wherein a closed loop to enable mitigation of the impact from the failed communication link comprises the software defined networking controller, the first direct interface, the quantum edge computing device, the second direct interface, and the global analytics service.   
     
     
         9 . A method comprising:
 detecting, at a quantum key distribution layer of a network, a failed communication link in the quantum key distribution layer of the network, wherein the quantum key distribution layer comprises a quantum key distribution resource;   receiving, from a software defined networking controller operating in a control layer of the network and at the quantum key distribution resource, a command that causes the quantum key distribution resource to perform an action to mitigate impact from the failed communication link, wherein the software defined networking controller generates the command based on a recommendation from a global analytics service operating in an application layer of the network, wherein the recommendation recommends replacing the failed communication link; and   performing, by the quantum key distribution resource, the action to mitigate the impact from the failed communication link.   
     
     
         10 . The method of  claim 9 , wherein the failed communication link comprises a communication link between a first quantum key distribution node and a second quantum key distribution node. 
     
     
         11 . The method of  claim 10 , wherein the quantum key distribution resource comprises a quantum edge computing device, and wherein the action to mitigate the impact from the failed communication link comprises allocating a new communication link between the first quantum key distribution node and the second quantum key distribution node. 
     
     
         12 . The method of  claim 10 , wherein the quantum key distribution resource comprises the first quantum key distribution node, and wherein the action to mitigate the impact from the failed communication link comprises rerouting traffic from the failed communication link to a new communication link between the first quantum key distribution node and the second quantum key distribution node. 
     
     
         13 . The method of  claim 9 , wherein the recommendation is generated by the global analytics service based on local analysis results generated by a quantum edge computing device, wherein the quantum edge computing device operates at an edge of the quantum key distribution layer of the network and accesses a data set describing failures and security status of quantum key distribution resources of the quantum key distribution layer of the network. 
     
     
         14 . The method of  claim 9 , wherein a closed loop to enable mitigation of the impact from the failed communication link comprises a quantum edge computing device, a first interface between the quantum edge computing device and the global analytics service, a second interface between the global analytics service and the software defined networking controller, and a third interface between the software defined networking controller and the quantum edge computing device, wherein the second interface comprises a first direct interface, and wherein the third interface comprises a second direct interface. 
     
     
         15 . The method of  claim 9 , wherein the recommendation is generated by the global analytics service based on local analysis results generated by a quantum edge computing device, wherein the quantum edge computing device operates at an edge of the quantum key distribution layer of the network and accesses a data set describing failures and security status of quantum key distribution resources of the quantum key distribution layer of the network. 
     
     
         16 . A computer storage medium having computer-executable instructions stored thereon that, when executed by a processor, cause the processor to perform operations comprising:
 detecting, at a quantum key distribution layer of a network, a failed communication link in the quantum key distribution layer of the network, wherein the quantum key distribution layer comprises a quantum key distribution resource;   receiving, from a software defined networking controller operating in a control layer of the network and at the quantum key distribution resource, a command that causes the quantum key distribution resource to perform an action to mitigate impact from the failed communication link, wherein the software defined networking controller generates the command based on a recommendation from a global analytics service operating in an application layer of the network, wherein the recommendation recommends replacing the failed communication link; and   performing, by the quantum key distribution resource, the action to mitigate the impact from the failed communication link.   
     
     
         17 . The computer storage medium of  claim 16 , wherein the quantum key distribution resource comprises a quantum edge computing device, and wherein a closed loop to enable mitigation of the impact from the failed communication link comprises the software defined networking controller, the quantum edge computing device, and the global analytics service. 
     
     
         18 . The computer storage medium of  claim 16 , wherein the failed communication link comprises a communication link between a first quantum key distribution node and a second quantum key distribution node, wherein the quantum key distribution resource comprises a quantum edge computing device, and wherein the action to mitigate the impact from the failed communication link comprises allocating a new communication link between the first quantum key distribution node and the second quantum key distribution node. 
     
     
         19 . The computer storage medium of  claim 16 , wherein the failed communication link comprises a communication link between a first quantum key distribution node and a second quantum key distribution node, wherein the quantum key distribution resource comprises the first quantum key distribution node, and wherein the action to mitigate the impact from the failed communication link comprises rerouting traffic from the failed communication link to a new communication link between the first quantum key distribution node and the second quantum key distribution node. 
     
     
         20 . The computer storage medium of  claim 16 , wherein the quantum key distribution resource comprises a quantum edge computing device, and wherein a closed loop to enable mitigation of the impact from the failed communication link comprises the quantum edge computing device, a first interface between the quantum edge computing device and the global analytics service, a second interface between the global analytics service and the software defined networking controller, and a third interface between the software defined networking controller and the quantum edge computing device, wherein the second interface comprises a first direct interface, and wherein the third interface comprises a second direct interface.