9512.net

甜梦文库

甜梦文库

当前位置：首页 >> >> # Security of Quantum Key Distribution with Entangled Qutrits

Security of Quantum Key Distribution with entangled Qutrits.

4 ˙ Thomas Durt1, Nicolas J. Cerf2, Nicolas Gisin3 and M. Zukowski

arXiv:quant-ph/0207057v2 4 Jan 2003

1

Toegepaste Natuurkunde en Fotonica, Theoretische Natuurkunde, Vrije Universiteit Brussel, Pleinlaan 2, 1050 Brussels, Belgium 2 Ecole Polytechnique, CP 165, Universit? e Libre de Bruxelles, 1050 Brussels, Belgium 3 Group of Applied Physics - Optique, Universit? e de Gen` eve, 20 rue de l’Ecole de M? edecine, Gen` eve 4, Switzerland, 4 Instytut Fizyki Teoretycznej i Astro?zyki Uniwersytet, Gda? nski, PL-80-952 Gda? nsk, Poland

Abstract The study of quantum cryptography and quantum entanglement have traditionally been based on two-level quantum systems (qubits). In this paper, we consider a generalization of Ekert’s entanglement-based quantum cryptographic protocol where qubits are replaced by three-level systems (qutrits). In order to investigate the security against the optimal individual attack, we derive the information gained by a potential eavesdropper applying a cloning-based attack. We exhibit the explicit form of this cloner, which is distinct from the previously known cloners, and conclude that the protocol is more robust than the ones based on entangled qubits as well as unentangled qutrits.

PACS numbers: 03.65.Ud, 03.67.Dd, 89.70.+c

1

Introduction

Quantum cryptography aims at distributing a random key in such a way that the presence of an eavesdropper who monitors the quantum communication is revealed via the induced disturbances in the transmission of the key (for a review, see e.g. [1]). Practically, in order to realize a cryptographic protocol, it is enough that the key signal is encoded into quantum states that belong to incompatible bases, as in the original protocol of Bennett and Brassard known as BB84[2]. In 1991, Ekert suggested to base the security of quantum cryptography on properties of the maximally entangled two-qubit state or EPR state[3]. The key signals are derived from 1

measurements when they lead to perfect correlations (same base used by the two parties), and otherwise data for a Bell [4] or Clauser-Horne-Shimony-Holt (CHSH) [5] inequality test are collected and used to reveal the presence of an eavesdropper. Recently, it was shown that the violation of Bell-type inequalities is more pronounced in the case of entangled qutrits (i.e., 3dimensional systems) than entangled qubits [6, 7, 8]. Also, several qutrit-based cryptographic protocols were shown to be more secure than their qubit-based counterparts[9, 10, 11, 12]. It appears therefore very tempting to investigate the performances of a generalization of Ekert’s protocol relying on a pair of entangled qutrits [13] instead of qubits. ?From the experimental viewpoint, there are several ways of physically realizing qutrits using photons. The ?rst possibility is to utilize multiport-beamsplitters, and more speci?cally those that split the incoming single light beam into three [13]. The second one exploits the polarization degree of freedom. However, since this is intrinsically a two-dimensional variable, one needs to use two photons per qutrit [14, 15]. A third possibility, which uses only one photon per qutrit, exploits the spatial angular momentum of photons [16]. Finally, another realization of qutrits, possibly the most straightforward one, exploits time-bins [17]. This approach has already been demonstrated for entangled photons up to eleven dimensions [18]. Thus, exploring an entanglement-based quantum cryptographic protocol that uses qutrits instead of qubits can lead to new applications of quantum informational technology as it lies in the reach of the current state-of-the-art quantum optical techniques. In what follows, we shall analyze the security of this entanglement-based protocol against individual attacks (where the eavesdropper Eve monitors the qutrits separately or incoherently). To this end, we will consider a fairly general class of eavesdropping attacks that are based on (state-dependent) quantum cloning machines[19, 20, 21]. This will yield an upper bound on the acceptable error rate, which is a necessary condition for security against individual attacks, that is, higher error rates cannot permit to establish a secret key using one-way communication. We will show that this maximum acceptable error rate is higher, with this qutrit protocol, than with Ekert’s qubit protocol, and even slightly higher than with a three-dimensional extension of BB84.

2

The four qutrit bases that maximize the violation of local realism

In the protocol Ekert91[3], the four qubit bases chosen by Alice and Bob (the authorized users of the quantum cryptographic channel) are the four bases that maximize the violation of the CHSH inequalities [5]. They consist of two pairs of mutually unbiased bases1 . When representing these four bases on the Bloch sphere, their eight states form a perfect octagon [see Fig.1 (right)]. Similarly, there exists a natural generalization of this set of bases in the case of qutrits [22]. In analogy with the CHSH qubit bases, which belong to a great circle, these four qutrit bases belong to a set of bases parametrized by a phase φ on a generalized equator, which

By de?nition, two orthonormal bases of an N-dimensional Hilbert space are said to be mutually unbiased if the norm of the scalar product between any two vectors belonging each to one of the bases is equal to √1 . N

1

2

we shall call the φ-bases from now on. The expression of the component states of any φ-basis in the computational basis {|0 , |1 , |2 } is |lφ 1 2 ik( 2πl +φ) |k e 3 = √ 3 k=0 2πl 1 2πl 2πl = √ ei( 3 +φ) |1 + cos( + φ)(|0 + |2 ) + sin( + φ)(?i)(|0 ? |2 ) , 3 3 3

(1)

with l = 0, 1, 2. Obviously, these basis vectors form an equilateral triangle on a great circle centered in |1 . When φ varies, these triangles turn around |1 . Note that the state |1 plays a privileged role compared with the states |0 and |2 . The invariance under a cyclic permutation of the basis vectors of the computational basis is indeed broken in the φ-bases because it can ′ πl happen that k = k ′ mod 3 while eikφ = eik φ (k, k ′ = 0, 1, 2) when φ = 23 (l=0,1,2). It has been shown that when local observers measure the correlations exhibited by the maximally entangled state 1 | φ+ (2) 3 = √ (| 0 ? | 0 + | 1 ? | 1 + | 2 ? | 2 ) 3

π · i (with i = 0, 1, 2, 3), then the degree of nonin the four φ-bases obtained when φi = 2 12 classicality that characterizes the correlations is higher than the degree of non-classicality allowed by Cirelson’s theorem [23] for qubits, and also higher than for a large class of other qutrit bases. This can be shown by estimating the resistance of the non-classicality of correlations against noise admixture [6], or by considering generalizations of Bell inequalities to a situation in which trichotomic observables are considered [7, 8] instead of dichotomic ones. Note that the states making up the four qutrit bases which maximize the violation of local realism (we shall call them the optimal bases from now on) form a perfect dodecagon, which generalizes the octagon encountered in the qubit case.

Finally, it is worth noting that the state that optimizes the violation of local realism when considering the four optimal bases is not the maximally entangled state, but the state |φmv = √ √ ( 11 ? 3) 1 √ (|0 ? |0 + γ |1 ? |1 + |2 ? |2 ) where γ = and n = 2 + γ 2 [24]. This state is n 2 not invariant under a cyclic permutation of the basis vectors of the computational basis. We noted already that this invariance is broken by the φ-bases. We shall not discuss here the implementation of this state in quantum cryptography.

3

Three-dimensional entanglement-based (3DEB) protocol

Let us now assume that the source emits the maximally entangled qutrit state |φ+ 3 and that Alice and Bob share this entangled pair and perform measurements along one of the four optimal bases described above. It is easy to check that |φ+ 3 may be rewritten as 1 ? ? ? | φ+ 3 = √ (| 0 φ ? | 0 φ + | 1 φ ? | 1 φ + | 2 φ ? | 2 φ , 3 (3)

3

where

1 2 ?ik( 2πl +φ) ? 3 |k e |lφ =√ 3 k=0

(l = 0, 1, 2).

(4)

Therefore, when Alice performs a measurement in the φ basis {|lφ } and Bob in the conjugate ? basis {|lφ }, their results are 100% correlated. In addition, the four optimal bases de?ned above can be shown to be 100% correlated two by two. This can be understood by noting that phase conjugation corresponds to a symmetry that interchanges the bases of the dodecagon. It is therefore natural to consider the following generalization of the Ekert91 protocol for qutrits, which we shall denote the 3-dimensional entangled-based (3DEB) protocol[25]. In this protocol, Alice and Bob share the entangled state |φ+ 3 and choose each their measurement basis at random among one of the four bases maximizing violation of local realism (according to the statistical distribution that they consider to be optimal). Because of the existence of 100% correlations between measurements in local bases of the same φi , a fraction of the measurement outcomes can be used in order to establish a deterministic cryptographic key. The rest of the data, for the cases when the left and right phases are di?erent, can be used in order to detect the presence of an eavesdropper for example with the of Bell inequalities of Ref. [8] or with the computer algorithm of Ref. [6]. Let us now study the security of this protocol against optimal individual attacks.

4

Individual attacks and optimal qutrit cloning machines

We use a general class of cloning transformations as de?ned in [19, 20, 21]. If Alice sends the input state |ψ belonging to an N -dimensional space (we will consider N = 3 later on), the resulting joint state of the two clones (noted A and B ) and of the cloning machine (noted C ) is |ψ → where Um,n = and |Bm,n = N ?1/2

N ?1 m,n=0

am,n Um,n |ψ A |Bm,?n

N ?1 k =0

B,C

=

N ?1 m,n=0

bm,n Um,n |ψ

B |Bm,?n A,C ,

(5)

e2πi(kn/N ) |k + m k |,

N ?1 k =0

(6)

e2πi(kn/N ) |k |k + m ,

(7)

with 0 ≤ m, n ≤ N ? 1. Um,n is an “error” operator: it shifts the state by m units (modulo N ) in the computational basis, and multiplies it by a phase so as to shift its Fourier transform by n units (modulo N ). The equation (7) de?nes the N 2 generalized Bell states for a pair of N-dimensional systems. Tracing over systems B and C (or A and C ) yields the ?nal states of clone A (or clone B ): if the input state is |ψ , the clones A and B are in a mixture of the states |ψm,n = Um,n |ψ with respective weights pm,n and qm,n : ρA =

N ?1 m,n=0

pm,n |ψm,n ψm,n |, 4

ρB =

N ?1 m,n=0

qm,n |ψm,n ψm,n |

(8)

In addition, the weight functions of the two clones (pm,n and qm,n ) are related by pm,n = |am,n |2 , qm,n = |bm,n |2 , (9)

where am,n and bm,n are two (complex) amplitude functions that are dual under a Fourier transform [20, 21]: 1 N ?1 2πi nx?my N ax,y . (10) e bm,n = N x,y=0 Let us now analyze the possibility of using such a cloning procedure in the eavesdropping attack on the two entangled qutrit protocol. Therefore we put N = 3. Assume that Eve clones the state of the qutrit that is sent to Bob (represented as the ket |ψ in Eq. 5), and resends the imperfect clone (labeled by A) to Bob while she conserves the other one (labeled by B ). Then, in analogy with [11], Eve will measure her clone in the same basis as Bob (the φ basis) and her ancilla (labeled by C ) in the conjugate basis (the φ? basis). For deriving Eve’s information, we need ?rst to rewrite the cloning transformation in these bases. By straightforward computations we get, when φ is equal to zero, that:

2

|Bm,n = 3?1/2 where, by de?nition,

l=0

im( eim( 3 (l?n)+φ) |lφ |(l ? n)? φ = e

2π

?2π n + φ) 3

??n ,m? , |B φ φ

(11)

?m ,n? = 3?1/2 |B φ φ and Um,n =

k =0 2

2π

2 k =0

e2πi(kn/3) |kφ |(k + m)? φ ,

2π

(12)

?n , ?m , e?im( 3 (k+n)+φ) |(k + n)φ kφ | = e?im( 3 n+φ) U φ φ

(13)

where the tilde subscript refers to the new (φ and φ? ) bases. After substitution in Eq. 5, we get:

2 2

|ψ →

m,n=0

am,n Um,n |ψ A |Bm,?n

B,C

=

m,n=0

?m ,n |ψ A |B ?m ,n a ?m,n U φ φ φ φ

B,C ,

(14)

where the new amplitudes are de?ned as a ?n,?m = am,n . We are interested in a cloning machine that has the same e?ect when expressed in the four π optimal bases, i.e. when φi = 2 · i(i = 0, 1, 2, 3). This imposes strong constraints on the 12 amplitudes am,n characterizing the cloner, which must be of the form v x x ? ? (am,n ) = ? y y y ? . z z z

? ?

(15)

It is possible to check that, in analogy with the qubit case [26], such a cloner is phase-covariant, which means that it acts identically on each state of the φ-bases. In particular, the identity (14) can be shown to hold for all values of φ. The reason for this property is that, roughly speaking, if the cloner remains invariant when expressed in several bases, then it means that certain combinations of Bell states possess several Schmidt bi-orthogonal decompositions. It 5

is well-known that when at least two such decompositions exist for a bipartite pure state, then there exist in?nitely many. This explains why requiring the same cloning ?delity in two πj πi , φj = 212 with i, j = 0, 1, 2, 3 and i = j ) implies phase-covariance (i.e., optimal bases (φi = 212 φ arbitrary). A proof of this property is out of the scope of the present paper. Let us now evaluate the ?delity of this phase-covariant cloner for qutrits, along with the information that Bob and Eve obtain about Alice’s state. The ?delity of the ?rst clone (the one that is sent to Bob) when copying a state |ψ can be written, in general, as FA = ψ |ρA |ψ =

N ?1 m,n=0

|am,n |2 | ψ |ψm,n |2 .

(16)

Of course, the same relation holds for the second clone (the one that is kept by Eve) by replacing am,n by bm,n . For the cloning machine de?ned by Eq.(15), it is possible to compute the ?delities when cloning the component states of the ψ -bases by a straightforward but lengthy computation. It can be shown that the ?delity of the ?rst clone does not depend on φ, that is, FA = lφ |ρA |lφ = v 2 + y 2 + z 2 (17)

for all φ. The disturbances DA1 and DA2 of the ?rst clone, de?ned respectively as lφ+ 2π |ρA |lφ+ 2π 3 3 and lφ? 2π |ρA |lφ? 2π yield both x2 + y 2 + z 2 . Making use of Eq. (10), we obtain that, for the 3 3 second clone, the states of the bases used in the cryptographic protocol are all copied with the same ?delity, which is maximum when y = z , and is given by FB = (v 2 + 2x2 + 12y 2 + 8xy + 4vy )/3. (18)

Also, we get the same disturbance for all φ (minimal when y = z ) given by DB1 = DB2 = (v 2 + 2x2 + 3y 2 ? 4xy ? 2vy )/3. We must now ?nd what is the optimal strategy for Eve. In virtue of the phase-covariance and in order to simplify the notations, we shall from now on omit the labels that refer to the particular basis φ in which the measurement is carried out. After substitution in Eq. (5), we get |ψk → 3? 2

2π 1

2 m,l=0

c ?m,k?l |ψk+m A |ψl

B

|ψl+m

C,

(19)

?m,n = y + δn0 ((v ? y )δm0 + (x ? y )(δm1 + δm2 )) so that where c ?m,j = 2 ?m,n ei 3 jn . Now, a n=0 a c ?m,j = (3yδj 0 + (v ? y )δm0 + (x ? y )(δm1 + δm2 )). Therefore, |ψk → 3? 2 {|ψk |ψk+1

1

2 A (3y |ψk B |ψk C

+ (v ? y )

2

l=0

|ψl

B |ψl C )

+ + (20)

A (3y |ψk B |ψk +1 C

+ (x ? y )

l=0 2

|ψl |ψl

B |ψl+1 C )

|ψk?1

A (3y |ψk B |ψk ?1 C

+ (x ? y )

l=0

B |ψl?1 C )}.

After Alice’s (or Bob’s) measurement basis is disclosed, Eve’s optimal strategy can be shown [11] to be the following: ?rst she measures both her copy B and the cloning machine C in 6

the same basis as Bob, the di?erence (modulo 3) of the outcomes simply giving Bob’s error m. Conditionally on Eve’s measured value of m (i.e., conditionally on Bob’s error), the information Eve has on the state |ψ can be expressed as I (A:E |m = 0) = log(3) ? H (v + 2 y )2 (v ? y )2 (v ? y )2 , , 3FA 3FA 3FA 2 2 2(x + 2y ) 2(x ? y ) 2(x ? y )2 I (A:E |m = 0) = log(3) ? H , , , 3(1 ? FA ) 3(1 ? FA ) 3(1 ? FA ) IAE = FA I (A:E |m = 0) + (1 ? FA ) I (A:E |m = 0). Of course, Bob’s information is given by IAB = log(3) ? H FA , 1 ? FA 1 ? FA . , 2 2 (23)

(21)

where FA = v 2 + 2y 2 since we have y = z . On average, we get for Eve’s information (22)

We now use a theorem due to Csisz? ar and K¨ orner [27] which provides a lower bound on the secret key rate, that is, the rate R at which Alice and Bob can generate secret key bits via privacy ampli?cation: if Alice, Bob and Eve share many independent realizations of a probability distribution p(a, b, e), then there exists a protocol that generates a number of key bits per realization satisfying R ≥ max(IAB ? IAE , IAB ? IBE ) (24) In our case, IAE = IBE since Eve knows exactly Bob’s error m. It is therefore su?cient that IAB > IAE in order to establish a secret key with a non-zero rate. If we restrict ourselves to one-way communication on the classical channel, this actually is also a necessary condition. Consequently, the quantum cryptographic protocol above ceases to generate secret key bits precisely at the point where Eve’s information matches Bob’s information.

We thus need to estimate the maximal ?delity FA (or minimal error rate) for which a cloning machine exists such that IAE = IAB . This constrained optimization problem can be solved numerically, giving FA = 0.7753 (25) corresponding to the solution (v, x, y ) = (0.8320, 0.1711, 0.2038). Since x = y , this optimal cloner is therefore distinct from the universal qutrit cloner (which clones all states with the same ?delity). Actually, it is slightly better than the (asymmetric) universal qutrit cloner, which gives a ?delity FA = 0.7733 at the crossing point of Bob’s and Eve’s information curves [11]. This means that the quantum cryptographic protocol where the four mutually unbiased qutrit bases are used (see [9]) is slightly better than the 3DEB protocol as it admits a 0.2% higher error rate (1 ? FA = 22.67% instead of 22.47%). The cloner that we have derived here is an asymmetric version of the so-called two-phasecovariant qutrit cloner that qutrit √ is described in [28, 29] [this symmetric two-phase-covariant ?1/2 iα cloner has a ?delity (5 + 17)/12 ≈ 0, 760]. It copies all states of the form 3 (| 0 + e | 1 + iβ e |2 ) with a ?delity 0.7753 (> 0.7733) for all α and β , while the states of the computational basis {|0 , |1 , |2 } are cloned with a lower ?delity 0.7507 (< 0.7733). Actually, its relation with the symmetric two-phase-covariant cloner is of the same kind as the relation between the asymmetric universal qutrit cloner (of ?delity 0.7733) and the symmetric universal qutrit cloner 3 ). (of ?delity 4 7

5

Conclusions

The Ekert91 protocol and its qutrit extension, the 3DEB protocol which is analyzed in the present paper, involve encryption bases for which the violation of local realism is maximal. If Alice and Bob measure their member of a maximally-entangled qutrit pair in two “conjugate” bases, this gives rise to perfect correlations. After measurement is performed on each member of a sequence of maximally-entangled qutrit pairs, Alice and Bob can reveal on a public channel what were their respective choices of basis and identify which trit was correctly distributed, from which they will make the key. They can use the rest of the data in order to check that it does not admit a local realistic simulation. For instance they can check that their correlations violate some generalized Bell or CHSH inequalities. As the resistance of such a violation against noise is maximal when the maximally-entangled qutrit pair is measured in the optimal qutrit bases discussed here (and is higher than all what can be achieved with qubits), the 3DEB protocol is optimal from the point of view of the survival of non-classical correlations in a noisy environment. Indeed, our results imply that the 3DEB protocol is more robust against optimal incoherent attacks than the Ekert91 qubit protocol. This is because the optimal qubit phase-covariant cloning machine (which clones the optimal qubit bases involved in CHSH with the same ?delity) 1 1 ? 0.8536 [26, 28, 30] than Eq. (25). In other gives a somewhat higher ?delity FA = 2 +√ 8 words, the acceptable error rate, i. e. the error rate 1 ? FA above which the security against incoherent attacks is not ensured, is 22.47% for the 3DEB protocol, while it is only 14.64% for Ekert91. Recently, it has been shown that the violation of a Bell inequality extended √ to qutrits is 3?9 possible, as long as the “visibility” of the two-qutrit interference exceeds Vthr = 6 2 ? 0.6962 [7, 8]. The visibility mentioned above is directly related the threshold fraction of unbiased noise, (1 ? Vthr ), which has to be admixed to the maximally entangled state in order to erase the nonclassical character of the correlations, and therefore is a measure of robustness of such a nonclassicality [6]. This means that the non-existence of a local realistic model of the correlations is guaranteed if the ?delity FA that characterizes the communication channel between Alice and Bob, (detectors included, so 1-FA is the e?ective error rate in the transmission) is larger 2 1 than 3 × 0.6962 + 1 ≈ 0.7974 (instead of 1 +√ ? 0.8536 in the case of qubits [23, 5, 1]). On 3 2 8 the other hand, we have shown here that the 3DEB protocol is secure against a cloning-based individual attack, if FA > 0.7753. Consequently, when a violation of a qutrit Bell inequality [7, 8] occurs, the security of the 3DEB protocol against individual attacks is automatically guaranteed. Therefore, the violation of Bell inequalities is a su?cient condition for security, as it implies that Bob’s ?delity is higher than the security threshold. Remarkably, for qubits, the corresponding su?cient condition (FA > 0.8536) is also necessary [1] (this is apparently the case for qubits only). In addition, the violation of Bell inequalities guarantees that the 3DEB protocol is secure against so-called Trojan horse attacks during which the eavesdropper would control the whole transmission line and replace the signal by a fake, predetermined local-variable dependent, signal that mimics the quantum correlations. Such an attack can be thwarted when the signal is encrypted in the the optimal bases provided that the noise level is low enough (including now also the ine?ciency of the detectors) so that no such local realistic simulation of the 8

signal does exist, and provided that Alice and Bob perform their respective choices of bases independently and quickly enough [31] so that their measurements are independent spatiallyseparated events. Note that all the protocols in which mutually unbiased bases are involved but with no entanglement (such as BB84[2], the 6-state qubit protocol[32, 30], or the 12-state qutrit protocol[9]) admit a local realistic model, so that they are not secure against Trojan horse attacks. Finally, it is interesting to compare the performances of the 3DEB protocol to those of the 3-dimensional extension of BB84. The cloner that must be used in the latter case, where two mutually unbiased qutrit bases are used, has a ?delity of 0.7887 [11], thus a bit higher than the ?delity of the cloner analyzed here, see Eq. (25). Therefore, the 3DEB protocol also gives a slightly higher acceptable error rate than the 3-dimensional extension of BB84 (22.47% instead of 21.13%). This, together with the robustness with respect to Trojan horse attacks, clearly establishes the advantage of entanglement-based protocols with respect to BB84-like protocols. In summary, we have derived a qutrit cloning machine that clones equally well the four optimal qutrit bases (those which maximize the violation of local realism), so it gives the optimal individual attack in the 3DEB protocol introduced here. The acceptable error rate of the 3DEB protocol turns out to be 22.47%, which is higher than that of Ekert91 qubit protocol (as well as that of the 3-dimensional extension of BB84). Our analysis thus con?rms a seemingly general property that qutrit schemes for quantum key distribution are more robust against noise than the corresponding qubit schemes. Note: After completion of this work, an independent paper by D. Kaszlikowski et al. has appeared[33], which shows that, if Eve acts on one member of a maximally entangled qutrit pair, then her information attains Alice and Bob’s mutual information at a visibility of 0.6629. In our 2 ×0.6629+ 1 ? 0.7753, notation, this means that the ?delity at the information crossing point is 3 3 which exactly coincides with our Eq. (25). Nevertheless the two approaches are di?erent in the following sense: in our approach, we assume that Eve clones the state of the qutrit that is sent to Bob according to Eq. (5) and then we impose that the cloning ?delity is identical for all the states of the φ bases in order to ?x the parameters am,n . Instead, in [33], a general transformation is postulated from the beginning, and extra-constraints are imposed. We have also checked that our optimal cloning machine satis?es these constraints, so the two approcahes are compatible. Our approach being constructive, we obtain the explicit form of the cloner, which is not the case in the approach of [33]. Moreover, although the optimal cloning machines coincide in both approaches, it can be shown that our approach allows us to build new and more general solutions that satis?es the constraints considered in [33].

Acknowledgment

We are grateful to J. Roland for carrying out the numerical calculations. We thank the European Science Foundation for ?nancial support. T.D. is a Postdoctoral Fellow of the Fonds voor Wetenschappelijke Onderzoek, Vlaanderen. N.J.C. and N.G. acknowledge funding by the ˙ acknowledges the European Union under the project EQUIP (IST-FET programme). M.Z. KBN grant No. 5 P03B 088 20.

9

References

[1] N. Gisin, G. Ribordy, W. Tittel, and H. Zbinden, Rev. Mod. Phys. 74, 145 (2002). [2] C. H. Bennett, and G. Brassard, in Proceedings of IEEE International Conference on Computers, Systems and Signal Processing, Bangalore, India (IEEE, New York, 1984) p. 175. [3] A. K. Ekert, Phys. Rev. Lett. 67, 661 (1991). [4] J. S. Bell, Physics 1, 195 (1965). [5] J. F. Clauser, M. A. Horne, A. Shimony, and R.A. Holt, Phys. Rev. Lett. 23, 880 (1969). ˙ [6] D. Kaszlikowski, P. Gnacinski, M. Zukowski, W. Miklaszewski, and A. Zeilinger, Phys. Rev. Lett. 85, 4418 (2000). [7] D. Kaszlikowski, L. C. Kwek, Jing-Ling Chen, Marek Zukowski, and C. H. Oh, Phys. Rev. A 65, 032118 (2002) [8] D. Collins, N. Gisin, N. Linden, S. Massar, and S. Popescu, Phys. Rev. Lett. 88, 040404 (2002). [9] H. Bechmann-Pasquinucci and A. Peres, Phys. Rev. Lett. 85, 3313 (2000). [10] M. Bourennane, A. Karlsson, and G. Bj¨ ork, Phys. Rev. A 64, 012306 (2001). [11] N. J. Cerf, M. Bourennane, A. Karlsson, and N. Gisin, Phys. Rev. Lett. 88, 127902 (2002); M. Bourennane, A. Karlsson, G. Bj¨ ork, N. Gisin, and N. J. Cerf, e-print quant-ph/0106049, J. Phys. A (2002), in press. [12] D. Bruss and C. Macchiavello, Phys. Rev. Lett. 88, 127901 (2002). ˙ [13] A. Zeilinger, M. Zukowski, M. A. Horne, H. J. Bernstein and D. M. Greenberger, in Fundamental Aspects of Quantum Theory, eds. J. Anandan and J. L. Safko (World Scienti?c, ˙ Singapore, 1993); M. Zukowski, A. Zeilinger, and M. A. Horne, Phys. Rev. A 55, 2564 (1997). [14] J. C. Howell, A. Lamas-Linares, and D. Bouwmeester, Phys. Rev. lett. 88, 030401 (2002). [15] A. V. Burlakov, L. A. Krivitskiy, S. P. Kulik, G. A. Maslennikov, and M. V. Chekhova, e-print quant-ph/0207096. [16] A. Mair, A. Vaziri, G. Weihs, and A. Zeilinger, Nature (London) bf 412, 3123-316 (2001). [17] W. Tittel and G. Weihs, Quantum Information & Computation 1, 3-56 (2001). [18] H. De Riedmatten, I. Marcikic, H. Zbinden, and N. Gisin, e-print quant-ph/0204165, to appear in QIC. [19] N. J. Cerf, Phys. Rev. Lett. 84, 4497 (2000). [20] N. J. Cerf, Acta Phys. Slov. 48, 115 (1998); special issue on quantum information. 10

[21] N. J. Cerf, J. Mod. Opt. 47, 187 (2000); special issue on quantum information. ˙ [22] T. Durt, D. Kaszlikowski, and M. Zukowski, Phys. Rev. A 64, 024101 (2000). [23] B.S. Cirel’son, Lett. Math. Phys. 4, 93 (1980). [24] A. Acin, T. Durt, N. Gisin, and J. I. Latorre, Phys. Rev. A 65, 052325 (2002). ˙ [25] T. Durt, D. Kaszlikowski, and M. Zukowski, private communication (2000). [26] C. A. Fuchs, N. Gisin, R. B. Gri?ths, C.-S. Niu, and A. Peres, Phys. Rev. A 56, 1163 (1997); D. Bruss, M. Cinchetti, G. M. D’Ariano, and C. Macchiavello, Phys. Rev. A 62 012302 (2000). [27] I. Csisz? ar, and J. K¨ orner, IEEE Trans. Inf. Theory 24, 339 (1978). [28] N. J. Cerf, T. Durt, and N. Gisin, J. Mod. Opt. 49, 1355 (2002); special issue on quantum information. [29] G. M. D’Ariano and P. Lo Presti, Phys. Rev. A 64, 042308 (2001). [30] H. Bechmann-Pasquinucci and N. Gisin, Phys. Rev. A 59, 4238 (1999). [31] T. Durt, Phys. Rev. Lett. 86, 1392 (2001). [32] D. Bruss, Phys. Rev. Lett. 81, 3018 (1998). [33] D. Kaszlikowski, K. Chang, D. Kuan Li Oi, L. C. Kwek, C. H. Oh, e-print quant-ph/0206170.

11

赞助商链接

- C++课程设计学生成绩管理 [文档在线提供]
- Practical Evaluation of Security for Quantum Key Distribution
- Security of Quantum Key Distribution with Realistic Devices
- Security of Quantum Key Distribution with Entangled Photons Against Individual Attacks
- The Universal Composable Security of Quantum Key Distribution
- The Security of Practical Quantum Key Distribution
- Security of Quantum Key Distribution with Entangled Photons Against Individual Attacks
- Security of Quantum Key Distribution with Realistic Devices
- Quantum key distribution with bright entangled beams
- Security of the Quantum Key Distribution with Blind Polarization Bases against Impersonatio
- A Proof of the Security of Quantum Key Distribution
- Quantum key distribution with entangled photon sources
- SECURITY AND IMPLEMENTATION OF DIFFERENTIAL PHASE SHIFT QUANTUM KEY DISTRIBUTION SYSTEMS
- Efficient quantum key distribution scheme with nonmaximally entangled states
- Quantum key distribution protocols using entangled state

更多相关文章：
**
量子卫星 ***quantum* satellite

(experiment on high-speed*quantum* *key* *distribution* from space to earth) ...The satellite will create pairs *of* so-called *entangled* photons, beaming one...**
8.17-7.15英语点津热词
**

*quantum* *key* *distribution* from space to earth) ...*entangled* photons, beaming one half *of* each pair...*security* 非现金支付 non-cash payment 移动支付 ...
更多相关标签：

(experiment on high-speed