⚛️ quantum physics

Deployment of Entanglement-Based QKD in Financial Infrastructure

This paper demonstrates the practical feasibility of deploying a fully automated, standalone entanglement-based quantum key distribution system within high-security financial infrastructure, successfully generating secure keys over a 22 km fiber link for four months with high uptime and low error rates without requiring external reference signals.

Original authors: Mirela Selimović, Roman Solar, Jonathan Gruner, Sebastian Mair, Mario Wenzl, Thomas Heine, Matej Pivoluska, Rupert Ursin, Sebastian Philipp Neumann

Published 2026-07-14

📖 4 min read🧠 Deep dive

CC BY 4.0

Original authors: Mirela Selimović, Roman Solar, Jonathan Gruner, Sebastian Mair, Mario Wenzl, Thomas Heine, Matej Pivoluska, Rupert Ursin, Sebastian Philipp Neumann

Original paper licensed under CC BY 4.0 (http://creativecommons.org/licenses/by/4.0/). ✨ This is an AI-generated explanation of the paper below. It is not written or endorsed by the authors. For technical accuracy, refer to the original paper. Read full disclaimer

Imagine two high-security bank vaults, Alice and Bob, sitting 22 kilometers apart in Vienna. Usually, to send a secret message between them, they'd rely on math puzzles that are hard for computers to solve. But what if a super-powerful quantum computer showed up and cracked those puzzles instantly? That's the scary future that makes old security methods shaky.

To fix this, the team behind this project tried something wild: they built a "quantum magic trick" to create unbreakable keys. Instead of sending a single secret note, they generated pairs of "entangled" photons—tiny particles of light that are so deeply connected that what happens to one instantly affects the other, no matter the distance. It's like having two magic dice: if you roll a six in Vienna, the other die in the next city immediately shows a six, too. If a sneaky eavesdropper tries to peek at the dice while they're rolling, the magic breaks, and the dice show a mismatch. That's how they know someone is listening.

The Big Test
The researchers didn't just test this in a quiet lab; they plugged it directly into the real, messy fiber-optic cables connecting two actual data centers of a financial institution. They wanted to see if this quantum magic could survive the real world, where cables get bumped, temperatures change, and signals get weak.

Over a period of four months (about 2,800 hours), the system worked like a charm. It successfully generated secure keys at an average speed of 63.8 kb/s. To prove it wasn't just a science experiment, they used these keys to build a secure "VPN tunnel" (a private digital highway) between the two banks. The system was up and running 93.7% of the time. The few times it stopped, it wasn't because the quantum parts broke; it was just because of power outages or network changes in the data center.

How They Kept It Steady
Sending these delicate photons through 22 km of fiber is tricky. The cable acts like a wobbly road; temperature changes and vibrations can twist the light's "polarization" (its orientation), making the magic dice lose their sync. If the dice get out of sync, the error rate goes up.

The team built a smart "autopilot" for the light. They didn't need a special guide laser or an external atomic clock to keep things straight. Instead, the system watched the error rate of the keys. If the error rate (called QBER) crept up to 2%, the autopilot kicked in, twisting the light back into place. This happened automatically, keeping the error rate below 2% for 97.4% of the time. When the system did need to fix the timing between the two distant clocks, it did so with incredible precision, keeping them synchronized to within 300 ps (that's 300 trillionths of a second!).

What They Didn't Need
One of the coolest parts of this setup is what they didn't need. Many quantum systems require extra lasers to guide the signal or super-precise external clocks to stay in sync. This system? It ran entirely on its own. It didn't need those extra helpers. It used the natural timing of the entangled photons themselves to stay coordinated. This makes the system much simpler and easier to scale up for bigger networks.

The Bottom Line
The paper shows that entanglement-based quantum key distribution isn't just a theory for scientists in white coats anymore. It's ready to work in the real world, even in the high-stakes environment of a bank. The system proved it could run for months, handle the bumps and twists of real fiber cables, and keep the keys secure without needing a babysitter. While the team notes that future work will look at mixing these quantum signals with regular internet traffic on the same cables, this experiment proves that the foundation is solid. They successfully turned a quantum concept into a working tool that secured a real financial connection, showing that the future of ultra-secure communication is already here.

Technical Summary: Deployment of Entanglement-Based QKD in Financial Infrastructure

Problem Statement
Modern communication security relies on classical cryptographic schemes (e.g., RSA) vulnerable to future quantum computing capabilities. While Quantum Key Distribution (QKD) offers information-theoretic security based on quantum mechanics, the deployment of entanglement-based QKD (eQKD) in operational, high-security environments remains limited. Integrating such systems into existing metropolitan fiber networks of critical institutions faces significant challenges, including channel losses, environmental perturbations (temperature, mechanical stress), the need for reliable long-term operation, and organizational hurdles. Specifically, maintaining the fidelity of polarization-entangled states over real-world fiber links requires active compensation for polarization drift without relying on external guide lasers or high-precision time references.

Methodology
The authors designed and deployed a fully automated eQKD system connecting two data centers of a financial institution in Vienna over a 22 km dark fiber link with 8 dB loss. The system architecture and operational strategy include:

Quantum Source: A passively stable, alignment-free interferometric module generates polarization-entangled photon pairs in the telecom C-band (centered at 1559.77 nm) via type-0 spontaneous parametric down-conversion (SPDC). The source is pumped by a 779.89 nm laser.
Channel and Detection: One photon is detected locally at the source location (Alice), while the conjugate photon is transmitted to the remote site (Bob). Both sites utilize identical detection modules featuring superconducting nanowire single-photon detectors (SNSPDs) with $\ge$ 70% efficiency and $\sim$ 35 ps timing jitter.
Polarization Control: To counteract random polarization rotations induced by temperature drifts in the fiber, an active in-fiber three-axis polarization controller is deployed at Alice's end. This system operates without external reference signals; instead, it uses the Quantum Bit Error Rate (QBER) as a feedback loop. When QBER exceeds 2%, the controller iteratively adjusts to minimize errors, compensating for the combined polarization drift of both links.
Timing Synchronization: The system utilizes independent, unsynchronized time-tagging units at Alice and Bob. Coincidence events are identified by constructing a delay histogram of time differences. The system achieves sub-300 ps precision without dedicated chromatic dispersion compensation, relying on the high pair generation rate and narrow spectral filtering to resolve coincidence peaks despite temporal broadening.
Classical Post-Processing: The system implements a complete key distillation chain including parameter estimation (PE), error correction (EC) using Low-Density Parity-Check (LDPC) codes, error verification (EV), and privacy amplification (PA). The system adheres to a finite-key security framework (Tomamichel and Leverrier) to estimate secret key lengths.
Integration: Generated secure keys are stored in a Key Management System (KMS) and consumed to establish a Virtual Private Network (VPN) tunnel between the data centers using the SKIP protocol.

Key Results
Over a continuous operation period of four months (2,800 hours), the system demonstrated the following performance metrics:

Key Rate: The system generated secure keys at an average rate of 63.8 kb/s (specifically $63.78 \pm 1.02$ kb/s).
Reliability: The system achieved a 93.7% total up-time. Notably, no downtime was attributed to the quantum optical components; interruptions were solely due to external factors (test power outages and network configuration changes).
Error Rate: Active polarization control maintained the QBER below 2% for 97.4% of the time. When QBER exceeded this threshold, the control algorithm compensated within an average of 4 minutes.
Synchronization: Timing synchronization based on intrinsic temporal correlations of entangled pairs achieved sub-300 ps precision. Clock drift was managed computationally, with re-synchronization events triggered when relative drift reached 500 $\mu$ s.
Security: The system successfully performed error correction and privacy amplification, handing off keys to a KMS and establishing a functional VPN tunnel.

Significance and Claims
The paper claims to demonstrate the practical feasibility of integrating eQKD into operational financial infrastructure. Key contributions include:

Autonomy: The system operates without polarized guide lasers or external high-precision time references, relying instead on the intrinsic correlations of entangled photon pairs and real-time QBER feedback.
Stability: The passively stable source and active polarization control proved robust against environmental perturbations over a four-month period, showing no signs of degradation.
Scalability: The architecture is designed to support multi-user scalability via wavelength division multiplexing (WDM), potentially enabling fully connected networks with up to 10 users.
Operational Maturity: By successfully integrating with a KMS and a standard VPN tunnel, the work establishes a reference for the maturity of eQKD in real-world environments, moving the technology from experimental testbeds toward securing critical communication infrastructure.

The authors conclude that while future work is needed to address the coexistence of quantum and classical channels in shared fiber, the current results validate that entanglement-based QKD is ready for practical deployment in high-security settings.

Technical Summary: Deployment of Entanglement-Based QKD in Financial Infrastructure

More like this