Assessment of practical satellite quantum key distribution architectures for current and near-future missions

TL;DR

This paper reviews satellite quantum key distribution architectures, evaluating their design choices and recommending simple, effective solutions like low-Earth orbit trusted-node systems with decoy-state BB84 for near-future missions.

Contribution

It provides a comprehensive evaluation of SatQKD architectures and identifies optimal, practical configurations for upcoming satellite quantum communication missions.

Findings

Low-Earth orbit trusted-node SatQKD is advisable.

Decoy-state BB84 protocol is most promising for practical SatQKD.

Current and planned missions adopt these recommended architectures.

Abstract

Quantum key distribution (QKD) allows the generation of cryptographic keys beyond the computational hardness paradigm and is befitting for secure data transmission requiring long-term security. The communication distance of fibre-based QKD, however, is limited to a few hundred kilometers due to the exponential scaling of signal attenuation. Satellite QKD (SatQKD) can instead leverage free-space optical links to establish long-range connections and enable global-scale QKD. In this work we review the manifold of design choices that concur to form the set of possible SatQKD architectures. These include the choice of the QKD protocol and its physical implementation, but also the satellite orbit, the optical link direction, and whether or not to use trusted-node relays. The possible SatQKD architectures are then evaluated in terms of key generation throughput, latency and maximum reachable communication distance, but also the system-level security and implementation complexity. Given the technical challenges of realising SatQKD systems it is paramount, for near-future satellite missions, to adhere to the simplest possible architecture that still allows to deliver the QKD service. We thus identify as advisable options the use of low-Earth orbit satellites as trusted nodes for prepare-and-measure discrete-variable QKD downlinks with weak laser pulses. The decoy-state version of BB84 is found to be the most promising QKD protocols due to the maturity of the security proofs, the high key generation rate and low system complexity. These findings are confirmed by the multitude of current and planned SatQKD missions that are adopting these architectural choices.