End-to-End QKD Using LEO Satellite Networks

TL;DR

This paper introduces a satellite-based quantum key distribution network using a ring constellation of satellites with TF-QKD and XOR protocols, enabling secure, global, end-to-end quantum communication without trusted nodes.

Contribution

It presents a novel satellite network architecture that achieves end-to-end security without trusted intermediaries, utilizing TF-QKD and a redundant key-forwarding protocol.

Findings

Key rates scale favorably with constellation size

Type-II constellations can generate multi-gigabit keys daily

Network design enhances security by increasing the number of nodes

Abstract

We propose a satellite-based Quantum Key Distribution (QKD) network that enables global-scale, end-to-end secure key exchange without relying on trusted intermediate nodes. The network is formed by a ring constellation of satellites that maintain persistent inter-satellite connectivity and support two configurations: a polar Type-I constellation providing global coverage, and an equatorial Type-II constellation offering continuous, terrestrial-like operation. End-to-end secrecy is achieved through the use of Twin-field Quantum Key Distribution (TF-QKD) and a redundant XOR-based key-forwarding protocol, in which each forwarding step incorporates independently generated QKD keys from ground-satellite and inter-satellite links. As a result, the final secret key is never exposed to any intermediate satellite, eliminating the single-point vulnerabilities inherent in trusted-node networks. Scaling the network offers two benefits: improved security and higher key rates. Increasing the constellation size enhances security by forcing an adversary to compromise a larger number of nodes to break the protocol, while simultaneously improving link availability and key throughput. Using realistic uplink and Inter-Satellite Link (ISL) models, we compute finite-size secret-key lengths based on the Sending-or-not-sending (SNS)-TF-QKD protocol. Our results show that the achievable key rates scale favourably with constellation size, with Type-II constellations reaching operational continuity and generating multi-gigabit secret keys per day, demonstrating a practical route toward secure global quantum communication.