After-pulse-discarding in single-photon detection to reduce bit errors in quantum key distribution

Transcription

1 After-pulse-discarding in single-photon detection to reduce bit errors in quantum key distribution A. Yoshizawa, R. Kaji and H. Tsuchida National Institute of Advanced Industrial Science and Technology (AIST) 1-1-1, Umezono, Tsukuba-shi, Japan Abstract: We demonstrate fiber-optic quantum key distribution (QKD) at 1 nm using single-photon detectors operating at MHz. Such highspeed single-photon detectors are essential to the realization of efficient QKD. However, after-pulses increase bit errors. In the demonstration, we discard after-pulses by measuring time intervals of detection events. For a fiber length of 1. km, we have achieved a key rate of 17 khz with an error of 2%. 23 Optical Society of America OCIS codes: (27.27) Quantum optics; (6.6) Fiber optics and optical communications References and links 1. N. Gisin, G. Ribordy, W. Tittel and H. Zbinden, Quantum cryptography, Rev. Mod. Phys. 74, (22). 2. P. A. Hiskett, G. Bonfrate, G. S. Buller and P. D. Townsend, Eighty kilometer transmission experiment using an InGaAs/InP SPAD-based quantum cryptography receiver operating at 1. µm, J. Mod. Opt. 48, (21). 3. P. A. Hiskett, J. M. Smith, G. S. Buller and P. D. Townsend, Low-noise single-photon detection at wavelength 1. µm, Electron. Lett. 37, (21). 4. M. Bourennane, A. Karlsson, J. P. Ciscar and M. Mathes, Single-photon counters in the telecommunication wavelength region of 1 nm for quantum information processing, J. Mod. Opt. 48, (21).. D. Stucki, G. Ribordy, A. Stefanov, H. Zbinden, J. G. Rarity and T. Wall, Photon counting for quantum key distribution with Peltier cooled InGaAs/InP APDs, J. Mod. Opt. 48, (21). 6. A. Yoshizawa, R. Kaji and H. Tsuchida, A method of discarding after-pulses in single-photon detection for quantum key distribution, Jpn. J. Appl. Phys. 41, (22). 7. D. Stuchi, N. Gisin, O. Guinnard, G. Ribordy and H. Zbinden, Quantum key distribution over 67 km with a plug & play system, New J. Phys. 4, (22). 8. A. Yoshizawa, R. Kaji and H. Tsuchida, Quantum efficiency evaluation method for gated mode single photon detector, Electron. Lett. 38, (22). 9. C. H. Bennett, Quantum cryptography using any two nonorthogonal states, Phys. Rev. Lett. 68, (1992). 1. D. S. Bethune and W. P. Risk, An autocompensating fiber-optic quantum cryptography system based on polarization splitting of light, IEEE J. Quantum Electron. 36, (2). 11. C. H. Bennett and G. Brassard, Quantum Cryptography: Public Key Distribution and Coin Tossing, in Proc. of IEEE Inter. Conf. on Computers and Signal Processing, Bangalore, India (Institute of Electrical and Electronics Engineers, New York, 1984), pp Introduction Quantum key distribution (QKD) is a technique to share a private key of a random binary sequence between two remote parties, sender and receiver (called Alice and Bob, respectively) by exchanging qubits described by single photons or weak coherent pulses, in order to implement a secure one-time-pad encryption and decryption (for a good review, see [1]). Since any unknown qubit state cannot be perfectly copied, an eavesdropper (Eve) (C) 23 OSA 2 June 23 / Vol. 11, No. 11 / OPTICS EXPRESS 133

2 disturbs the transmitted qubits when extracting information. Its security relies on the laws of quantum mechanics. If a single-mode fiber is used as a quantum channel, the most desirable wavelength for low-loss transmission is 1 nm. Recently, 8-km fiber-optic QKD experiments were reported at 1 nm [2]. The performance of indium-gallium-arsenide (InGaAs) avalanche photodiodes (APDs) is widely investigated for single-photon detection at 1 nm. A common method is referred to as the gated mode, in which the APD is pulsebiased above its breakdown [3-]. During the gate-on time, a photon-induced avalanche can grow into a macroscopic pulse. However, a thermally excited carrier also triggers an avalanche, giving a dark count in detection. Furthermore, carriers are trapped every avalanche and if one emits during the next gate-on times, it can trigger a new avalanche. For 1 nm, this avalanche (after-pulse) is frequently found in detection if the repetition frequency exceeds 1 MHz, resulting in a significant increase of bit errors in QKD [-6]. However, high-speed single-photon detectors are essential to the realization of efficient QKD. Since only traps with an emission lifetime comparable to or longer than a reciprocal of the repetition frequency generate after-pulses, introducing a dead time in detection, during which, following an avalanche, no gates are applied to the APD, is an effective way to reduce bit errors in QKD [7]. In this paper, we demonstrate discarding of after-pulses by measuring time intervals of detection events to reduce bit errors in QKD. In the demonstration, single-photon detectors operating at a repetition frequency of MHz are used. Furthermore, Alice is connected to Bob with two single-mode fibers. One is used as a quantum channel while the other for clock sharing. Such a system removes bit errors related to backscattered photons from the clock pulse. Here, we have achieved a key rate of 17 khz with an error of 2% for a fiber length of 1. km. 2. Single-photon detectors The evaluation method for gated-mode single-photon detectors described here makes it possible to measure the quantum efficiency and the after-pulse probabilities per gate from the same data [8]. Here, only important parts are summarized. To obtain the probability distribution, we measure time intervals of detection events. Let p interval ( t) denote the probability of finding t among those measured. Also, let p after-pulse ( t) denote the (conditional) probability that an after-pulse is observed after t following a previous avalanche. Then, one finds that for each interval t n = n/v with n = 1,2,3 p interval ( t n ) = c( t n )e ( n 1)ηµ [(1 e ηµ ) + p after pulse ( t n )] (1) Here, v is a repetition frequency; η is a quantum efficiency and µ is an average of photons per incoming pulse. The probability of finding no after-pulses within an interval of t n can be written as (n = 2,3,4 ) n 1 c( t n ) =Π k=1 [1 p after pulse ( t n )]. (2) For long intervals such that p after-pulse ( t n ) ~, c( t n ) becomes n-independent, enabling us to determine η from the slope of lnp interval ( t n ). Here, ln stands for natural logarithm. Furthermore, considering that c( t 1 ) = 1, p after-pulse ( t n ) is calculated by substituting the estimated value of η into Eq. (1). In the following, two single-photon detectors (D and D1) operating at v = MHz are evaluated. Figure 1 shows lnp interval ( t n ) of D measured at µ =.1. After-pulses are observed as a nonlinear decrease of the measured data for t n < 1 µs. However, for longer intervals, lnp interval ( t n ) decreases linearly, yielding a quantum efficiency of η = 13%. Figure 2 shows lnp interval ( t n ) of D1 measured at the same value of µ. Figure 3 shows the calculated p after-pulse ( t n ), where solid and open circles correspond to those of D (C) 23 OSA 2 June 23 / Vol. 11, No. 11 / OPTICS EXPRESS 134

3 and D1, respectively. Although they have different probabilities for t n < 4 µs, each afterpulse is mostly found within 1 µs following a previous avalanche. Table 1 summarizes operating conditions and evaluation results of D and D1. Here, d thermal and d after-pulse are darkcount probabilities per gate resulting from thermally excited carriers and after-pulses, respectively. The former is evaluated after excluding after-pulses by measuring time intervals of dark counts and discarding those with t n < 1 µs (= t after-puse ). The remaining dark counts are found with a probability of d thermal exp(-d thermal v t after-pulse ), which becomes nearly equal to d thermal if d thermal v t after-pulse << 1. Then, the difference between the dark-count probabilities per gate with and without discarding after-pulses coincides with d after-pulse Non-linear decrease - In p interval η = 13% Interval t (µs) n Fig. 1. ln p interval ( t n ) of D Non-linear decrease - In p interval η = 11% Interval t (µs) n Fig. 2. ln p interval ( t n ) of D1. (C) 23 OSA 2 June 23 / Vol. 11, No. 11 / OPTICS EXPRESS 13

4 Table 1. Operating conditions and evaluation results of single-photon detectors D D1 η 13% 11% d thermal d after-pulse Gate time 1.6 ns Temperature 243 K.3.2 D D1.2 p after-pulse Interval t (µs) n Fig. 3. p after-pulse versus t n. 3. Quantum key distribution 3.1 Quantum channel Figure 4 shows a schematic diagram of the system employed for the QKD demonstration (Bennett s two-coherent-protocol: B92 [9]). Alice is connected to Bob with two 1.-km dispersion-shifted single-mode fibers (DSF1 and DSF2) with a loss of.21 db/km. DSF1 is a quantum channel while DSF2 is used for clock sharing. Here, only the system related to the quantum channel is explained. A gain-switched laser diode (LD1) produces a sequence of light pulses at a repetition frequency of MHz, each having a width of ps with a bandwidth of 1 nm centered at 1 nm. With a polarization controller (PC), the polarization state is aligned for transmission through a polarizing beam splitter (PBS1). With a half-wave plate (HWP) and PBS2, the pulse is divided into signal and reference pulses. After transmission through a quarter-wave plate (QWP) and reflection by a mirror (M), the reference pulse leaves Bob, going to Alice ahead of the signal pulse. With a fiber-optic delay line (DL) and a Faraday rotator mirror (FRM), the signal pulse is delayed for 1 ns compared with the reference pulse. Due to birefringence fluctuations in DSF1, both polarization states become unknown when arriving at Alice. With a polarization-independent phase modulator (PM) [1], Alice modulates the signal pulse at random but evenly between and π while letting the reference pulse unchanged. Alice s FRM guarantees that Bob receives the signal and reference pulses with polarization states linear but orthogonal to their initial states [7, 1]. A pseudo-random number generator (PRNG) outputs a voltage pulse with a width of ns, which is applied to PM only when the bit value is 1. Alice returns the signal and reference pulses to Bob after attenuating those pulses with an attenuator (AT) such that the signal pulse has an average of. photons. At Bob, the reference pulse is delayed compared with the (C) 23 OSA 2 June 23 / Vol. 11, No. 11 / OPTICS EXPRESS 136

5 signal pulse, both re-arriving at PBS2 simultaneously with identical intensity. The recombined pulse is horizontally or vertically polarized, which only reflects Alice s phase choice. The private key can be established by interpreting single-photon detectors D and D1 as and 1, respectively 3.2 Clock sharing Figure 4 also shows how to share the clock between Alice and Bob. A gain-switched laser diode (LD2) produces a sequence of light pulses at a repetition frequency of 1 MHz, each having a width of ps with a bandwidth of 1 nm centered at 1 nm. To synchronize LD1 with LD2, a two-channel synthesized function generator (SFG) is used, which also triggers a delay generator (DG) whose outputs become timing signals for gated-mode operation of D and D1. Alice detects clock pulses sent by Bob via DSF2 with a conventional avalanche photodiode (C-APD), whose output pulse is converted into a square wave with a frequency of 1 MHz, which becomes a reference signal of a frequency synthesizer (FS). A sinusoidal wave with a frequency of 1 MHz is generated from FS, and is applied as a time-base signal to an arbitrary wave function generator, which is used as PRNG. Since the signal/reference pulse and the clock pulse are transmitted through separate fibers, the difference in temperature between DSF1 and DSF2 will cause the relative temporal walk-off between those pulses. However, such a walk-off is estimated to be ~.6 ns/k [2], and is not a significant problem because it is much smaller than the width of the voltage pulse applied to PM (= ns). Compared with the signal and reference pulses, the clock pulse is strong enough to produce a large number of backscattered photons. The presented system prevents those photons from entering single-photon detectors. Thus, only half of backscattered photons from the signal and reference pulses (much weaker than the clock pulse) become bit errors in QKD. DL FRM PBS2 Bob DSF1 Alice M QWP HWP AT PM PBS1 Circulator D1 DG D LD2 SFG DSF2 C-APD FS FRM PRNG PC LD1 Fig. 4. Experimental setup for quantum key distribution. LD1 and LD2: gain-switched laser diodes, PC: polarization controller, PBS1 and PBS2: polarizing beam splitters, HWP: halfwave plate, QWP: quarter-wave plate, M: mirror, DL: delay line, FRM: Faraday rotator mirror, D and D1: single-photon detectors, SFG: synthesized function generator, DG: delay generator, PM: phase modulator, C-APD: conventional avalanche photodiode, PRNG: pseudo-random number generator, AT: attenuator, DSF1 and DSF2: dispersion-shifted single-mode fibers, FS: frequency synthesizer. 4. Results and discussion Figure shows the quantum bit-error rate (QBER) of D after discarding detection events with intervals t n < t discard. Solid circles are the measured results while open circles are corresponding key rates. For t discard < µs, after-pulses are effectively discarded, leading to a (C) 23 OSA 2 June 23 / Vol. 11, No. 11 / OPTICS EXPRESS 137

6 significant decrease in QBER. However, if t discard exceeds µs, the QBER slowly decreases and then becomes t discard -independent. Meanwhile, the key rate shows an exponential decrease such that r = kv exp( kv t discard ). (3) Here, k = ηµexp[-(αl+β)/1]. Note that η is a quantum efficiency of Bob s single-photon detector (D) whereas µ is an average of photons of the signal pulse measured by Alice. α is a fiber loss in db/km; L is a fiber length (km) and β is an internal loss (db) of Bob s system. In the demonstration, η = 13%, µ =., α =.21, L = 1. and β = 3. A curve in Fig. is obtained by substituting those parameters into Eq. (3). Figure 6 shows the measured results corresponding to D1. A curve in this figure is also obtained by substituting the same parameters as D except that η = 11% into Eq. (3). Approximately, the QBER can be written as 1 D µs Exponential Quantum bit-error rate (%) 1 1 Key rate (khz) t (µs) discard Fig.. Measured and calculated quantum bit-error rates (solid circles and open squares, respectively) and corresponding key rates (open circles) of D. (C) 23 OSA 2 June 23 / Vol. 11, No. 11 / OPTICS EXPRESS 138

7 1 D1 1 Quantum bit-error rate (%) 1 µs Exponential 1 Key rate (khz) t (µs) discard Fig. 6. Measured and calculated quantum bit-error rates (solid circles and open squares, respectively) and corresponding key rates (open circles) of D1. e qber ~ d thermal + 1 1/k p after pulse ( t discard + t n ) + e others. (4) 2k 2 n=1 In this equation, the first and second terms on the right-hand side express contributions to bit errors of thermally excited carriers and after-pulses, respectively. In the following calculation, we assume that p after-pulse ~ for t n > 1 µs whereas others are presented as solid and open circles in Fig. 3. The third term on the right-hand side of this equation is the QBER induced by backscattered photons from the signal and reference pulses in the quantum channel, internal reflections at Bob s system and other imperfections of optical and electrical components. In the demonstration, e others ~ 1% and is independent of t discard. Open squares in Figs. and 6 are those calculated with Eq. (4), agreeing with the results obtained in QKD experiments (solid circles). Since the key rate decreases with t discard, we have to properly determine t discard for D and D1. For example, if we choose t discard = 7.6 µs for D and µs for D1, respectively, the total key rate becomes 17 khz with an error of 2%. It is well known that Benett-Brassard-84 protocol (BB84) [11] is the most popular protocol and is more secure than the demonstrated B92 protocol. However, since the systems of two protocols are so similar, the demonstrated discarding method seems to be effective for both protocols to reduce bit errors in QKD. We are planning to increase the repetition frequency of the single-photon detectors for realizing more efficient QKD although afterpulses are more often found in detection. In the demonstration, the sender is connected to the receiver with two single-mode fibers. One is a quantum channel and the other is used for carrying strong clock pulses. In this case, it is important to consider what new strategies could be applied by Eve and see how those strategies influence the security of the QKD. Studying such a security problem will be necessary in the future.. Summary We have demonstrated fiber-optic quantum key distribution at 1 nm using single-photon detectors operating at MHz. After-pulses are discarded by measuring time intervals of detection events, leading to a significant reduction of the quantum bit-error rate. For a fiber length of 1. km, we have achieved a key rate of 17 khz with an error of 2%. (C) 23 OSA 2 June 23 / Vol. 11, No. 11 / OPTICS EXPRESS 139