Traceable metrology for characterizing quantum optical communication devices

Transcription

Traceable metrology for characterizing quantum optical communication devices
Home
Search
Collections
Journals
About
Contact us
My IOPscience
Traceable metrology for characterizing quantum optical communication devices
This content has been downloaded from IOPscience. Please scroll down to see the full text.
2014 Metrologia 51 S258
(http://iopscience.iop.org/0026-1394/51/6/S258)
View the table of contents for this issue, or go to the journal homepage for more
Download details:
IP Address: 176.9.124.142
This content was downloaded on 24/11/2014 at 12:05
Please note that terms and conditions apply.
|
Bureau International des Poids et Mesures
Metrologia
Metrologia 51 (2014) S258–S266
doi:10.1088/0026-1394/51/6/S258
Traceable metrology for characterizing
quantum optical communication devices
C J Chunnilall, G Lepert, J J Allerton, C J Hart and A G Sinclair
National Physical Laboratory, Teddington, TW11 0LW, UK
E-mail: christopher.chunnilall@npl.co.uk
Received 9 June 2014, revised 1 August 2014
Accepted for publication 13 August 2014
Published 20 November 2014
Abstract
Industrial technologies based on the production, manipulation, and detection of single and
entangled photons are emerging. Quantum key distribution is one of the most commercially
advanced, and among the first to directly harness the peculiar laws of quantum physics.
To assist the development of this quantum industry, the National Physical Laboratory is using
traditional, and quantum, methods to develop traceable metrology for the devices used in these
technologies. We report on the instrumentation we have developed to characterize such
systems.
Keywords: metrology, quantum key distribution, single-photon
(Some figures may appear in colour only in the online journal)
1. Introduction
A focus of current work at the National Physical Laboratory
(NPL) is to develop a measurement infrastructure for
characterizing the optical components of emerging quantum
technologies, such as quantum key distribution (QKD)
[1–3]. This ranges from ‘traditional’ measures such as
photon number, and detection efficiency, to others such as
indistinguishability that determine device utility.
QKD is underpinned by a physical, as opposed to
algorithmic, process. Its security relies upon encoding each bit
of information sent between the parties seeking to establish a
common secret key onto a single photon. If a hacker intercepts
these photons, (s)he will disturb their encoding in a way that
can be detected. QKD does not prevent hacking, but reveals
whether a hacker has been able to compromise the key.
Current algorithmic key distribution is vulnerable to
advances in classical computing power and quantum
computing, as well as new mathematical insights. QKD,
if faithfully implemented, is guaranteed to be secure by the
laws of physics. This security depends on the physical
performance of the system at the time of key creation. Random
number generators (RNGs) are also essential components of
QKD systems. Optical true quantum RNGs operate at the
single photon level, and depend on the performance of their
constituent single-photon sources and detectors [4].
Figure 1 shows a schematic of a phase-encoding QKD oneway system. Attenuated laser pulses are used to approximate
0026-1394/14/060258+09$33.00
single photons, hence a small fraction will contain more than
one photon. Information is encoded on the phase of the
photons [5]. In the transmitter, the laser pulses are split in
an asymmetric Mach–Zehnder interferometer (AMZI), with
the path difference between the two arms being approximately
equal to half the time separation between pulses from the
laser, resulting in two pulse trains emerging at the output of
the interferometer. An additional phase delay is imparted to
pulses in one arm [5]. An attenuator reduces these pulses to
the single-photon level. Schemes have been developed [6, 7]
to reduce the power of photon-number-splitting (PNS) [8]
attacks on multi-photon pulses. In the decoy-state protocol [7],
the mean photon number, µ, of each pulse is randomly switched
between two or three values which, if set incorrectly, opens a
route to undetectable eavesdropping. These decoy states are
usually implemented with an intensity modulator, as shown
in figure 1. The phase and intensity modulators are driven in
independent random sequences. The receiver has a matching
AMZI, together with (usually) two single-photon detectors.
The performance of all of these components will affect the
performance and security of the QKD system. A classification
of these effects is suggested in table 1.
Characterizing the optical components of a QKD system
can establish: (i) whether they satisfy the assumptions and
requirements of the security proofs [9, 10]; (ii) the expected
secure bit-rate and range of the system; (iii) immunity
from known side-channel attacks; (iv) whether component
S258
© 2014 BIPM & IOP Publishing Ltd Printed in the UK
Metrologia 51 (2014) S258
C J Chunnilall et al
Figure 1. Main components of a one-way QKD system using phase encoding.
Table 1. Classification of how physical parameters of a QKD
system may affect its bit-rate, range and security.
Probability distribution
Mean photon number
Temporal purse jitter, duration
Phase randomization
(pulse-to-pulse)
Spectral indistinguishability
(base and bit encoding)
Detection efficiency
Dark count probability
After-pulse probability
Dead-time and recovery time
Detector output signal jitter
Back-flash
Detector indistinguishability
(mufti-detector)
Bit-rate
Range
Security
Y
Y
Y
Y
Y
2. Experiment
The characterization of detectors is fundamental to characterizing single-photon devices, since current traceability of optical
scales, i.e. the SI system, is based on cryogenic radiometers, detectors of optical power. Free-space monochromatic
radiation at the 100 µW power level can be measured with this
approach, with an uncertainty around 0.005% (k = 2) [14, 15].
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
2.1. Calibration of QKD receiver
Y
Y
Y
performance has changed, either from natural ageing, or from
hacking.
The most important properties of the photons are their
mean photon number(s) and timing jitter. Furthermore, phase
encoding should impart no discriminating information onto
the photons (e.g. on their spectral properties) which an
eavesdropper can probe.
Single-photon avalanche photodiodes (SPADs) operating
in Geiger mode are used in the most commercially advanced
QKD systems. These are non-photon-number-resolving
detectors; devices for the 1550 nm spectral region exhibit
after-pulsing, and are normally gated to reduce their dark
count rate (see [11–13] and references therein). The photon
detection, dark count and after-pulse probabilities, dead-times,
and recovery times of the photon receivers impact directly on
the achievable range and quantum bit error rate (QBER) of the
QKD system. Their spectral and temporal distinguishability
are also important, as is monitoring the loss of the optical
channel.
NPL has developed a test-bed to characterize the photon
transmitter (‘Alice’) and single photon receiver (‘Bob’)
modules of faint-pulse QKD systems operating at clock rates
up to 1 GHz over optical fibre in the 1550 nm telecom band.
This work will enable QKD systems to be evaluated and
inform the definition of standard measures, thus helping to
shape a validation and certification process for the technology.
This paper will focus on the traceability for characterizing
the mean photon number emitted by the transmitter and the
detection efficiency of the photon counters within the receiver,
measurements which require traceability to the SI unit for
optical radiation.
The calibration of a QKD receiver is essentially the calibration
of (normally two) single-photon SPADs. The ‘effective’ values
of parameters such as detection efficiency, timing jitter, and
spectral responsivity will be modified by the optical path the
signals take in travelling from the input port of the receiver to
the SPADs (see figure 1). Photons will, in addition, be directed
at random into either the short or long paths of the asymmetric
Mach–Zehnder interferometer unless, as in some systems [16],
polarization encoding is used to select these paths. Below we
describe our work to characterize the SPAD module of a QKD
receiver, i.e. without the associated optics discussed above.
A three-step process is used to calibrate a fibrecoupled telecom wavelength detector at the single-photon
level (figure 2). Step 1: a fibre-optic power meter is
calibrated traceably to the cryogenic radiometer and a fibreoptic attenuator is also calibrated over 6 orders of attenuation.
Step 2: the output of a pulsed laser is then transmitted through
the attenuator and measured with the power meter. Step 3: the
output of the attenuator is then further reduced to the singlephoton level (step 3) and used to calibrate the photon counters
in the QKD receiver.
2.2. Calibration of power-meter
The calibration of the fibre-optic power meter is crucial to
these measurements. The traceability chain used at NPL for the
calibration of the spectral response of a fibre-optic power meter
at power levels of 0 dBm (1 mW) is shown in figure 3 [17].
The NPL mechanically cooled cryogenic radiometer
[18] is used to measure the optical power in a collimated,
monochromatic, laser beam, and the responses of silicon trap
detectors [19, 20] are calibrated with reference to this beam.
The longest wavelength normally used is 799 nm, although
measurements have on occasion been carried out at 833 nm
and 852 nm. A thermopile detector [21] with a spectrally
flat response (Laser Instrumentation Ltd; model 14BT) is
then used to transfer the trap detector calibrations to the
850 nm–1650 nm spectral region required for fibre optic power
S259
Metrologia 51 (2014) S258
C J Chunnilall et al
Primary Standard
Calibrated Fibre Optic
1
Cryogenic Radiometer
Power Meter
2
Pulsed Laser
Calibrated Fibre Optic
QKD Receiver
3
at 1550 nm
Attenuator
(Photon Counter)
Figure 2. Process for calibrating a fibre-coupled QKD receiver (photon counter).
Cryogenic Radiometer (799 nm)
± 0.01%
Si trap detectors (799 nm)
± 0.02%
14BT Thermopile (799 nm)
± 0.2%
Working standards (1550 nm)
(integrating spheres)
± 0.5%
Fibre-optic power meter (1550 nm)
± 0.7%
Figure 3. Traceability chain for calibration of fibre-optic power
meters at 0 dBm. The value quoted for the power meter is a
best-measurement value. Adapted from [17].
meters. Thermopile detectors are not suitable for direct use in
calibrating fibre-optic power meters because of the sensitivity
of their response to objects in their field of view, and therefore
working standards comprising integrating spheres and Ge or
InGaAs detectors [22] are calibrated relative to the thermopile.
The calibration of the integrating sphere working
standards includes the transition from free-space collimated
light to fibre-optic light delivery (figure 4) [23]. A pair of
lenses is used to collimate and then refocus the light emitted
by an optical fibre, ensuring that the beam divergence matches
that of SMF-28 single-mode fibre. The waist of the re-focused
beam is positioned at the point corresponding to where the end
of a fibre coupled to the integrating sphere would be, and the
response of the integrating sphere assembly measured. A 14BT
thermopile is then inserted into the converging beam, and the
incident power recorded. Measurements using a collimated
beam incident on the 14BT over a range of angles spanning
the divergence of the fibre beam established the uniformity of
response of the thermopile over this angular range [23]. The
fibre-holder for the input patch cord is blackened on the inside,
and no changes in the signal are observed when it is mounted
over the integrating sphere entrance aperture shown in figure 4.
The response of the power meter below 0.1 mW is carried
out by measuring its linearity of response. This can be
performed by comparing the change in the signal from the
device under test (DUT) with that of a sensor which is known to
be linear. High accuracy measurements use the superposition
technique (figure 5). This is an in-fibre implementation
[24, 25] of the double-aperture technique which was already
in use for many decades preceding the 1970s [26], and is
inherently more accurate than other methods as it is a ratio
measurement.
The output from a source is connected to an in-fibre system
to generate two switchable channels. At each power level
P0 , the DUT can receive the following photon fluxes: PA (A
closed, B open), PB (A open, B closed), (PA + PB ) (A closed,
B closed). Both switches open enable a dark setting. These
settings allow the linearity to be evaluated.
In this measurement, the reference power Z0 (0.1 mW)
is the high power (PA + PB ) value, and the non-linearity NL
can be described as the relative deviation of the responsivity
R(Z) from the responsivity R(Z) at a stated value of the input
quantity Z0 :
R(Z0 ) − R(Z)
(1)
; Z < Z0
R(Z)
where L is the linearity. If NL is zero, the detector is linear
between Z0 and Z. NL > 0 indicates super-linearity, and
NL < 0 indicates sub-linearity. The attenuation in paths A
and B are set to be (ideally) equal, and the power with both
switches closed is set to 0.1 mW with the variable attenuator
before the first splitter. Thus, the linearity L0.1 of response
for an input power of 0.1 mW relative to 0.05 mW can be
established. The power with both switches closed is then set to
0.05 mW, and the linearity L0.05 of response for an input power
of 0.05 mW relative to 0.025 mW can be established. The
linearity at 0.025 mW with respect to 0.1 mW is the product
L0.1 × L0.05 . In this way, linearity measurements relative to
NL (Z0 ) = L(Z0 ) − 1 =
S260
Metrologia 51 (2014) S258
C J Chunnilall et al
Detector
+
Integrating
sphere
Lenses
Fibre
Thermopile
Figure 4. Coupling to integrating sphere. The arrowed lines indicate the extremal light rays from the fibre. The thermopile is inserted into
the beam to measure the incident power, and then retracted to obtain the response from the detector attached to the integrating sphere.
Path A
PA
50
Source
Device Under Test
Variable fibre
attenuator
50
Variable fibre
attenuator
Path B
PB
Figure 5. Superposition set-up.
the 0.1 mW responsivity can be established down to the noise
floor of the device.
The length of fibre in path A (a few 100 m) is to eliminate
interference fringes at the DUT. A multiline laser of ∼10 nm
bandwidth is used. An isolator placed immediately before the
DUT may also be required to avoid back-reflections.
Using this approach, the response of the Hewlett-Packard
fibre-optic power meter (Optical head model: HP81524A;
plug-in module model: HP81533B, power unit model
HP8153A) was calibrated with an uncertainty of 1.0%
(k = 2) at 0.1 mW, and when combined with linearity
measurements, resulted in a combined uncertainty of 1.02%
at 1 nW, increasing to 1.04% at 50 pW. Below 50 pW, noise
and digitizing coarseness lead to the uncertainty increasing
rapidly, e.g. 1.6% at 10 pW, 8% at 1 pW.
2.3. Calibration of attenuator
The calibrated power meter is used to calibrate the attenuator
(model HP 8158B, figure 2) which is used to span the range
from nW to single photon flux. Only the linearity calibration
of the power meter is required. The attenuator has a single
continuously variable filter (0–10 dB), plus 5 metallic neutral
density filters which provide attenuation from 10 dB to 50 dB in
steps of 10 dB, enabling total attenuation (including insertion
loss) up to 64 dB [27]. A range of input power levels (1 mW–
100 nW) are used to check that there are no significant heating
effects caused by absorption in the filters. Any such effects
would be reduced at the power levels (∼nW) used in calibrating
the photon counter. The linearity of the attenuator is measured
between the 3 dB and 64 dB settings, since 3 dB exceeds the
insertion loss of the attenuator. With this method, the linearity
of the attenuator can be calibrated with an uncertainty of 0.4%
(k = 2). The attenuator is equipped with Diamond® HMS10/HP connectors, and the corresponding fibre patch-cords are
not disconnected from the attenuator between its calibration
and use.
The set-up for calibrating the SPADs in a QKD receiver
is shown in figure 6. The measurement approach for a gated
detector which exhibits after-pulsing is to measure dark count
probability, followed by after-pulse probability [28, 29] and
then detection efficiency, as described by Yuan et al [30]. The
arrival of the laser pulses at the detector is synchronized to
occur within the detector gates with an overall rms jitter of less
than 10 ps, using a low-jitter programmable electronic delay
line. This is essential for characterizing systems with narrow
detector gates operating at GHz rates [31].
For pulses from an attenuated laser operating above
threshold with a mean number of photons per pulse µ, the
probability of there being n photons in a pulse is assumed
to follow the Poisson distribution. The probability of a true
detection, i.e. one due to the detection of a photon, and not a
dark count or after-pulse, is given by [32, 33]:
P true = 1 − exp (−µηD )
(2)
1 ln 1 − P true ,
µ
(3)
therefore
ηD = −
where ηD is the desired detection efficiency.
The dark count probability, P true , of the detector is
measured by recording the number of detection events per
gate in the absence of incident photons. The after-pulse and
detection probabilities are then measured by illuminating the
detector with a pulsed laser source attenuated to the single
photon level. A timer/counter (FAST Comtec MCS6A), with
a time-resolution of 100 ps, and operating in multi-stop mode
with zero dead time after stops, is used to record temporal
histograms of laser triggers and detections w.r.t. an initial
laser trigger. The laser pulse frequency flaser is stepped down
S261
Metrologia 51 (2014) S258
C J Chunnilall et al
Master clock
Frequency
divider
Variable
delay line
Trigger in
QKD receiver /
photon counter
Signal out
Counter / timer
Optical
input
Trigger In
Pulsed
laser source
Calibrated
optical power
meter
Calibrated
optical
attenuator
Uncalibrated
optical
attenuator
Figure 6. Set-up for calibration of QKD photon counter(s). Electronic connections are shown in dashed lines, fibre-optic connections in
solid lines. The output of the calibrated optical attenuator can be connected to either the calibrated power meter or the QKD receiver/photon
counter. The master clock may be part of the QKD receiver.
by an integer factor R compared to the detector gate rate using
a frequency divider. At zero-time delay with respect to the
laser pulse, the histogram peak is composed of detection events
observed under laser light illumination (plus after-pulses and
dark counts). Peaks at a time delay in this histogram not
corresponding to an illuminated gate are due to after-pulses
and dark counts. By normalizing the detected count rate to the
total number of applied gates, the after-pulse probability can
be calculated using equation (4), where Ci , Cni are the average
number of counts per illuminated and non-illuminated gate,
and Cdark is the number of dark counts, calculated from the
previously established dark count probability.
P after =
Cni − Cdark
· R.
Ci − Cni
(4)
The photon detection probability P true can be obtained from
equation (5). P i is the probability of detecting a photon at each
illuminated gate, and is given by Ci /Ni , where Ni is the total
number of illuminated gates.
P true = P i − P dark ·
1
1 + P after
(5)
Equation (4) yields the total after-pulse probability for all
(R) gates subsequent to an illuminated gate. However,
the probability can be evaluated as a function of time after
illumination—see figure 10.
For a required µ, the mean power in the stream of
pulses emitted by the laser is given by P = nµhνm , where
n = 1/flaser , h is Planck’s constant, and νm is the mean spectral
frequency of the emitted photons. The output of the laser
(PicoQuant LDH-P-F-N-1550) is attenuated by two fibrecoupled attenuators in series. The second attenuator is the
calibrated attenuator, and its attenuation is set to 3 dB. The
first attenuator, an OZ Optics (OZ 560151-18) attenuator is
used at minimum attenuation in order to measure the spectral
profile of the pulses in the high power regime with a calibrated
spectrum analyser. From this the mean spectral frequency
can be calculated. The attenuators exhibit no significant
spectral variation with attenuation over the narrow width of the
optical pulses (few nanometres). The output of the calibrated
attenuator is then connected to the calibrated power meter, and
the first attenuator used to set the measured output power in
the nW regime, between 30 dB and 50 dB above the required
single photon level. The calibrated attenuator can then be used
to reduce the power to the single-photon level, and the output
connected to the DUT.
The detector gate needs to be wider than the temporal
extent of the optical pulse in order to ensure that all of
the incident photons can be detected. Strictly speaking, the
method described in the previous paragraphs only measures
the detection efficiency for the specific combination of incident
pulse profile and jitter in the system. These may be different
when the receiver detects pulses transmitted over fibre from the
QKD transmitter. Measurement of the detector gate profile is
accomplished by sending CW radiation (at the single-photon
level) to the detector, and recording the counts which are timecorrelated with the detector gate trigger. Figure 7(a) shows the
detector gate profile of a Princeton Lightwave photon counter
(PGA-602) for a specific setting, which was measured using
a PicoQuant timer/counter (HydraHarp) to obtain data at 4 ps
time-intervals. For measurements involving pulsed sources,
the optical pulses are centred within the detector gate by
recording detection events as the time-delay between the laser
pulse and the detector gate is varied. The optimum time-delay
for synchronization is the value at which the resulting number
of detected events is a maximum (see figure 7(b)).
When the peak of the laser pulse is exactly aligned with
the gate detection efficiency maximum, the number of detected
events will fall as the laser temporal profile broadens (while
maintaining constant power). Figure 7(c) shows two extreme
pulse temporal profiles (obtained using different settings on
the laser driver, and measured at high power with a 65 GHz
bandwidth optical head and oscilloscope) with the same
overall output power. The corresponding synchronization data
S262
Metrologia 51 (2014) S258
Probability (after-pulses + darks)
1.0
0.8
Probability (after-pulses + darks)
Relative detection efficiency
(a)
C J Chunnilall et al
0.6
0.4
0.2
0.0
5
5.2
5.4
5.6
5.8
6
Time after gate trigger (ns)
(b)
3.0E+05
Detector counts
A
B
2.0E+05
Figure 10. Probability of after-pulses plus dark counts.
The power meter is calibrated with CW radiation, but is
used to measure pulsed radiation. Figure 8 shows the response
of the power meter and its electronics to the optical pulses,
which are ∼90 ps wide (full-width half-maximum). At a pulse
repetition rate of 250 kHz, there is a ripple of ±0.05%, while
at 500 kHz the ripple is ±0.01%. These make insignificant
contributions to the overall uncertainty budget.
Another potential source of uncertainty is due to the timer
missing counts, or jitter leading to signals being recorded in
the wrong time-bins. Tests with reference clock signals show
that neither of these factors is significant, and that the timer
exhibits zero dead-time for stop events.
1.0E+05
0.0E+00
1
1.5
2
2.5
3
Delay (ns)
Intensity (arbitrary units)
(c)
3.0E-03
A
B
2.0E-03
1.0E-03
2.4. Calibration of QKD transmitter
0.0E+00
0.0
0.2
0.4
0.6
0.8
1.0
Time (ns)
Figure 7. (a) Measured detector gate profile of a Princeton
Lightwave photon counter (PGA-602). (b) Detector counts as a
function of time-delay for two different incident pulse profiles.
(c) Pulse profiles corresponding to laser driver settings A and B.
obtained with the Princeton Lightwave photon counter are
shown in figure 7(b). The areas under the curves are equal
to within 0.5% (ideally, they should be equal), and therefore
such comparisons can be used to rescale measured detection
efficiency values if the calibration laser has a different temporal
profile to that in the QKD system. Ideally, the output of the
QKD transmitter should be the pulsed laser source used in
the calibration scheme shown in figure 6. This would require
that its attenuation can be reduced to ensure an output power
level measureable with the power meter, and accounting for
any temporal broadening caused by the fibre link between the
transmitter and receiver. We note that the laser pulse profile can
be measured at the single-photon level, by deconvolving the
detector gate profile and system jitter from the synchronization
curve.
Calibration of the output of the QKD transmitter uses the setup shown in figure 9. The output of the transmitter is sent to
a calibrated gated photon counter, and the optical pulses are
synchronized to arrive at the detector during detector gates by
using the variable electronic delay line. A Princeton Lightwave
photon counter (PGA-602), was calibrated using the same
process described above for the QKD photon counter, and used
for these measurements.
Figure 10 shows the after-pulse plus dark count probability
of the photon counter, measured as a function of time after
a pulse. At long times, the probability approaches the dark
count level. The detector was gated at 4 MHz, and the laser
at 4 MHz/256 = 15.625 kHz. The maximum time after a
pulse of 63.75 ms corresponds to 255 gates. It was previously
confirmed that the detection efficiency was independent of gate
frequency in the 4 MHz to 250 kHz regime. In view of this, the
detector was gated at 250 kHz for measurements of the QKD
transmitter, in order to minimize the effect of after-pulses while
maintaining a reasonable gate frequency. A frequency divider
was used to reduce the QKD master clock frequency to the
required rate.
The number of gates, Ngates and the corresponding number
of detections, Ndet is recorded by the counter/timer. The mean
S263
Metrologia 51 (2014) S258
C J Chunnilall et al
Fractional deviation from mean value
Power meter response to input pulses (~ 90 ps pulsewidth)
0.0010
Freq. (kHz)
250
0.0005
500
0.0000
-0.0005
-0.0010
0
5
10
15
20
Time (µs)
Figure 8. Response of power meter to pulsed radiation (measured with an 80 GHz bandwidth sampling oscilloscope).
Frequency
divider
Master clock
Variable
delay line
QKD transmitter
Optical
input
Calibrated
photon
counter
Trigger in
Signal out
Counter / timer
Figure 9. Set-up for calibration of QKD transmitter.
photon number is calculated from (see appendix)
µ=
1
p det
dark
,
ln 1 −
+
p
ηD
1 + p after
where
pdet =
Ndet
.
Ngates
(6)
(7)
As for the calibration of the QKD receiver, correction for the
effective detection efficiency may need to be made if the QKD
transmitter pulses and jitter are different from those used in
calibrating the single-photon detector.
3. Uncertainties
Table 2 presents simplified uncertainty budgets for the
calibration of the QKD receiver SPAD detection efficiencies
and the mean photon number of the pulses emitted by the
QKD transmitter. The after-pulse and dark count probabilities
are three to four orders of magnitude lower than the detection
efficiency. The fibre-coupling component is a best estimate of
the inequivalence of the fibre coupling between the calibrated
attenuator and the power meter or photon counter, respectively,
in the case of receiver calibration. A similar consideration
applies in the case of the transmitter; here the inequivalence
is between the measuring system and the link to the rest of
the QKD system. For the receiver, additional uncertainties
can result from: (i) a mismatch between the laser profile used
for calibrating the device, and that of the QKD transmitter it
will be coupled to (the calibration correction); (ii) measuring
losses through the associated optics in the receiver module
(not included in the uncertainty budget). In the case of the
QKD transmitter, additional uncertainties can result, as with
the receiver, from a mismatch between the laser profile used
for calibrating the measuring detector and the QKD transmitter,
as well as any additional optical components that may be used
to separate the two pulse trains generated by the asymmetric
Mach–Zehnder interferometer. If a decoy state protocol is
implemented, some of the pulses may have a mean photon
number ∼0.001, and therefore the fractional uncertainty in the
detected counts will be much larger.
The set-ups described above were used to characterize the
receiver and transmitter of a QKD system operating at 1 GHz,
and also provide real-time monitoring of the output of the QKD
transmitter during a field trial of a QKD-secured 10 Gb s−1
DWDM transmission system over a single installed fibre [34].
4. Conclusion
A test-bed has been constructed which can be synchronized
with the pulse emission, or detector gates, of a faint-pulse
QKD system, with low jitter (<10 ps rms). Pulses of mean
photon number µ, traceable to the primary scale realized by
cryogenic radiometry, can be used to characterize the response
S264
Metrologia 51 (2014) S258
C J Chunnilall et al
Table 2. Simplified uncertainty budgets for calibration of QKD
receiver (a) and QKD transmitter (b).
Source of
uncertainty
(a) Calibration of QKD receiver
Power meter
Power meter stability
Attenuator
Fibre coupling
Synchronisation stability
Laser power stability
Dark count probability
After-pulse probability
True detection counts
Calibration correction
Combined standard uncertainty
Expanded uncertainty (k = 2)
(b) Calibration of QKD transmitter
DE of photon counter
Fibre coupling
Synchronisation stability
Dark count probability
After-pulse probability
Detection counts
Calibration correction
Extinction of adjacent pulses
Losses through optics
Combined standard uncertainty
Expanded uncertainty (k = 2)
Appendix: derivation of equation (6)
Ndet includes Ndark dark counts and Nafter after-pulses:
100 ×
Relative standard
uncertainty
0.5
0.2
0.2
0.2
0.5
0.3
0.1
0.1
0.1
0.5
1.0
2.0
Ndark = Ngates p dark
(A.1)
Nafter = (Ntrue + Ndark ) pafter ,
(A.2)
where Ntrue is the number of true detection events, and afterpulses from after-pulses are ignored. Hence
(A.3)
Ndet = (Ntrue + Ndark ) 1 + p after
Ntrue =
Ndet
− Ndark .
1 + p after
(A.4)
The probability of a true detection is therefore given by:
p det
Ntrue
=
− p dark .
Ngates
1 + p after
1.0
0.2
0.5
0.1
0.1
0.1
0.5
0.5
0.5
1.4
2.9
(A.5)
For a Poisson distribution with a mean number µ of
photons in a pulse:
Ntrue
= 1 − exp (−µηD ) .
Ngates
of the photon counters in a QKD receiver with an uncertainty of
∼2% (k = 2). A photon counter (Princeton Lightwave PGA602), operating at 250 kHz, was traceably calibrated using the
same set-up, and used to measure the µ values of the pulses
from a QKD transmitter operating at up to 1 GHz, with an
uncertainty of ∼3% (k = 2). This latter ability was used
to provide real-time measurements during a field trial of a
QKD-secured 10 Gb s−1 DWDM transmission system. This
demonstrates the ability to provide traceable measurements
for new quantum optical technologies, of which QKD is the
most commercially advanced, and supports work to develop a
metrology and standards infrastructure [35–38] to accelerate
the commercial uptake of these technologies.
Therefore, the mean photon number is given by:
Ntrue
1
µ = − ln 1 −
ηD
Ngates
1
p det
dark
= − ln 1 −
.
+
p
ηD
1 + p after
(A.6)
(A.7)
© 2014 Queen’s Printer and Controller of HMSO
References
Acknowledgments
This work was funded by: the National Measurement Office
of the UK Department of Business, Innovation and Skills;
UK Technology Strategy Board Trusted Services Project TP
1913–19252; project MIQC (contract IND06) of the European
Metrology Research Programme (EMRP). The EMRP is
jointly funded by the EMRP participating countries within
EURAMET and the European Union. David J Szwer (NPL)
provided the data in figure 7. The authors acknowledge
discussions with Andrew J Deadman and David A Humphreys
(NPL), as well as colleagues participating in the above projects
and in the European Telecommunications Standard Institute’s
Industry Specification Group on QKD.
S265
[1] Gisin N, Ribordy G, Tittel W and Zbinden H 2002 Quantum
cryptography Rev. Mod. Phys. 74 145–95
[2] Dusek M, L¨utkenhaus N and Hendrych M 2006 Quantum
cryptography Progress in Optics vol 49 ed E Wolfoke
(Amsterdam: Elsevier) pp 381–454
[3] Scarani V, Bechmann-Pasquinucci H, Cerf N J, Dusek M,
Lutkenhaus N and Peev M 2009 The security of practical
quantum key distribution Rev. Mod. Phys. 81 1301–50
[4] Stucki D, Burri S, Charbon E, Chunnilall C J, Meneghetti A
and Regazzoni F 2013 Towards a high-speed quantum
random number generator Proc. SPIE 8899 88990R
[5] Townsend P D, Rarity J G and Tapster P R 1993 Single photon
interference in 10 km long optical fibre interferometer
Electron. Lett. 29 634–5
[6] Scarani V, Acin A, Ribordy G and Gisin N 2004 Quantum
cryptography protocols robust against photon number
splitting attacks for weak laser pulse implementations
Phys. Rev. Lett. 92 057901
[7] Lo H-K, Ma X and Chen K 2005 Decoy state quantum key
distribution Phys. Rev. Lett. 94 230504
[8] Brassard G, Lutkenhaus N, Mor T and Sanders B C 2000
Limitations on practical quantum cryptography Phys. Rev.
Lett. 85 1330–33
[9] Gottesman D, Lo H-K, Lutkenhaus N and Preskill J 2004
Security of quantum key distribution with imperfect devices
Quantum Inf. Comput. 4 325–60
Metrologia 51 (2014) S258
C J Chunnilall et al
[10] Lucamarini M, Patel K A, Dynes J F, Fr¨ohlich B, Sharpe A W,
Dixon A R, Yuan Z L, Penty R V and Shields A J 2013
Efficient decoy-state quantum key distribution with
quantified security Opt. Exp. 21 24550–65
[11] Hadfield R H 2009 Single-photon detectors for optical
quantum information applications Nature Photon.
3 609–705
[12] Migdall A, Polyakov S V, Fan J and Bienfang J C (ed) 2013
Single-Photon Generation and Detection: Physics and
Applications (Oxford: Academic)
[13] Chunnilall C J, Degiovanni I P, K¨uck S, M¨uller I and
Sinclair A G 2014 Metrology of single-photon sources and
detectors: a review Opt. Eng. 53 081910
[14] Fox N P 2000 Primary radiometric quantities and units
Metrologia 37 507–13
[15] Fox N P and Rice J P 2005 Absolute radiometers Experimental
Methods in the Physical Sciences vol 41 Optical
Radiometry ed A C Parr et al (Amsterdam: Elsevier)
pp 35–96
[16] C Gobby, Yuan Z L and Shields A J 2004 Quantum key
distribution over 122 km of standard telecom fiber
Appl. Phys. Lett. 84 3762–64
[17] Hall S R G, Jones T C E and Roddie A G 2001 Traceability for
high power fibre optic measurements OFMC’01–6th
Optical Fibre Measurement Conf. (NPL, Girton College,
Cambridge, UK) pp 77–80 (www.npl.co.uk/publications/
traceability-for-high-power-fibre-optic-measurements)
[18] Fox N P, Haycocks P R, Martin J E and Ul-haq I 1995
A mechanically cooled portable cryogenic radiometer
Metrologia 32 581–4
[19] Zalewski E F and Duda C R 1983 Silicon photodiode device
with 100% external quantum efficiency Appl. Opt.
22 2867–73
[20] Fox N P 1991 Trap detectors and their properties Metrologia
28 197–202
[21] Preston J S 1971 A radiation thermopile for cw and laser pulse
measurement J. Phys. E: Sci. Instrum. 4 969–72
[22] Nettleton D H 1989 Application of absolute radiometry to the
measurement of optical power in fibre optic systems New
Developments and Applications in Optical Radiometry;
Proc. 2nd Int. Conf. (Institute of Physics Conference Series)
(1988) vol 92, ed N P Fox and D H Nettleton (Bristol:
Institute of Physics Publishing) pp 93–7
[23] Deadman A J 2011 private communication
[24] Jones T C E 2014 private communication
[25] Vayshenker I, Yang S, Li X, Scott T R and Cromer C L 2000
Optical fiber power meter nonlinearity calibrations at NIST
NIST Special Publication 250–56
[26] Clarke F J J 1972 High accuracy spectrophotometry at the
National Physical Laboratory J. Res. NBS A 76 375–403
[27] Maisenbacher B, Schmidt S and Schlicker M 1987 Design
approach for a programmable optical attenuator
Hewlett-Packard J. 38 31–5
[28] Cova S, Lacaita A and Ripamonti G 1991 Trapping
phenomena in avalanche photodiodes on nanosecond scale
IEEE Electron Device Lett. 12 685–7
[29] Itzler M A, Jiang X and Entwistle M 2012 Power law temporal
dependence of InGaAs/InP SPAD afterpulsing J. Mod. Opt.
59 1472–80
[30] Yuan Z L, Kardynal B E, Sharpe A W and Shields A J 2007
High speed single photon detection in the near infrared
Appl. Phys. Lett. 91 041114
[31] Patel K A, Dynes J F, I Choi, Sharpe A W, Dixon A R,
Yuan Z L, Penty R V and Shields A J 2012 Coexistence of
high-bit-rate quantum key distribution and data on optical
fiber Phys. Rev. X 2 041010
[32] Coldenstrodt-Ronge H B and Silberhorn C 2007 Avalanche
photo-detection for high data rate applications J. Phys. B:
At. Mol. Phys. 40 3909
[33] Schmunk W, Rodenburger M, Peters S, Hofer H and K¨uck S
2011 Radiometric calibration of single photon detectors by
a single photon source based on NV-centers in diamond
J. Mod. Opt. 58 1252–9
[34] Choi I et al Field trial of a quantum secured 10 Gb/s DWDM
transmission system over a single installed fiber Opt.
Express 22 23121–8
[35] Zwinkels J C, Ikonen E, Fox N P, Ulm G and Rastello M L
2010 Photometry, radiometry and ‘the candela’: evolution
in the classical and quantum world Metrologia
47 R15–32
[36] Rastello M L et al 2014 Metrology for industrial quantum
communications: the MIQC project Metrologia
51 S267–75
[37] www.etsi.org/technologies-clusters/technologies/
quantum-key-distribution
[38] http://projects.npl.co.uk/MIQC/
S266