{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T01:47:00Z","timestamp":1760060820430,"version":"build-2065373602"},"reference-count":29,"publisher":"MDPI AG","issue":"10","license":[{"start":{"date-parts":[[2025,10,7]],"date-time":"2025-10-07T00:00:00Z","timestamp":1759795200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2023YFF0612900"],"award-info":[{"award-number":["2023YFF0612900"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Entropy"],"abstract":"<jats:p>Virtual networks have emerged as a promising solution for enabling diverse users to efficiently share bandwidth resources over optical network infrastructures. Despite the invention of various schemes aimed at ensuring secure isolation among virtual networks, the security of data transfer in virtual networks remains a challenging problem. To address this challenge, the concept of evolving traditional optical networks into key programmable optical networks (KPONs) has been proposed. Inspired by this, this paper delves into the establishment of secure virtual networks over KPONs, in which the information-theoretically secure keys can be supplied for ensuring the information-theoretic security of data transfer within virtual networks. A layered architecture for secure virtual network provisioning over KPONs is proposed, which leverages software-defined networking to realize the programmable control of optical-layer resources. With this architecture, a heuristic algorithm, i.e., the key adaptation-based secure virtual network provisioning (KA-SVNP) algorithm, is designed to dynamically allocate key resources based on the adaption between the key supply and key demand. To evaluate the proposed solutions, an emulation testbed is established, achieving millisecond latencies for secure virtual network establishment and deletion. Moreover, numerical simulations indicate that the designed KA-SVNP algorithm performs superior to the benchmark algorithm in terms of the success probability of secure virtual network requests.<\/jats:p>","DOI":"10.3390\/e27101042","type":"journal-article","created":{"date-parts":[[2025,10,7]],"date-time":"2025-10-07T12:46:56Z","timestamp":1759841216000},"page":"1042","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Secure Virtual Network Provisioning over Key Programmable Optical Networks"],"prefix":"10.3390","volume":"27","author":[{"given":"Xiaoyu","family":"Wang","sequence":"first","affiliation":[{"name":"China Academy of Information and Communications Technology, Beijing 100191, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hao","family":"Jiang","sequence":"additional","affiliation":[{"name":"China Academy of Information and Communications Technology, Beijing 100191, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jianwei","family":"Li","sequence":"additional","affiliation":[{"name":"China Academy of Information and Communications Technology, Beijing 100191, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhonghua","family":"Liang","sequence":"additional","affiliation":[{"name":"China Academy of Information and Communications Technology, Beijing 100191, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2025,10,7]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"110","DOI":"10.1109\/MCOM.2016.7537185","article-title":"Physical-layer security in evolving optical networks","volume":"54","author":"Furdek","year":"2016","journal-title":"IEEE Commun. Mag."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"3210","DOI":"10.1109\/JLT.2011.2166248","article-title":"Security in photonic networks: Threats and security enhancement","volume":"29","author":"Kitayama","year":"2011","journal-title":"J. Light. Technol."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"24808","DOI":"10.1364\/OE.27.024808","article-title":"Optical spectrum feature analysis and recognition for optical network security with machine learning","volume":"27","author":"Li","year":"2019","journal-title":"Opt. Express"},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"2689","DOI":"10.1109\/TIFS.2019.2904793","article-title":"Toward all-optical layered encryption: A feasibility analysis of optical stream cipher","volume":"14","author":"Engelmann","year":"2019","journal-title":"IEEE Trans. Inf. Foren. Sec."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"3209","DOI":"10.1109\/TNSM.2021.3081590","article-title":"Security-aware planning of packet-over-optical networks in consideration of OTN encryption","volume":"18","author":"Chen","year":"2021","journal-title":"IEEE Trans. Netw. Service Manag."},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"2288","DOI":"10.1109\/JLT.2021.3051407","article-title":"Physical layer encryption for WDM optical communication systems using private chaotic phase scrambling","volume":"39","author":"Zhao","year":"2021","journal-title":"J. Light. Technol."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"2529","DOI":"10.1109\/TNET.2023.3256409","article-title":"On the multilayer planning of filterless optical networks with OTN encryption","volume":"31","author":"Lv","year":"2023","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"66","DOI":"10.1002\/spe.3039","article-title":"Quantum computing: A taxonomy, systematic review and future directions","volume":"52","author":"Gill","year":"2022","journal-title":"Softw.-Pract. Exp."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"1059","DOI":"10.1109\/COMST.2023.3254481","article-title":"A survey of important issues in quantum computing and communications","volume":"25","author":"Yang","year":"2023","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"1056","DOI":"10.1109\/JLT.2020.3016693","article-title":"10 Tbit\/s QAM quantum noise stream cipher coherent transmission over 160 km","volume":"39","author":"Yoshida","year":"2021","journal-title":"J. Light. Technol."},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"1698","DOI":"10.1109\/JLT.2021.3119603","article-title":"IF-over-fiber transmission of OFDM quantum-noise randomized PSK cipher for physical layer encryption of wireless signals","volume":"40","author":"Tanizawa","year":"2022","journal-title":"J. Light. Technol."},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"11344","DOI":"10.1364\/OE.484431","article-title":"Experimental demonstration of 201.6-Gbit\/s coherent probabilistic shaping QAM transmission with quantum noise stream cipher over a 1200-km standard single mode fiber","volume":"31","author":"Sun","year":"2023","journal-title":"Opt. Express"},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"19006","DOI":"10.1364\/OE.489043","article-title":"Analysis of the encryption penalty in a QAM-based quantum noise stream cipher","volume":"31","author":"Li","year":"2023","journal-title":"Opt. Express"},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"595","DOI":"10.1038\/nphoton.2014.149","article-title":"Secure quantum key distribution","volume":"8","author":"Lo","year":"2014","journal-title":"Nat. Photonics"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"1012","DOI":"10.1364\/AOP.361502","article-title":"Advances in quantum cryptography","volume":"12","author":"Pirandola","year":"2020","journal-title":"Adv. Opt. Photonics"},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"025002","DOI":"10.1103\/RevModPhys.92.025002","article-title":"Secure quantum key distribution with realistic devices","volume":"92","author":"Xu","year":"2020","journal-title":"Rev. Mod. Phys."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"839","DOI":"10.1109\/COMST.2022.3144219","article-title":"The evolution of quantum key distribution networks: On the road to the Qinternet","volume":"24","author":"Cao","year":"2022","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Zhao, Y., Zhang, H., and Zhang, J. (2016;, January 2\u20135). Key programmable optical networks (KPON) with OpenFlow-based key distribution. Proceedings of the Asia Communications and Photonics Conference, Wuhan, China.","DOI":"10.1364\/ACPC.2016.AF2A.139"},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"1888","DOI":"10.1109\/SURV.2013.013013.00155","article-title":"Virtual network embedding: A survey","volume":"15","author":"Fischer","year":"2013","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"450","DOI":"10.1109\/JLT.2013.2294389","article-title":"Virtual optical network embedding (VONE) over elastic optical networks","volume":"32","author":"Gong","year":"2014","journal-title":"J. Light. Technol."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"3648","DOI":"10.1109\/TNET.2016.2533625","article-title":"Novel location-constrained virtual network embedding LC-VNE algorithms towards integrated node and link mapping","volume":"24","author":"Gong","year":"2016","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"2793","DOI":"10.1109\/TPDS.2021.3075296","article-title":"Efficient virtual network embedding of cloud-based data center networks into optical networks","volume":"32","author":"Fan","year":"2021","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"ref_23","unstructured":"International Telecommunication Union (2020). Quantum Key Distribution Networks\u2014Key Management, International Telecommunication Union. ITU-T Recommendation Y.3803."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"1933","DOI":"10.1109\/JLT.2016.2522823","article-title":"Dynamic virtual network reconfiguration over SDN orchestrated multitechnology optical transport domains","volume":"34","author":"Aguado","year":"2016","journal-title":"J. Light. Technol."},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"834","DOI":"10.1109\/TCC.2018.2871118","article-title":"Virtual network recognition and optimization in SDN-enabled cloud environment","volume":"9","author":"Li","year":"2021","journal-title":"IEEE Trans. Cloud Comput."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"5487","DOI":"10.1364\/OE.21.005487","article-title":"Experimental demonstration of an OpenFlow based software-defined optical network employing packet, fixed and flexible DWDM grid technologies on an international multi-domain testbed","volume":"21","author":"Channegowda","year":"2013","journal-title":"Opt. Express"},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"864","DOI":"10.1109\/JLT.2013.2274991","article-title":"SDN and OpenFlow for dynamic flex-grid optical access and aggregation networks","volume":"32","author":"Cvijetic","year":"2014","journal-title":"J. Light. Technol."},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"130","DOI":"10.1109\/MCOM.2018.1700656","article-title":"Resource allocation in optical networks secured by quantum key distribution","volume":"56","author":"Zhao","year":"2018","journal-title":"IEEE Commun. Mag."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"2701","DOI":"10.1109\/JSAC.2021.3064662","article-title":"Hybrid trusted\/untrusted relay-based quantum key distribution over optical backbone networks","volume":"39","author":"Cao","year":"2021","journal-title":"IEEE J. Sel. Areas Commun."}],"container-title":["Entropy"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1099-4300\/27\/10\/1042\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,9]],"date-time":"2025-10-09T18:50:06Z","timestamp":1760035806000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1099-4300\/27\/10\/1042"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,7]]},"references-count":29,"journal-issue":{"issue":"10","published-online":{"date-parts":[[2025,10]]}},"alternative-id":["e27101042"],"URL":"https:\/\/doi.org\/10.3390\/e27101042","relation":{},"ISSN":["1099-4300"],"issn-type":[{"type":"electronic","value":"1099-4300"}],"subject":[],"published":{"date-parts":[[2025,10,7]]}}}