Prepare-and-Send Universal Blind Quantum Computation: Difference between revisions

From Quantum Protocol Zoo
Jump to navigation Jump to search
No edit summary
 
(62 intermediate revisions by 4 users not shown)
Line 1: Line 1:
The [https://arxiv.org/abs/0807.4154 example protocol] achieves the functionality of [[Secure Client- Server Delegated Quantum Computation]] by assigning quantum computation to an untrusted device while maintaining privacy of the input, output and computation of the client. The client requires to be able to prepare and send quantum states while the server requires to possess a device with quantum memory, measurement and entanglement generation technology. Following description deals with a method which involves quantum offline and classical online communication, called Blind Quantum Computation. It means the protocol needs one-time quantum communication at the end or starting of the protocol while continuous classical communication between the parties, throughout the execution. It comes with the properties of [[Secure Client- Server Delegated Quantum Computation#Properties|correctness]], [[Secure Client- Server Delegated Quantum Computation#Properties|blindness]] and [[Secure Client- Server Delegated Quantum Computation#Properties|universality]].
</br> </br>


== Functionality Description==
'''Tags:'''  [[Category: Two Party Protocols]] [[:Category: Two Party Protocols|Two Party]], [[Category: Universal Task]][[:Category: Universal Task|Universal Task]], [[Category: Quantum Functionality]] [[:Category: Quantum Functionality|Quantum Functionality]], Quantum Offline communication, Classical Online communication, [[Supplementary Information#Measurement Based Quantum Computation|Measurement Based Quantum Computation (MBQC)]], [[Measurement-Only Universal Blind Quantum Computation|Measurement Only UBQC]], [[Pseudo-Secret Random Qubit Generator (PSQRG)]], [[Prepare-and-Send Verifiable Universal Blind Quantum Computation|Prepare and Send Verifiable Universal Blind Quantum Computation (VUBQC)]].
Delegated Computation is the task of assigning quantum computation to an untrusted device while maintaining privacy of the computation. It can be done via classical online/offline and quantum online/offline communication. Following description deals with a method which involves quantum offline and classical online communication, called Blind Quantum Computation. It comes with the properties of correctness i.e. if both parties follow the protocol the final outcome is correct, blindness i.e. the Client to have Server carry out a quantum computation for her (Client) such that the Client’s inputs, outputs and circuit used for computation remain perfectly private from the Server and Universality i.e. the following protocol can implement any quantum computation.


==Use Case==
==Outline==
(Yet to be discussed)
The following Universal Blind Quantum Computation (UBQC) protocol uses the unique feature of Measurement Based Quantum Computation [[Supplementary Information#Measurement Based Quantum Computation (MBQC)|(MBQC)]] that separates the classical and quantum parts of a computation. MBQC requires a set of initial entangled states, called graph states for computation. Here, we shall use a special family of graph states, [[Supplementary Information#Brickwork States|brickwork states]] which are universal (can implement any quantum operation) for X-Y measurements and do not leak any specific data about the computation during preparation. The protocol can be divided into three stages: preparation, computation and output correction.<br/>
'''Tags:''' [[Two Party Protocols|Two Party]], [[Universal Task|Universal Task]], [[Quantum Functionality|Quantum Functionality]],
[[Secure Delegated Quantum Computation|Secure Delegated Quantum Computation]], Quantum Offline communication, Classical Online communication, [[Supplementary Information#Measurement Based Quantum Computation|Measurement Based Quantum Computation (MBQC)]], [[Measurement Only Universal Blind Quantum Computation|Measurement Only UBQC]], [[Pseudo-Secret Random Qubit Generator|Pseudo-Secret Random Qubit Generator (PSQRG)]], [[Prepare and Send Verifiable Universal Blind Quantum Computation|Prepare and Send Verifiable Universal Blind Quantum Computation (VUBQC)]].
 
== Procedure/Outline==
The following Universal Blind Quantum Computation (UBQC) protocol uses the unique feature of Measurement Based Quantum Computation '''[[Supplementary Information#Measurement Based Quantum Computation|(MBQC)]]''' that separates the classical and quantum parts of a computation. MBQC requires a set of initial entangled states, called graph states for computation. Here, we shall use a special family of graph states, '''[[Supplementary Information#Brickwork States|brickwork states]]''' which are universal (can implement any quantum operation) for X-Y measurements and do not leak any specific data about the computation during preparation. The protocol can be divided into three stages: preparation, computation and output correction.<br/>
Preparation stage includes a partially quantum Client preparing and sending quantum states to the Server who constructs the required brickwork state. Computation stage involves interaction. Output Correction involves retrieval of correct output from the results sent by the Server. We shall discuss below three protocols with different attributes but same functionality. All UBQC protocols discussed below require Client to prepare the required quantum states for computation and send those to the Server, hence the name ''Prepare and Send UBQC''. Protocol 1a deals with a partially quantum Client capable of preparing initial quantum states for the construction of brickwork state with classical input/output computation. Protocols 1b and 1c are extensions to accommodate quantum inputs and quantum outputs, respectively.
Preparation stage includes a partially quantum Client preparing and sending quantum states to the Server who constructs the required brickwork state. Computation stage involves interaction. Output Correction involves retrieval of correct output from the results sent by the Server. We shall discuss below three protocols with different attributes but same functionality. All UBQC protocols discussed below require Client to prepare the required quantum states for computation and send those to the Server, hence the name ''Prepare and Send UBQC''. Protocol 1a deals with a partially quantum Client capable of preparing initial quantum states for the construction of brickwork state with classical input/output computation. Protocols 1b and 1c are extensions to accommodate quantum inputs and quantum outputs, respectively.


===Adversarial Assumption===
* This protocol is secure against malicious adversary setting
===Setup Assumptions===
* Protocols 1a-1c need Client to be able to prepare given initial quantum states
* Protocols 1b and 1c need Client to be able to operate single qubit gates
* Protocols 1a-1c need a quantum channel from Client to Server to transfer initial quantum states
* Protocol 1c needs an additional quantum channel from Server to Client to transfer the quantum output
'''Protocol 1a:''' ''Client is assumed to be able to prepare quantum states.''
* '''Client’s preparation''' Client sends the initial qubits for construction of brickwork state to Server in this step. Client has in her mind a quantum computation as a measurement pattern on the brickwork state. She prepares m x n single qubit states with randomly chosen local phase in order to hide her classical inputs later.
* '''Client’s preparation''' Client sends the initial qubits for construction of brickwork state to Server in this step. Client has in her mind a quantum computation as a measurement pattern on the brickwork state. She prepares m x n single qubit states with randomly chosen local phase in order to hide her classical inputs later.
* '''Server’s preparation''' Server prepares brickwork state of m rows and n columns. It entangles all the received qubits as per Client’s instructions. Thus, ends preparation stage.
* '''Server’s preparation''' Server prepares brickwork state of m rows and n columns. It entangles all the received qubits as per Client’s instructions. Thus, ends preparation stage.
* '''Interaction and Measurement''' Client and Server interact to perform operations needed for computation. For a given computation and graph state, MBQC provides a measurement angle and some extra Pauli X, Z corrections, for each qubit. The correction sets (also called Dependency sets), unique for every graph state are based on previous measurement outcomes and can be obtained from '''[[Supplementary Information#Flow Construction-Determinism|flow construction]]'''. Also, as Client’s input state has random local phase, the same should be added to the measurement angle for computation along with Pauli Corrections to get the correct outcome. Now, in order to hide the output, Client randomly chooses to add a π rotation or not. The final measurement angle includes all the above parameters and hence, is sent to the Server. When Server returns the classical outcome, Client gets the correct outcome by taking into account the random π rotation and then uses it to calculate measurement angle for for the next qubit. The step is repeated until every qubit has been measured. Server returns measurement outcomes for the last column to Client. Client deciphers this outcome to get the final result. This ends the computation stage.
* '''Interaction and Measurement''' Client and Server interact to perform operations needed for computation. For a given computation and graph state, MBQC provides a measurement angle and some extra Pauli X, Z corrections, for each qubit. The correction sets (also called Dependency sets), unique for every graph state are based on previous measurement outcomes and can be obtained from '''[[Supplementary Information#Flow Construction-Determinism|flow construction]]'''. Also, as Client’s input state has random local phase, the same should be added to the measurement angle for computation along with Pauli Corrections to get the correct outcome. Now, in order to hide the output, Client randomly chooses to add a π rotation or not. The final measurement angle includes all the above parameters and hence, is sent to the Server. When Server returns the classical outcome, Client gets the correct outcome by taking into account the random π rotation and then uses it to calculate measurement angle for for the next qubit. The step is repeated until every qubit has been measured. Server returns measurement outcomes for the last column to Client. Client deciphers this outcome to get the final result. This ends the computation stage.
'''Protocol 1b:''' ''Protocol 1a can be modified as follows if Client is provided with m quantum input states beforehand. Client is assumed to be able to prepare quantum states and apply single qubit gates (Pauli gates).''
* '''Client’s input preparation''' This step encrypts the input state column using quantum one time pad. Client rotates her input qubits using single qubit gate Z(θ), in order to add random local phase. She randomly chooses to flip each qubit using single qubit gate X or do nothing. She then sends these qubits to Server. This is the only extra step as compared to Protocol 1a.
* '''Client’s auxilliary preparation''' This step is exactly same as Client’s preparation of m x n initial quantum states for brickwork state in Protocol 1a.
*''' Server’s preparation''' Server prepares brickwork state of m rows and n+1 columns in the order instructed by the Client. The ’m’ quantum inputs constitute the first column of brickwork state for this protocol. Thus ends the preparation stage
* '''Interaction and Measurement''' This step remains the same as Protocol 1a except that the bit flip used to hide Client’s input is taken care of while computing measurement angle to be sent for the first column.
'''Protocol 1c:''' ''This protocol is different from Protocol 1a such that the last column of the brickwork state is not measured but sent back to the Client. Client is assumed to be able to prepare quantum states and apply single qubit gates (Pauli gates). The following steps account for the modified protocol.''
* '''Client’s auxilliary preparation''' This step is exactly same as Client’s preparation in Protocol 1a. The difference being, she prepares only m x n-1 initial states this time.
* '''Client’s output preparation''' The nth column of brickwork state contains quantum states with zero local phase.
* '''Server’s preparation''' Server prepares brickwork state of m rows and n columns in the order instructed by the Client.
* '''Interaction and Measurement''' This step remains exactly the same as Protocol 1a
* '''Output Correction''' In this step Client applies the Pauli Corrections X, Z on the last column of qubits sent to her by the server.


Figure
==Requirements==
*'''Network Stage:''' [[:Category:Quantum Memory Network Stage|Quantum Memory]] [[Category:Quantum Memory Network Stage]]
*'''Required Network Parameters:'''
**'''<math>\epsilon_j</math>''', which measures the error due to noisy operations.
**Number of communication rounds
**Circuit depth
**Number of physical qubits used
*Client should have preparation devices
*Quantum offline channel
*Classical online channel
*Server should be able to generate and store large network of entangled quantum states.


== Properties ==
==Knowledge Graph==


{{graph}}


===Parameters===
==Properties==
* (m,n) define dimensions of the brickwork state
*(m,n) define dimensions of the brickwork state
===Performance===
*This protocol is secure/blind in every setting (universal)
*The Protocol needs Client to be able to prepare given initial quantum states
*The Protocols needs a quantum channel from Client to Server to transfer initial quantum states
*This protocol requires no quantum memory for the Client
*This protocol requires no quantum memory for the Client
* ''Universality'' As brickwork states are universal for X-Y plane measurements, the protocol is universal. This protocol uses approximate universality although exact universality can be achieved if Client if allowed to communicate real numbers.
*This protocol is universally composable [[Prepare-and-Send Universal Blind Quantum Computation#References|(1)]]
* ''Correctness'' If Client and Server follow protocols 1a-1c as described above, the outcome will be correct.
*[[Secure Client- Server Delegated Quantum Computation#Properties|Universality]] As brickwork states are universal for X-Y plane measurements, the protocol is universal. This protocol uses approximate universality although exact universality can be achieved if Client if allowed to communicate real numbers.
* ''Blindness'' Protocols 1a-1c are blind while leaking at most (m,n) to the Server
*[[Secure Client- Server Delegated Quantum Computation#Properties|Correctness]] If Client and Server follow the protocol as described above, the outcome will be correct.
*The protocol is unconditionally secure i.e. no matter what Server does he cannot learn Client's inputs/outputs/computation.
*[[Secure Client- Server Delegated Quantum Computation#Properties|Blindness]] The protocol is blind while leaking at most (m,n) to the Server.


== Pseudo-Code==
==Notations==
=== Notations===
**<math>\phi</math>, measurement angle for given MBQC pattern to implement the required computation
* φ, measurement angle for given MBQC pattern to implement the required computation
**<math>\phi_0</math>, measurement angle including Pauli X,Z corrections
* φ0, measurement angle including Pauli X,Z corrections
**<math>s_X,s_Z</math> Dependency sets for Pauli X and Pauli Z corrections, respectively (obtained from flow construction).
* sX,sZ Dependency sets for Pauli X and Pauli Z corrections, respectively (obtained from flow construction).
**<math>\theta</math>, randomly chosen angles by Client in order to hide classical input
* θ, randomly chosen angles by Client in order to hide classical input
** r <math>\epsilon_R\{0,1\}</math>, randomly chosen parameter for <math>\pi</math> rotation in order to hide classical output
* {math missing}, randomly chosen parameter for π rotation in order to hide classical output
**<math>\delta_x,y</math>, final measurement angle for the qubit at position (x,y) in the brickwork state
* {math missing}, randomly chosen parameter for bit flip in order to hide quantum input
* δ, final measurement angle
===Protocol=== 
*Unless given specific mention in [.], following steps apply to all the three protocols 1a-1c


===Preparation Stage===
==Protocol Description==
*Input: Client: Dimeonsions of Brickwork State (m,n), Input States (ψ0,y) [Protocol 1b only], Auxilliary Input States (ψx,y)
[https://github.com/cgmcintyr/SimulaQron/tree/develop/examples/ubqc <u>click here for SimulaQron code</u>]
*Output: Server: Brickwork State Gmxn
==='''Stage 1:''' Preparation===
'''Client [Protocol 1a]'''
*Input: Client: Dimensions of Brickwork State (m,n), Input States (<math>\psi_{0,y})</math>, Auxilliary Input States (<math>\psi_{x,y}</math>)
# Client’s preparation
*Output: Server: Brickwork State <math>G_{\text{mxn}}</math>
**'''Client’s preparation'''  
##For each column x = 1,...,n
##For each column x = 1,...,n
###For each row y = 1,...,m
###For each row y = 1,...,m
#### Client prepares  and sends the qubits to Server.
#### Client prepares  and sends the qubits to Server.
'''Client [Protocol 1b]'''
**'''Server’s preparation'''
# Client’s input preparation
#Server creates an entangled state from all received qubits, according to their indices, by applying CTRL-Z gates between the qubits in order to create a brickwork state <math>G_{\text{n x m}}</math>.
##For the input column (x = 0,y = 1,...,m) corresponding to Client’s input
 
### Client applies Z0,y(θ0,y) for θ0,y ∈R {0,π/4,2π/4,...,7π/4}.
==='''Stage 2:''' Computation Stage===
### Client chooses i0,y ∈R {0,1} and applies . She sends the qubits to Server.
*Input: Client: Measurement Angle: <math>\delta_{x,y}</math>
#Client’s auxiliary preparation
*Output: Server: Measurement Outcome: <math>s_{x,y}</math>
##For each column x = 1,...,n
**'''Interaction and measurement'''
###For each row y = 1,...,m
#For each column x = 1,...,n  
#### Client prepares |ψx,yi ∈R {|+θx,yi | θx,y = 0,π/4,2π/4,...,7π/4} and sends the qubits to Server.
'''Client [Protocol 1c]'''
# Client’s auxiliary preparation
##For each column x = 1,...,n − 1
###For each row y = 1,...,m
#### Client prepares |ψx,yi ∈R {|+θx,yi | θx,y = 0,π/4,2π/4,...,7π/4} and sends the qubits to Server.
#Client’s output preparation
#### Client prepares the last column of qubits |ψn,yi = |+i (y = 1,...,m) and sends the qubits
to Server.
'''Server’s preparation [Protocols 1a, 1b and 1c]'''
# Server creates an entangled state from all received qubits, according to their indices, by applying ctrl-Z gates between the qubits in order to create a brickwork state Gn×m for Protocols 1a and 1c while Gn+1×m for Protocol 1b.
===Computation Stage===
*Input: Client: Measurement Angle: δx,y
*Output: Server: Measurement Outcome: sx,y
'''Interaction and measurement'''
#For each column x = 1,...,n [Protocols 1a and 1b]; For each column x = 1,...,n−1 [Protocol 1c]
##For each row y = 1,...,m
##For each row y = 1,...,m
### For Protocols 1a and 1c, Client computes φ0x,y where{equation missing} <br/>For Protocol 1b, Client computes  with the special case .
###Client computes <math>\phi '_{x,y}</math> where <math>s^X_{0,y}=s^Z_{0,y}=0</math> <br/>
### Client chooses rx,y ∈R {0,1} and computes .
###Client chooses <math>r_{x,y} \epsilon_R {0,1}</math> and computes <math>\delta_{x,y}=\phi '_{x,y}+\theta_{x,y}+\pi r_{x,y}</math>.
### Client transmits δx,y to Server. Server measures in the basis {|+δx,yi,|−δx,yi}.
###Client transmits <math>\delta_{x,y}</math> to Server. Server measures in the basis <math>\{|+_{\delta_{x,y}}\rangle, |-_{\delta_{x,y}}\rangle\}</math>
### Server transmits the result sx,y {0,1} to Client.
###Server transmits the result <math>s_{x,y}\epsilon {0,1}</math> to Client.
### If rx,y = 1 above, Client flips sx,y; otherwise she does nothing.
###If <math>r_{x,y} = 1,</math> Client flips <math>s_{x,y}</math>; otherwise she does nothing.
'''Output Correction [Protocol 1c only]'''
**'''Output Correction [only for quantum outputs]'''
# Server sends to Client all qubits in the last layer.
#Server sends to Client all qubits in the last layer.
# Client performs the final Pauli corrections .
#Client performs the final Pauli corrections .


== References==
==References==
#[https://arxiv.org/abs/1301.3662 Dunjko et al (2014)]


== Requirements ==
<div style='text-align: right;'>''*contributed by Shraddha Singh''</div>

Latest revision as of 15:39, 16 October 2019

The example protocol achieves the functionality of Secure Client- Server Delegated Quantum Computation by assigning quantum computation to an untrusted device while maintaining privacy of the input, output and computation of the client. The client requires to be able to prepare and send quantum states while the server requires to possess a device with quantum memory, measurement and entanglement generation technology. Following description deals with a method which involves quantum offline and classical online communication, called Blind Quantum Computation. It means the protocol needs one-time quantum communication at the end or starting of the protocol while continuous classical communication between the parties, throughout the execution. It comes with the properties of correctness, blindness and universality.

Tags: Two Party,Universal Task, Quantum Functionality, Quantum Offline communication, Classical Online communication, Measurement Based Quantum Computation (MBQC), Measurement Only UBQC, Pseudo-Secret Random Qubit Generator (PSQRG), Prepare and Send Verifiable Universal Blind Quantum Computation (VUBQC).

Outline[edit]

The following Universal Blind Quantum Computation (UBQC) protocol uses the unique feature of Measurement Based Quantum Computation (MBQC) that separates the classical and quantum parts of a computation. MBQC requires a set of initial entangled states, called graph states for computation. Here, we shall use a special family of graph states, brickwork states which are universal (can implement any quantum operation) for X-Y measurements and do not leak any specific data about the computation during preparation. The protocol can be divided into three stages: preparation, computation and output correction.
Preparation stage includes a partially quantum Client preparing and sending quantum states to the Server who constructs the required brickwork state. Computation stage involves interaction. Output Correction involves retrieval of correct output from the results sent by the Server. We shall discuss below three protocols with different attributes but same functionality. All UBQC protocols discussed below require Client to prepare the required quantum states for computation and send those to the Server, hence the name Prepare and Send UBQC. Protocol 1a deals with a partially quantum Client capable of preparing initial quantum states for the construction of brickwork state with classical input/output computation. Protocols 1b and 1c are extensions to accommodate quantum inputs and quantum outputs, respectively.

  • Client’s preparation Client sends the initial qubits for construction of brickwork state to Server in this step. Client has in her mind a quantum computation as a measurement pattern on the brickwork state. She prepares m x n single qubit states with randomly chosen local phase in order to hide her classical inputs later.
  • Server’s preparation Server prepares brickwork state of m rows and n columns. It entangles all the received qubits as per Client’s instructions. Thus, ends preparation stage.
  • Interaction and Measurement Client and Server interact to perform operations needed for computation. For a given computation and graph state, MBQC provides a measurement angle and some extra Pauli X, Z corrections, for each qubit. The correction sets (also called Dependency sets), unique for every graph state are based on previous measurement outcomes and can be obtained from flow construction. Also, as Client’s input state has random local phase, the same should be added to the measurement angle for computation along with Pauli Corrections to get the correct outcome. Now, in order to hide the output, Client randomly chooses to add a π rotation or not. The final measurement angle includes all the above parameters and hence, is sent to the Server. When Server returns the classical outcome, Client gets the correct outcome by taking into account the random π rotation and then uses it to calculate measurement angle for for the next qubit. The step is repeated until every qubit has been measured. Server returns measurement outcomes for the last column to Client. Client deciphers this outcome to get the final result. This ends the computation stage.

Requirements[edit]

  • Network Stage: Quantum Memory
  • Required Network Parameters:
    • , which measures the error due to noisy operations.
    • Number of communication rounds
    • Circuit depth
    • Number of physical qubits used
  • Client should have preparation devices
  • Quantum offline channel
  • Classical online channel
  • Server should be able to generate and store large network of entangled quantum states.

Knowledge Graph[edit]

Properties[edit]

  • (m,n) define dimensions of the brickwork state
  • This protocol is secure/blind in every setting (universal)
  • The Protocol needs Client to be able to prepare given initial quantum states
  • The Protocols needs a quantum channel from Client to Server to transfer initial quantum states
  • This protocol requires no quantum memory for the Client
  • This protocol is universally composable (1)
  • Universality As brickwork states are universal for X-Y plane measurements, the protocol is universal. This protocol uses approximate universality although exact universality can be achieved if Client if allowed to communicate real numbers.
  • Correctness If Client and Server follow the protocol as described above, the outcome will be correct.
  • Blindness The protocol is blind while leaking at most (m,n) to the Server.

Notations[edit]

    • , measurement angle for given MBQC pattern to implement the required computation
    • , measurement angle including Pauli X,Z corrections
    • Dependency sets for Pauli X and Pauli Z corrections, respectively (obtained from flow construction).
    • , randomly chosen angles by Client in order to hide classical input
    • r , randomly chosen parameter for rotation in order to hide classical output
    • , final measurement angle for the qubit at position (x,y) in the brickwork state

Protocol Description[edit]

click here for SimulaQron code

Stage 1: Preparation[edit]

  • Input: Client: Dimensions of Brickwork State (m,n), Input States (, Auxilliary Input States ()
  • Output: Server: Brickwork State
    • Client’s preparation
    1. For each column x = 1,...,n
      1. For each row y = 1,...,m
        1. Client prepares and sends the qubits to Server.
    • Server’s preparation
  1. Server creates an entangled state from all received qubits, according to their indices, by applying CTRL-Z gates between the qubits in order to create a brickwork state .

Stage 2: Computation Stage[edit]

  • Input: Client: Measurement Angle:
  • Output: Server: Measurement Outcome:
    • Interaction and measurement
  1. For each column x = 1,...,n
    1. For each row y = 1,...,m
      1. Client computes where
      2. Client chooses and computes .
      3. Client transmits to Server. Server measures in the basis
      4. Server transmits the result to Client.
      5. If Client flips ; otherwise she does nothing.
    • Output Correction [only for quantum outputs]
  1. Server sends to Client all qubits in the last layer.
  2. Client performs the final Pauli corrections .

References[edit]

  1. Dunjko et al (2014)
*contributed by Shraddha Singh