Editing GHZ-based Quantum Anonymous Transmission
The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.
| Latest revision | Your text | ||
| Line 1: | Line 1: | ||
The GHZ-based quantum anonymous transmission protocol implements the task of [[Anonymous Transmission]] in a <math>n</math>-node quantum network. The protocol uses <math>n</math>-partite [[GHZ state]] to enable two parties, sender <math>S</math> and receiver <math>R</math>, to establish a link which they use to transmit a quantum message. Importantly, the quantum message is transmitted in a way that the identity of <math>S</math> is unknown to every other node, and the identity of <math>R</math> is known only to <math>S</math>. | |||
'''Tags:''' [[:Category: Quantum Enhanced Classical Functionality|Quantum Enhanced Classical Functionality]][[Category: Quantum Enhanced Classical Functionality]], [[:Category: Multi Party Protocols|Multi Party Protocols]] [[Category: Multi Party Protocols]], [[:Category:Specific Task|Specific Task]][[Category:Specific Task]], GHZ state, anonymous transmission | '''Tags:''' [[:Category: Quantum Enhanced Classical Functionality|Quantum Enhanced Classical Functionality]][[Category: Quantum Enhanced Classical Functionality]], [[:Category: Multi Party Protocols|Multi Party Protocols]] [[Category: Multi Party Protocols]], [[:Category:Specific Task|Specific Task]][[Category:Specific Task]], GHZ state, anonymous transmission | ||
==Assumptions== | ==Assumptions== | ||
* | Availability of the following is assumed: | ||
* | * Pairwise [[authenticated]] private classical channels | ||
* [[Broadcast]] channel | |||
* [[Trusted]] [[multipartite]] source | |||
==Outline== | ==Outline== | ||
The presented GHZ-based quantum | The presented GHZ-based quantum anounymous transmission protocol is based on the work of [[GHZ State based Quantum Anonymous Transmission#Refrences|(6)]]. The goal of the protocol is to transmit a quantum state <math>|\psi</math> from the sender <math>S</math> to the receiver <math>R</math>, while keeping the identities of <math>S</math> and <math>R</math> anonymous. We assume that there is exactly one receiver which is determined before the start of the protocol. The protocol consists of the following steps. | ||
* ''Collision detection:'' Nodes run a collision detection protocol to determine a single sender <math>S</math>. | * ''Collision detection:'' Nodes run a collision detection protocol to determine a single sender <math>S</math>. | ||
* ''State distribution:'' A trusted source distributes the <math>n</math>-partite GHZ state. | * ''State distribution:'' A trusted source distributes the <math>n</math>-partite GHZ state. | ||
| Line 15: | Line 16: | ||
==Notation== | ==Notation== | ||
* <math>n</math> | * <math>n</math> number of network nodes taking part in the anonymous transmission. | ||
* <math>|\psi\rangle</math> | * <math>|\psi\rangle</math> quantum message which the sender wants to send anonymously | ||
* <math>S</math> | * <math>S</math> the sender of the quantum message | ||
* <math>R</math> | * <math>R</math> the receiver of the quantum message | ||
==Requirements== | ==Hardware Requirements== | ||
*Network stage: [[:Category: Quantum Memory Network Stage| | *Network stage: [[:Category: Quantum Memory Network Stage|(Fault-tolerant) Quantum computing network stage]][[Category:Quantum Memory Network Stage]] | ||
* Relevant parameters to establish one anonymous link: <math>k=1</math> round of quantum communication per node, circuit depth <math>m=1</math>, <math>q=1</math> physical qubits per node. | * Relevant parameters to establish one anonymous link: <math>k=1</math> round of quantum communication per node, circuit depth <math>m=1</math>, <math>q=1</math> physical qubits per node. | ||
* Quantum memories, single-qubit Pauli gates and single-qubit measurements at the end nodes. | * Quantum memories, single-qubit Pauli gates and single-qubit measurements at the end nodes. | ||
==Properties== | ==Properties== | ||
See [[Quantum Anonymous Transmission]] for the precise security definition. [[GHZ State based Quantum Anonymous Transmission#Pseudocode|Pseudocode]] | See [[Quantum Anonymous Transmission]] for the precise security definition. [[GHZ State based Quantum Anonymous Transmission#Pseudocode|Pseudocode]] implements secure anonymous transmission, i.e. it hides the identities of the sender and the receiver from other nodes in the network. That is, the maximum probability that adversaries guess the identity of <math>S</math> or <math>R</math> given all the classical and quantum information they have available at the end of the protocol is no larger than the uncertainty the adversaries have about the identities of <math>S</math> and <math>R</math> before the protocol begins. More formally, the anonymous transmission protocol with the GHZ state, [[GHZ State based Quantum Anonymous Transmission#Pseudocode|Pseudocode]], is sender- and receiver-secure:</br> | ||
<math>P_{\text{guess}}[S|C,S\notin \mathcal{A}] \leq \max_{i\in[n]} P[S=i|S\notin \mathcal{A}] = \frac{1}{n-t},</math></br> | <math>P_{\text{guess}}[S|C,S\notin \mathcal{A}] \leq \max_{i\in[n]} P[S=i|S\notin \mathcal{A}] = \frac{1}{n-t},</math></br> | ||
<math>P_{\text{guess}}[R|C,S\notin \mathcal{A}] \leq \max_{i\in[n]} P[R=i|S\notin \mathcal{A}] = \frac{1}{n-t},</math></br> | <math>P_{\text{guess}}[R|C,S\notin \mathcal{A}] \leq \max_{i\in[n]} P[R=i|S\notin \mathcal{A}] = \frac{1}{n-t},</math></br> | ||
where <math>\mathcal{A}</math> is the subset of <math>t</math> adversaries among <math>n</math> nodes and <math>C</math> is the register that contains all classical and quantum side information accessible to the adversaries. Note that this implies that the protocol is also | where <math>\mathcal{A}</math> is the subset of <math>t</math> adversaries among <math>n</math> nodes and <math>C</math> is the register that contains all classical and quantum side information accessible to the adversaries. Note that this implies that the protocol is also traceless, since even if the adversary hijacks any <math>t\leq n-2</math> players and gains access to all of their classical and quantum information after the end of the protocol, she cannot learn the identities of <math>S</math> and <math>R</math>. For a formal argument see [[GHZ State based Quantum Anonymous Transmission#References|(6)]]. | ||
== | ==Pseudocode== | ||
Receiver <math>R</math> is determined before the start of the protocol. <math>S</math> holds a message qubit <math>|\psi\rangle</math>. | Receiver <math>R</math> is determined before the start of the protocol. <math>S</math> holds a message qubit <math>|\psi\rangle</math>. | ||
# Nodes run a collision detection protocol and determine a single sender <math>S</math>. | # Nodes run a collision detection protocol and determine a single sender <math>S</math>. | ||
# A trusted source distributes <math>n</math>-partite GHZ state to every player, <math>|GHZ\rangle = \frac{1}{\sqrt{2}} (|0^n\rangle + |1^n\rangle)</math>. | # A trusted source distributes <math>n</math>-partite GHZ state to every player, <math>|GHZ\rangle = \frac{1}{\sqrt{2}} (|0^n\rangle + |1^n\rangle)</math>. | ||
* Anonymous entanglement: | |||
## Sender <math>S</math> and receiver <math>R</math> do not do anything to their part of the state. | ## Sender <math>S</math> and receiver <math>R</math> do not do anything to their part of the state. | ||
## Every player <math>j \in [n] \setminus \{S,R\}</math>: | ## Every player <math>j \in [n] \setminus \{S,R\}</math>: | ||
| Line 48: | Line 45: | ||
## <math>S</math> applies a phase flip <math>Z</math> to her qubit if <math>b=1</math>. | ## <math>S</math> applies a phase flip <math>Z</math> to her qubit if <math>b=1</math>. | ||
## <math>R</math> picks a random bit <math>b' \in_R \{ 0,1 \}</math> and broadcasts <math>b'</math>. | ## <math>R</math> picks a random bit <math>b' \in_R \{ 0,1 \}</math> and broadcasts <math>b'</math>. | ||
## <math>R</math> applies a phase flip <math>Z</math> to her qubit, if <math>b \oplus \bigoplus_{j \in [n] \setminus \{S,R\}} m_j = 1</math>. < | ## <math>R</math> applies a phase flip <math>Z</math> to her qubit, if <math>b \oplus \bigoplus_{j \in [n] \setminus \{S,R\}} m_j = 1</math>. <div style='text-align: right;'>''<math>S</math> and <math>R</math> share anonymous entanglement <math>|\Gamma\rangle_{SR} = \frac{1}{\sqrt{2}} (|00\rangle + |11\rangle)</math>.''</div> | ||
# <math>S</math> uses the quantum teleportation circuit with input <math>|\psi\rangle</math> and anonymous entanglement <math>|\Gamma\rangle_{SR}</math>, and obtains measurement outcomes <math>m_0, m_1</math>. | # <math>S</math> uses the quantum teleportation circuit with input <math>|\psi\rangle</math> and anonymous entanglement <math>|\Gamma\rangle_{SR}</math>, and obtains measurement outcomes <math>m_0, m_1</math>. | ||
# The players run a protocol to anonymously send bits <math>m_0,m_1</math> from <math>S</math> to <math>R</math> (see | # The players run a protocol to anonymously send bits <math>m_0,m_1</math> from <math>S</math> to <math>R</math> (see Discussion for details). | ||
# <math>R</math> applies the transformation described by <math>m_0,m_1</math> on his part of <math>|\Gamma\rangle_{SR}</math> and obtains <math>|\psi\rangle_{SR}</math>. | # <math>R</math> applies the transformation described by <math>m_0,m_1</math> on his part of <math>|\Gamma\rangle_{SR}</math> and obtains <math>|\psi\rangle_{SR}</math>. | ||
==Further Information== | ==Further Information== | ||
* To determine the sender <math>S</math> (Step 1) one can run either a classical collision detection protocol of [[GHZ State based Quantum Anonymous Transmission#References| | * To determine the sender <math>S</math> (Step 1) one can run either a classical collision detection protocol of [[GHZ State based Quantum Anonymous Transmission#References|(4)]] or a quantum collision detection protocol of [[GHZ State based Quantum Anonymous Transmission#References|(6)]]. The quantum version of the protocol requires additional <math>(\left\lceil \log n \right\rceil + 1)</math> GHZ states. | ||
* To determine the receiver <math>R</math> during the protocol one can incorporate an additional step using a classical receiver notification protocol of [[GHZ State based Quantum Anonymous Transmission#References| | * To determine the receiver <math>R</math> during the protocol one can incorporate an additional step using a classical receiver notification protocol of [[GHZ State based Quantum Anonymous Transmission#References|(4)]]. | ||
* To send classical teleportation bits <math>m_0,m_1</math> (Step 5) the players can run a classical logical OR protocol of [[GHZ State based Quantum Anonymous Transmission#References| | * To send classical teleportation bits <math>m_0,m_1</math> (Step 5) the players can run a classical logical OR protocol of [[GHZ State based Quantum Anonymous Transmission#References|(4)]] or anonymous transmission protocol for classical bits with quantum resources of [[GHZ State based Quantum Anonymous Transmission#References|(6)]]. The quantum protocol requires one additional GHZ state for transmitting one classical bit. | ||
* The anonymous transmission of quantum states was introduced in [[GHZ State based Quantum Anonymous Transmission#References| | * The anonymous transmission of quantum states was introduced in [[GHZ State based Quantum Anonymous Transmission#References|(6)]]. | ||
* The problem was subsequently developed to consider the preparation and certification of the GHZ state [[GHZ State based Quantum Anonymous Transmission#References| | * The problem was subsequently developed to consider the preparation and certification of the GHZ state [[GHZ State based Quantum Anonymous Transmission#References|(3), (5)]]. | ||
* In [[GHZ State based Quantum Anonymous Transmission#References| | * In [[GHZ State based Quantum Anonymous Transmission#References|(5)]], it was first shown that the proposed protocol is information-theoretically secure against an active adversary. | ||
* In [[GHZ State based Quantum Anonymous Transmission#References| | * In [[GHZ State based Quantum Anonymous Transmission#References|(1)]] a protocol using another multipartite state, the W state, was introduced. The reference discusses noise robustness of both GHZ-based and W-based protocols and compares the performance of both protocols. | ||
* Other protocols were proposed, which do not make use of multipartite entanglement, but | * Other protocols were proposed, which do not make use of multipartite entanglement, but utilize solely Bell pairs to create anonymous entanglement [[GHZ State based Quantum Anonymous Transmission#References|(2)]]. | ||
==References== | ==References== | ||
| Line 68: | Line 65: | ||
#[https://ieeexplore.ieee.org/document/4077005 Bouda et al (2007)] | #[https://ieeexplore.ieee.org/document/4077005 Bouda et al (2007)] | ||
#[https://arxiv.org/abs/0706.2010 Broadbent et al (2007)] | #[https://arxiv.org/abs/0706.2010 Broadbent et al (2007)] | ||
#[https://arxiv.org/abs/ | #[https://arxiv.org/abs/quant-ph/9901035 Brassard et al (2007)] | ||
#[https:// | #[https://link.springer.com/chapter/10.1007/11593447_12 Christandl et al (2005)] | ||
==Further Information== | |||
<div style='text-align: right;'>''contributed by Victoria Lipinska''</div> | <div style='text-align: right;'>''*contributed by Victoria Lipinska''</div> | ||