Quantum Key Distribution with High Order Fibonaccilike Orbital Angular Momentum States
Abstract
The coding space in quantum communication could be expanded to highdimensional space by using orbital angular momentum (OAM) states of photons, as both the capacity of the channel and security are enhanced. Here we present a novel approach to realize highcapacity quantum key distribution (QKD) by exploiting OAM states. The innovation of the proposed approach relies on a unique type of entangledphoton source which produces entangled photons with OAM randomly distributed among high order Fibonccilike numbers and a new physical mechanism for efficiently sharing keys. This combination of entanglement with mathematical properties of high order Fibonacci sequences provides the QKD protocol which is immune to photonnumbersplitting attacks and allows secure generation of long keys from few photons. Unlike other protocols, reference frame alignment and active modulation of production and detection bases are unnecessary.
Orbital angular momentum; quantum key distribution; high order Fibonaccilike sequence .
1 Introduction
\IEEEPARstartSecure keys generation between distant users could be realized by using quantum key distribution (QKD) [1, 2, 3, 4]. QKD is to encode and decode the classical keys on the quantum state of single photons, traditionally on the polarization degrees of freedom or the phase degrees of freedom. The noncloning principle guarantees the security of the QKD process, and that any eavesdropping behavior could be discovered by the communication parties.
However, the high channel loss and low channel capacity are two main disadvantages of quantum communications. During the past decades, various approaches are exploited to reduce the channel loss and extend the communication distance [5, 6]. On the other hand, increasing the dimension of quantum systems would increase the channel capacity which brings several advantages for quantum communication [7, 8, 9]. For example, the coding capacity and the security are increased along with the increment of the Hilbert space, and with the increment of the mutually unbiased bases [10, 11, 12, 13]. Here the larger Hilbert space could be realized by using multilevel atoms [14, 15], hyperentangled photons [16, 17], or the orbital angular momentum (OAM) state of single photons [18, 19, 20].
Especially, by using OAM state of photons [21], several novel applications in quantum information have been proposed [22, 23, 24], for instance, golden angle (GA) spiral arrays can be applied to generate multiple OAM values encoding welldefined numerical sequences on their farfield radiation patterns [25]. It may also be possible to combine GA spirals with spontaneous parametric down conversion (SPDC) in a nonlinear crystal to engineer a new type of entangled light source, which produces photon pairs whose summation of OAM values is a Fibonacci number. This novel setup allows efficient production of states with large OAM values in quantum communications [26].
Here in this study, we propose a highcapacity coding method and an efficient QKD scheme by employing high order Fibonacci sequence recursion onto OAM states to create a different optical spiral. The third order Fibonacci recursion provides several properties for us to to improve the security from eavesdropping through generating encryption keys with large numbers of digits by using much smaller numbers of photons.
2 Quantum key distribution using OAM states encoded by thirdorder Fibonacci sequence
Recently, Simon et al. presented a highcapacity QKD scheme by randomly encoding the Fibonacci sequence onto entangled OAM states [27]. Here by introducing the higher order Fibonacci recursion relation, we start with the thirdorder recursion relation as = , here we assign the initial values as and . The optical vortices which have been employed for communication can be generated in several different ways: spiral phase plate can generate optical vortices with OAM equals to ; the transformation from HermiteGaussian (HG) mode to LaguerreGaussian (LG) mode can also be useful to generate the optical vortices we need. Diffractive optical elements can provide another way to generate the optical vortices, for example, by using inhomogeneous anisotropic media [28].
2.1 Basic setup
Here the source light is prepared in a superposition state with OAM values equal to thirdorder Fibonacci numbers as (1, 2, 3, 6, 11, 20, 37, 68, …). And we choose as the consecutive values, = {}, and assign a block of binary digits to each so that equal numbers of 0’s and 1’s occur. Each photon should be able to generate bits of information if OAM values in this set are used. For simplicity, we set to illustrate the principle for qubits coding. The thirdorder Fibonacci numbers from 1 to 68 can be assigned to threedigit blocks as follows: = , , , , , , , . Three key digits could be encoded on the OAM of a single photon. The SPDC spiral bandwidth is able to span the largest gap in . It is obvious that both information capacity and security could be improved with larger sets . To simplify the case, we assume that OAM sorters only allow positive OAM values to reach the detectors.
As shown in Fig.1, two SPDC processes are exploited for the generation of entangled OAM states in third order Fibonacci sequence. After the first SPDC process, one of each pair () is sent straight to Bob while the OAM sorters are arranged to allow only photons with OAM in () to register. The other photon(), however, needs another SPDC process to be turned into pairs () before sending to Alice. The photons reserved by Alice should also be sent through the same OAM sorters as Bob’s to make sure that only photons with OAM equal to thirdorder Fibonacci numbers are eventually retained. As the collinear SPDC (type I or type II) OAM conservations implies the relations . In this case, the thirdorder Fibonacci recursion forces , and to be the three adjacent thirdorder Fibonacci numbers immediately preceding . For example, by taking , , and should be in the set .
Moreover, we develop a set of regulations which allows Alice and Bob to generate the three bits’ communication through classical channel. And the quantum keys could be generated by the classical calculation on the shared bits.
n  1  2  3  4  5  6  7  8  9  10 
1  2  3  6  11  20  37  68  125  230  
Sending bits ()  0  0  0  0  1  1  1  1  0  0 
Center(c) or edge(e)  e  c  c  e  e  c  c  e  e  c 
As is illustrated in TABLE 1, we allocate one binary bit to each OAM value under the rules as: if ( mod , then , otherwise . Here in TABLE 1, we can see that there are only two kinds of bits: are on the ”edge” of each set while are in the ”center” of each set.
Based on Alice’s possible reception of photons, we can divide all possible situations into 5 categories, as illustrated in TABLE 2. For example, if Alice measures two adjacent OAM values in the thirdorder Fibonacci sequence, like with in the third row of TABLE 2, then Bob could have the photon with () or (). In comparison, the classification from Bob’s angle is much simple who has only one photon thus he can only anticipate three possible evaluations for original OAM value .
Alice  Bob  

type  type  
adjacent  (c,c)  (1,1)  e  1/1  
(c,e)  (1,1)  c/e  1/0  
(e,e)  (1,0)  c  1/0  
discontinuous  (c,e)  (1,1)  c  1  
(1,0)  e  1 
2.2 The regulations of the QKD protocol
Here we present a set of regulation for both Alice and Bob to send binary bits to each other in order to realize practical communication.
As is illustrated in TABLE 3, on Alice’s side, her first rule is that if she obtains two photons with OAM values equal to and where and satisfies: and , then Alice sends to Bob first. After that Alice will send another to Bob after receiving the responding bit from Bob. Otherwise as her second rule, Alice sends either or to Bob first and sends or to Bob after receiving the responding bit from Bob.
Alice (, )  The first bit Alice  The second bit Alice 

sends to Bob  sends to Bob  
()  ()  
On Bob’s side, here we also define two rules for coding, as is illustrated in TABLE 4.
First, if Bob obtains the photon with OAM value equal to where mod (Bob’s bit is a ”central” bit). Then if Bob can dope out at least one of Alice’s values after she sends her first bit, he would send ””; otherwise he would send ”” to illustrate his inability to dope out any of Alice’s values. This is called the recognition flag for it allows Bob to tell Alice if he is able to dope out at least one OAM value of hers from only the first bit she sends. To be more clear in this situation, if Alice sends Bob , then Bob sends ””. Or he sends ”” on condition that he receives Alice’s result as .
Second, if Bob has the photon with OAM value equal to where mod (Bob’s bit is an ”edge” bit). If Alice sends him , then Bob sends the recognition flag as is stated in 1, which is ”” in this particular case. Otherwise if Alice sends Bob , then Bob sends to Alice. This would illustrate if Bob’s bit is on the ”right” edge or the ”left” edge of its set.
Bob’s bit (c/e)  The first bit Bob  The bit Bob sends to Alice 

()  receives from Alice()  
c  1  
0  
e  1  
The whole regulation is showed in TABLE 5.
Alice()  Bob()  Alice sends to Bob  Bob sends to Alice  Alice sends to Bob 

c  1  
0  
e  1  
c  1  
or  0  
e  1  
2.3 The procedures of QKD
Now we analyse the procedures of QKD in detail. First we assume to simplify the discussion below and express the exchange process from Bob’s perspective.
Bob has the photon with OAM value equal to where mod (Bob’s bit is a central bit).

If Alice sends Bob , then it will be easy for Bob to know exactly which OAM value Alice has.

Alice sends her bit according to her second rule.
This means that Alice has , so she would surmise that Bob’s photon or . If Bob has , he will only be able to dope out one of Alice’s value through her first bit if she sends . If he has , he will only be able to know any one of Alice’s value through her first bit if she sends . So Bob sending the recognition flag would be sufficient for Alice to deduce what OAM value Bob has.
Because Bob’s bit is a central bit, its minimum distance to the nearest opposite bit should be (The distance between and is defined as ), and the nearest opposite bit is . So Bob surmises that Alice should own .
Also because all three OAM values Alice and Bob share should be three adjacent thirdorder Fiboncci numbers, and because Bob already has , he can deduce that Alice should also own which is between and .
So after receiving Bob’s response bit, Alice would send which is equal to .

Alice sends her bit according to her first rule.
So she has and she sends and respectively to Bob regardless of the order while . In this situation, she already knows that Bob’s value is . So what bit Bob would send doesn’t actually matter here for it won’t affect Alice’s correct guess of Bob’s OAM value.
It is worth mentioning that the second rule would not be confused with the first rule as there is only one opposite bit within the maximum distance to to maintain that all three OAM values are adjacent: . So when two opposite bits are sent to Bob, this contradiction would eliminate the possibility of the second rule. During the communication under Alice’s second rule, Bob would receive ”01” while under her second rule he would receive ”00”, which would be sufficient for him to distinguish the two cases.
In both cases above Alice should have . So Bob should send Alice ”” to illustrate that he is able to identify one of Alice’s value.


If Alice sends Bob , then she can only be sending it according to her first rule.
So Alice could have sent any one in and she could have or . As the two possibilities share no common value of Alice, Bob should send ”” to illustrate his inability to acknowledge any of Alice’s bits.

If Alice has , she would surmise that Bob has or , each requires a different bit from Alice in order to identify one of Alice’s values. This is the same as 1.(a) and Bob would be able to acknowledge all of Alice’s values after receiving all two bits from her.

If Alice has , she would surmise that Bob has or . If Bob has , he would be able to identify one of Alice’s bit through the first bit from her. He wouldn’t if he has .
So sending the recognition flag here can still help Alice know Bob’s value. After that, Alice would send the other bit she has to Bob, which should be able to make Bob fully aware of Alice’s values.

Bob has the photon with OAM value while mod . (Bob’s bit is an ”edge” bit.)

If Alice sends Bob , then Bob will know that . Alice should possess or , with a common value . So Bob sends ”1”.

If Alice has , then she knows that Bob’s value is . So what bit Bob would send doesn’t actually matter here for it won’t affect Alice’s correct guess of Bob’s OAM value.
After Bob sends his bit to Alice, Alice would send another bit of hers to Bob, which is opposite to the first bit she sent to Bob. And because Bob’s bit is surrounded closely by two different bits, this would be enough for Bob to know the exact bits Alice has.

If Alice has , she would only surmise that Bob has or . Because those two bits are of the same category (they are both ”edge” bits), their only difference is whether they are on the ”left” or the ”right” side of their set. We stipulate that if Bob’s bit () is on the ”left” edge of its set, or in another way, and , then Bob would send ”” to Alice, otherwise if and , then Bob would send ”” to Alice, which forms Bob’s second rule to send. This would be sufficient for Alice to acknowledge Bob’s value.
After this, Alice would send another bit of hers to Bob, leading to their full understanding of each other’s values.


If Alice sends Bob , she should possess or .

If Alice has , Alice would know Bob’s value needless of his bit. And she would be able to inform him of his value later with another bit like in 1.(a).

If Alice has , she should surmise that Bob has or . Because if Bob has , he can’t determine what value Alice has (let’s assume that to accord the thirdorder Fibonacci recursion) while he can if he has . So Bob could send the recognition flag to Alice as is stated in Bob’s rule.
After that Alice would send another bit of hers to pass on all the information Bob needs to know Alice’s values.

After these process, Alice and Bob can add up their values to get the pump value, which serves as one segment of the key.
3 The security performance of the QKD protocol
Traditionally, the security checking of the protocol is based on the polarization degrees of freedom. In the proposed QKD protocol, by randomly choosing the photons in the checking mode, the two communication parties could discover the eavesdropping behavior [29]. Moreover, the security checking process could be realized by using the OAM degrees of freedom. During the detection of eveasdropping, if Alice measures , the state reaches Bob should be ; if Alice measures or , the state reaches Bob should be or . Suppose there is an eavesdropper in the channel, called Eve, who perform the interceptresend attack on the protocol. For example, she intercepts Bob’s photon and reads out the value . However, she could not able to know what photon to resend to Bob: , or . The wrong photons would change the right distribution of each value in Bob’s measurement, which would expose her eveasdropping. And it’s worth mentioning that as shown in TABLE 6, the classical information exchanged between Alice and Bob is insufficient for an eavesdropper to determine the value.
Eve sees  000  001  010  011  100  101  110  111  

Secret key  6,11  20,423 

20,37,230  37,230  68,125 


Assuming an interceptresend attack is performed by Eve, the average probability of a correct guess is . The probability would drop according to the increment of the number of Fibonacci values used.
Eve sees  000  001  010  011  100  101  110  111  

Secret key 




31,105  31,105,57 


Eve sees  000  001  010  011  100  101  110  111  

Secret key 








Also the protocol is intrinsically immune to photonnumber splitting attack. If a multiphoton pulse is sent into the spiral source, there is no reason for the photons that come out to be in the same state: they are distributed among the different thirdorder Fibonacci numbers in the same manner as they would if they had been sent one by one. Siphoning off one photon from a pulse will reveal nothing about the state of the other photons in that pulse to the eavesdropper, thus making the attack invalid for Eve.
Moreover, the security checking could be improved by simply changing some unnecessary bits of Alice into the random bits. From the procedure analysis of the protocol, we know that under certain circumstances, Bob would be able to acknowledge at least one value of Alice’s through only the first bit of hers. If we change this bit into a random bit or to indicate the method of calculating secret keys, to add up or to multiply for example, the ambiguity will be increased, making it harder for Eve to guess the right value from the classical information exchange. Meanwhile we can make simple rules to determine how to process the values when Bob knows all of them to get the secret keys.
Here we simply change that bit into the random bit. For every case in which Bob would be able to know all Alice’s values, we stipulate they choose the smallest two values to add up to get the secret key. The result is shown in TABLE 7. For every case in which Bob would be able to know all Alice’s values, we assume that they choose the smallest two values to add up to get the secret key. The result is shown in TABLE 7.
This table has shown the first step in improving the protocol, and Eve’s average correct guessing rate will be decreased to .
Some values, like ””, ””, are actually calculated in several different cases(000, 001). This is because in every case in which Bob can acknowledge all Alice’s values, we stipulate that the smallest two values be added to get the secret key. By choosing the values with common rules to avoid as many overlap as possible, further improvement can be achieved. Here if we stipulate that they choose digits and the calculating method (add or multiply) differently according to (), the average correct guess rate can be decreased to , as shown in TABLE 8.
Notice that the distribution of possibilities regarding every classical information exchange case is not balanced. So we can only retain the cases with a relatively better performance (with more possible secret key values) to further improve the protocol. As an extreme case, we only retain the results of the classical information exchange ”” (the case with the most possible key values) and discarded all the others, we may achieve a minimum Eve’s correct guessing rate as .
For a coding space of Fibonacci values, this rate can be decreased to , with information entropy density increased to per photion. Here we numerically simulated the performance of the protocol in Fig.2 and Fig.3.
First in Fig.2, the relation between the keys rate and the communication distance is presented. Here the frequency is set as 10MHz, the intensity of pulse is 0.1 photon per pulse and the channel loss of the fiber is 0.2dB/km. The efficiency of the detector is set as 0.1, and the dark count of the detector is per second. The imperfect interference or polarization contrast induced quantum bit error rate is neglected. We found that the keys generation rate increases with the increment of coding space of the OAM states.
In Fig.3, we present the relation of the coding bits and security performance with different coding space. In Fig.3(a), the bits values of each photon is enlarged by using our protocol compared with traditional method without Fibonacci. And in Fig.3(b), the security of the protocol is improved as the eavesdropping behavior will easily be discovered.
4 Summary
In summary, exploiting the OAM states based on thirdorder Fibonacci recursion, we proposed a highcapacity encoding scheme for quantum key distribution. The secure key distribution is realized by using three particles entangled state and thirdorder Fibonacci sequence which could be generalized to highorder sequence and multiparties quantum network. Compared with the traditional method, the probability for detecting the eavesdropper could be increased to with only OAM values, which can be further improved with the increment of the number of OAM values used. Also the protocol is intrinsically immune to photon splitting attack and the security can be further enhanced implementing a new type of decoy state.
References
 C. H. Bennett and G. Brassard, “Quantum cryptography: Public key distribution and coin tossing,” in Proceedings of IEEE International Conference on Computers, Systems and Signal Processing. New York, 1984, pp. 175–179.
 F. Grosshans, G. Van Assche, J. Wenger, R. Brouri, N. J. Cerf, and P. Grangier, “Quantum key distribution using gaussianmodulated coherent states,” Nature, vol. 421, no. 6920, p. 238, 2003.
 F.G. Deng and G. L. Long, “Controlled order rearrangement encryption for quantum key distribution,” Physical Review A, vol. 68, no. 4, p. 042315, 2003.
 S. Wang, W. Chen, J. F. Guo, Z. Q. Yin, H. W. Li, Z. Zhou, and Z. F. Han, “2 ghz clock quantum key distribution over 260 km of standard telecom fiber,” Optics Letters, vol. 37, no. 6, p. 1008, 2012.
 H.J. Briegel, W. Dur, J. I. Cirac, and P. Zoller, “Quantum repeaters: The role of imperfect local operations in quantum communication,” Physical Review Letters, vol. 81, no. 26, p. 5932, 1998.
 P. van Loock, T. D. Ladd, K. Sanaka, F. Yamaguchi, K. Nemoto, W. J. Munro, and Y. Yamamoto, “Hybrid quantum repeater using bright coherent light,” Physical Review Letters, vol. 96, no. 24, p. 240501, 2006.
 H. BechmannPasquinucci and W. Tittel, “Quantum cryptography using larger alphabets,” Physical Review A, vol. 61, no. 6, p. 062308, 2000.
 R. Heilmann, M. Grafe, S. Nolte, and A. Szameit, “A novel integrated quantum circuit for highorder wstate generation and its highly precise characterization,” Science Bulletin, vol. 60, no. 1, pp. 96–100, 2015.
 M. Huber and M. Pawłowski, “Weak randomness in deviceindependent quantum key distribution and the advantage of using highdimensional entanglement,” Phys. Rev. A, vol. 88, p. 032309, 2013.
 J. Schwinger, “Unitary operator bases,” Proceedings of the National Academy of Sciences of the United States Of America, vol. 46, no. 4, p. 570, 1960.
 I. Ivonović, “Geometrical description of quantal state determination,” Journal of Physics A: Mathematical and General, vol. 14, no. 12, p. 3241, 1981.
 W. K. Wootters and B. D. Fields, “Optimal statedetermination by mutually unbiased measurements,” Annals of Physics, vol. 191, no. 2, pp. 363–381, 1989.
 J. Lawrence, Č. Brukner, and A. Zeilinger, “Mutually unbiased binary observable sets on n qubits,” Physical Review A, vol. 65, no. 3, p. 032320, 2002.
 B. P. Lanyon, M. Barbieri, M. P. Almeida, T. Jennewein, T. C. Ralph, K. J. Resch, G. J. Pryde, J. L. O¡¯Brien, A. Gilchrist, and A. G. White, “Simplifying quantum logic using higherdimensional hilbert spaces,” Nature Physics, vol. 5, no. 2, pp. 134–141, 2008.
 N. J. Cerf, M. Bourennane, A. Karlsson, and N. Gisin, “Security of quantum key distribution using dlevel systems,” Physical Review Letters, vol. 88, no. 12, p. 127902, 2002.
 C. Wang, F.G. Deng, Y.S. Li, X.S. Liu, and G. L. Long, “Quantum secure direct communication with highdimension quantum superdense coding,” Physical Review A, vol. 71, no. 4, p. 044305, 2005.
 H. BechmannPasquinucci and A. Peres, “Quantum cryptography with 3state systems,” Physical Review Letters, vol. 85, no. 15, p. 3313, 2000.
 S. Oemrawsingh, X. Ma, D. Voigt, A. Aiello, E. Eliel, J. Woerdman et al., “Experimental demonstration of fractional orbital angular momentum entanglement of two photons,” Physical Review Letters, vol. 95, no. 24, p. 240501, 2005.
 E. Nagali, D. Giovannini, L. Marrucci, S. Slussarenko, E. Santamato, and F. Sciarrino, “Experimental optimal cloning of fourdimensional quantum states of photons,” Physical Review Letters, vol. 105, no. 7, p. 073602, 2010.
 J. Leach, B. Jack, J. Romero, A. K. Jha, A. M. Yao, S. FrankeArnold, D. G. Ireland, R. W. Boyd, S. M. Barnett, and M. J. Padgett, “Quantum correlations in optical angle–orbital angular momentum variables,” Science, vol. 329, no. 5992, pp. 662–665, 2010.
 L. Allen, M. W. Beijersbergen, R. Spreeuw, and J. Woerdman, “Orbital angular momentum of light and the transformation of laguerregaussian laser modes,” Physical Review A, vol. 45, no. 11, p. 8185, 1992.
 S. FrankeArnold, L. Allen, and M. Padgett, “Advances in optical angular momentum,” Laser & Photonics Reviews, vol. 2, no. 4, pp. 299–313, 2008.
 A. Mair, A. Vaziri, G. Weihs, and A. Zeilinger, “Entanglement of the orbital angular momentum states of photons,” Nature, vol. 412, no. 6844, pp. 313–316, 2001.
 L. Chen, J. Lei, and J. Romero, “Quantum digital spiral imaging,” Light: Science & Applications, vol. 3, p. e153, 2014.
 S. F. Liew, H. Noh, J. Trevino, L. Dal Negro, and C. H., “Localized photonic band edge modes and orbital angular momenta of light in a goldenangle spiral,” Opt. Express, vol. 19, p. 23631, 2011.
 M. Mirhosseini, M. Malik, Z. Shi, and R. W. Boyd, “Efficient separation of the orbital angular momentum eigenstates of light,” Nature Communications, vol. 4, p. 2781, 2013.
 D. S. Simon, N. Lawrence, J. Trevino, L. Dal Negro, and A. V. Sergienko, “Highcapacity quantum fibonacci coding for key distribution,” Physical Review A, vol. 87, no. 3, p. 032312, 2013.
 L. Marrucci, C. Manzo, and D. Paparo, “Optical spintoorbital angular momentum conversion in inhomogeneous anisotropic media,” Physical Review Letters, vol. 96, no. 16, p. 163905, 2006.
 G. L. Long, F.G. Deng, C. Wang, X.H. Li, K. Wen, and W.Y. Wang, “Quantum secure direct communication and deterministic secure quantum communication,” Frontiers of Physics in China, vol. 2, no. 3, pp. 251–272, 2007.