As hackers get more sophisticated in their cyber crime efforts, we need to look to new technology to make our systems more secure, and potentially unhackable.<\/p>\n
For some types of hacking, we already know the ultimate answer: quantum physics provides a way to share information with absolute security, guaranteed by the laws of nature.<\/p>\n
The basic quantum communication idea<\/a> is simple and elegant. But simple ideas often crash into real-world practicalities.<\/p>\n Fortunately, quantum physics research is providing even more sophisticated tools that will finish the job. The technology isn\u2019t mature yet, but it is coming.<\/p>\n Here\u2019s the scenario: two parties, call them Alice and Bob, want to send secure messages over a network \u2013 perhaps credit card data for an online purchase.<\/p>\n Let\u2019s say they each have an identical list of random numbers that is private to them. They can use this list as a secret key<\/a> to encode and send uncrackable messages. But how do they make the shared key in the first place?<\/p>\n With conventional methods that don\u2019t use quantum physics, Alice sends Bob a key that is made up of ordinary bits (0s and 1s) of information.<\/p>\n But it is possible that the key may be intercepted, copied and then sent on without Alice or Bob\u2019s knowledge. This compromises security, because if the key is no longer private then others could use it to decrypt the the message that it encodes.<\/p>\n Clever mathematical techniques<\/a> can make it difficult for Eve (an eavesdropping cyber criminal) to use an intercepted key. But with enough time, or with future quantum computers<\/a>, the code can still be broken.<\/p>\n This is where quantum physics comes in. Let\u2019s start with the simple version. Alice sends Bob the key using quantum bits (qubits<\/a>) instead of regular bits. To do this, she might use photons, which are individual particles of light.<\/p>\n Unlike regular computing bits, photon qubits can take on both<\/em> 0 and 1 bit values at the same time.<\/p>\n This is in the same way that Schrodinger\u2019s cat is both dead and<\/em> alive in the famous thought experiment<\/a>. The photon qubits can be prepared in ordinary 0 or 1 states, or in these strange superposition<\/a> states, and choosing these randomly makes the key that Alice sends.<\/p>\n Photons obey Heisenberg\u2019s uncertainty principle<\/a> so that if Eve measures them, she alters information they carry.<\/p>\n This alteration reveals the hack to Alice and Bob, who therefore throw away their key instead of using it to encode a message. If there is no hack, then they can use the private key to encode a message with absolute security.<\/p>\n This simple version of quantum key distribution (QKD) secures the channel \u2013 the optical fibre, for example \u2013 against intrusions.<\/p>\n But there are two other potential locations for hacking \u2013 Alice\u2019s photon-sending device, and Bob\u2019s photon-measuring device. The simple protocol assumes that these are both perfectly secure.<\/p>\n But how can Alice and Bob be sure that their device vendor is not in league with Eve? Cyber criminals are very good at setting up sophisticated networks, so how do you ever know whom to trust? What can solve this new problem, and similarly nasty variants?<\/p>\n The answer is quantum entanglement<\/a>. Two entangled photons have quantum-linked states: measuring the information stored in one photon tells us about the information in the other.<\/p>\n This effect holds even if the two photons are far apart, even if they are on opposite sides of the Earth.<\/p>\n It turns out that measuring the first photon always gives a random result, specifically, a random bit 0 or 1.<\/p>\n Does that sound useful? It should -\u2013 if Alice and Bob each perform the same measurement on separate photons from an entangled pair, they will get a random, but shared<\/em>, number. By repeating this on many entangled pairs they can generate a secret key.<\/p>\n Consider the following example. Alice makes an entangled pair of photons and sends one to Bob. If Alice\u2019s random measurement result has value 0, then Bob\u2019s measurement will yield a 0 as well.<\/p>\n On a second entangled pair, produced and distributed the same way, Alice may measure 1 and so Bob will measure 1 as well. Continuing, they build up a long string of shared random bits, which will form their secret key.<\/p>\n Any attempt by Eve to measure one of the photons will break the entanglement, an effect that Alice and Bob can detect.<\/p>\n So if Alice and Bob can verify that they share entanglement, then the channel is proven trustworthy.<\/p>\n Not only that, but they can use their untrusted devices to check whether those very devices are really trustworthy.<\/p>\n Wait, what? That seems like asking a suspected con man whether or not he is lying. It can\u2019t work! But it does<\/em> work. The information connection contained in entanglement is just too strong to be mimicked by hacked devices.<\/p>\n Researchers have developed several variations of entanglement-based techniques for secure communications with untrusted devices.<\/p>\n One recent experiment<\/a> I conducted with my team used an entanglement-testing method called quantum steering.<\/p>\n Steering gives up the security of Bob\u2019s device in exchange for robustness against real-world imperfections (information gets a bit mixed up in real, imperfect optical fibres).<\/p>\n But we recovered the security of Bob\u2019s measurement device by programming it with additional photon qubits.<\/p>\n Because of Heisenberg\u2019s uncertainty principle, a hacked measurement device can\u2019t extract the information encoded in these extra programming photons, which is the knowledge required to cheat the steering test.<\/p>\n This is the weird world of quantum physics at its finest. Even though Bob\u2019s device is implementing the program\u2019s instructions, it can\u2019t learn everything about those instructions!<\/p>\n In essence, our steering approach should be simpler to implement than some of the alternative entanglement-based methods, and more robust to real-world imperfections than the others.<\/p>\n Where to from here? Commercial prototypes of simple QKD systems already exist, and have been used to protect channels in real-world tasks<\/a> such as transferring information between bank branches.<\/p>\n But existing commercial devices have also been hacked by attacking Alice or Bob\u2019s devices<\/a>, because they were designed to secure the channel alone.<\/p>\n As we\u2019ve seen, entanglement-based schemes for securing end devices have now been demonstrated. Hopefully these will reach a level of commercial maturity in the next five years or so.<\/p>\n To implement this kind of quantum communication security technology, users will require quantum links for sharing entanglement, as well as existing computer networks.<\/p>\n A quantum link could be as simple as an optical fibre connecting two QKD devices, one for each of Alice and Bob, which in turn are plugged in to the communicating computers.<\/p>\n Longer or more complex links will likely require modifications of existing optical fibre networks with new quantum signal-boosting devices (call quantum repeaters) that are under development.<\/p>\n But it\u2019s possible to also imagine mobile QKD-secured data transfer, such as using a quantum-enabled smart phone to interact with an ATM.<\/p>\n QKD technology will be applicable whenever transmitted information is the thing to be protected. Banking or financial details, personal data, email and health records are just a few examples of confidential information that it is desirable to securely send over an external data line.<\/p>\n But the technology doesn\u2019t directly apply to the task of protecting a computer against a direct hacking attack. It can\u2019t protect against hacks where someone guesses a password or employs a virus to obtain access to a user\u2019s account.<\/p>\n One might imagine that the same kind of quantum physics principles could be adapted to addressing those problems, and indeed this is an open research question.<\/p>\n So, while quantum communication won\u2019t solve all cyber crime it\u2019s good to know that, for some critical types of information transfer, hackers will be defeated by the very laws of nature. And that\u2019s a message you can share – safely – with your friends.<\/p>\n This article was originally published on The Conversation<\/a>. Read the original article<\/a>.<\/p>\n Honeypot set for hackers<\/a><\/strong><\/p>\n Clinton\u2019s private email: why it\u2019s a big deal<\/a><\/strong><\/p>\nThe key to the problem<\/h3>\n
A secure quantum key<\/h3>\n
What an (en)tangled web we weave<\/h3>\n
Quantum security in the real world<\/h3>\n
Coming soon<\/h3>\n
More security news<\/h3>\n