Revision History for: GHZ-based Quantum Anonymous Transmission
- 2025-06-24 at 21:34 by JuliaM
implements Anonymous Transmission
Introduction
This protocol implements the task of Anonymous Transmission in a multiple node quantum network. The protocol uses $n$-partite GHZ state to enable two nodes, sender and receiver, to establish a link which they use to transmit a quantum message. Importantly, the quantum message is transmitted in a way that the identity of the sender is unknown to every other node, and the identity of the receiver is known only to the sender.
Outline
The presented GHZ-based quantum anonymous transmission protocol is based on the work of [6]. The goal of the protocol is to transmit a quantum state $|\\\psi \\\rangle$ from the sender $S$ to the receiver $R$, while keeping the identities of $S$ and $R$ anonymous. We assume that there is exactly one receiver which is determined before the start of the protocol. The protocol consists of the following steps:
- Collision detection: Nodes run a collision detection protocol to determine a single sender $S$.
- State distribution: A trusted source distributes the $n$-partite GHZ state.
- Anonymous entanglement: $n-2$ nodes (all except for $S$ and $R$) measure in the $X$ basis and broadcast their measurement outcome. $S$ and $R$ broadcast random dummy bits. The parity of measurement outcomes allows to establish an entangled link between $S$ and $R$ which is called anonymous entanglement (AE).
- Teleportation: Sender $S$ teleports the message state $|\\\psi \\\rangle$ to the receiver $R$ using the established anonymous entanglement. Classical message $m$ associated with teleportation is also sent anonymously.
Assumptions
- Network: The network consists of $n$ nodes that are fully identified and completely connected with pairwise authenticated classical channels. Additionally, there is a secure classical broadcast channel.
- Source: Trusted multipartite state source.
- Adversarial model: active adversary who does not control the source.
Requirements
- Network stage: quantum memory network.
- Relevant parameters to establish one anonymous link: $k=1$ round of quantum communication per node, circuit depth $m=1$, $q=1$ physical qubits per node.
- Quantum memories, single-qubit Pauli gates and single-qubit measurements at the end nodes.
Notation
- $n$: number of network nodes taking part in the anonymous transmission.
- $|\\\psi \\\rangle$: quantum message which the sender wants to send anonymously.
- $S$: the sender of the quantum message.
- $R$: the receiver of the quantum message.
Properties
See Quantum Anonymous Transmission for the precise security definition. Pseudocode given below implements secure anonymous transmission, i.e. it hides the identities of the sender and the receiver from other nodes in the network. That is, the maximum probability that adversaries guess the identity of $S$ or $R$ given all the classical and quantum information they have available at the end of the protocol is no larger than the uncertainty the adversaries have about the identities of $S$ and $R$ before the protocol begins. More formally, the anonymous transmission protocol with the GHZ state is sender- and receiver-secure:
$$ P_{\\\text{guess}}[S|C,S\\\notin {\\\mathcal {A}}]\\\leq \\\max _{i \\\in [n]}P[S=i|S\\\notin {\\\mathcal {A}}]={\\\frac {1}{n-t}},$$
$$P_{\\\text{guess}}[R|C,S\\\notin {\\\mathcal {A}}]\\\leq \\\max _{i \\\in [n]}P[R=i|S\\\notin {\\\mathcal {A}}]={\\\frac {1}{n-t}},$$
where $\\\mathcal {A}$ is the subset of $t$ adversaries among $n$ nodes and $C$ is the register that contains all classical and quantum side information accessible to the adversaries. Note that this implies that the protocol is also trace-less, since even if the adversary hijacks any $ t \\\leq n-2$ players and gains access to all of their classical and quantum information after the end of the protocol, she cannot learn the identities of $S$ and $R$. For a formal argument see [6].Technical Description
Receiver $R$ is determined before the start of the protocol. $S$ holds a message qubit $|\\\psi \\\rangle$.
- Nodes run a collision detection protocol and determine a single sender $S$.
- A trusted source distributes $n$-partite GHZ state to every player
$$
|GHZ \\\rangle = \\\frac{1}{\\\sqrt{2}} ( |0^n\\\rangle + |1^n\\\rangle )
$$ - Anonymous entanglement:
- Sender $S$ and receiver $R$ do not do anything to their part of the state.
- Every player $j \\\in [n] \\\setminus{S, R}$:
- Applies a Hadamard transform to her qubit;
- Measures this qubit in the computational basis with outcome $m_j$;
- Broadcasts $m_j$.
- $S$ picks a random bit $b \\\in_R {0,1}$ and broadcasts $b$.
- $S$ applies a phase flip $Z$ to her qubit if $b = 1$.
- $R$ picks a random bit $b’ \\\in_R {0,1}$ and broadcasts $b’$.
- $R$ applies a phase flip $Z$ to her qubit, if
$$
b \\\oplus \\\bigoplus_{j \\\in [n] \\\setminus {S, R}} m_j = 1
$$
$S$ and $R$ share anonymous entanglement
$$
|\\\Gamma \\\rangle_{SR} = \\\frac{1}{\\\sqrt{2}} ( |00 \\\rangle + |11 \\\rangle )
$$
- $S$ uses the quantum teleportation circuit with input $|psirangle$ and anonymous entanglement $|\\\Gamma \\\rangle_{SR}$, and obtains measurement outcomes $m_0, m_1$.
- The players run a protocol to anonymously send bits $m_0, m_1$ from $S$ to $R$ (see Further Information for details).
- $R$ applies the transformation described by $m_0, m_1$ on his part of $|\\\Gamma \\\rangle_{SR}$ and obtains $|\\\psi \\\rangle_{SR}$.
Experimental Implementations
No content has been added to this section, yet!
Related Codes
Description Link Implementation of GHZ-based Quantum Anonymous Transmission using Netsquid. Link Further Information
- To determine the sender $S$ (Step 1) one can run either a classical collision detection protocol of [4] or a quantum collision detection protocol of [6] . The quantum version of the protocol requires additional $(\\\left\\\lceil \\\log{n} \\\right \\\rceil +1)$ GHZ states.
- To determine the receiver $R$ during the protocol one can incorporate an additional step using a classical receiver notification protocol of [4] .
To send classical teleportation bits $m_{0},m_{1}$ (Step 5) the players can run a classical logical OR protocol of [4] or anonymous transmission protocol for classical bits with quantum resources of [6] . The quantum protocol requires one additional GHZ state for transmitting one classical bit. - The anonymous transmission of quantum states was introduced in [6] .
- The problem was subsequently developed to consider the preparation and certification of the GHZ state [3], [5], [7] .
- In [5] , it was first shown that the proposed protocol is information-theoretically secure against an active adversary.
- In [1] a protocol using another multipartite state, the W state, was introduced. The reference discusses the noise robustness of both GHZ-based and W-based protocols and compares the performance of both protocols.
- Other protocols were proposed, which do not make use of multipartite entanglement, but utilise solely Bell pairs to create anonymous entanglement [2] .
References
- Lipinska, Victoria, Gláucia Murta, and Stephanie Wehner. “Anonymous transmission in a noisy quantum network using the W state.” Physical Review A 98, no. 5 (2018): 052320.
- Yang, Wei, Liusheng Huang, and Fang Song. “Privacy preserving quantum anonymous transmission via entanglement relay.” Scientific reports 6, no. 1 (2016): 26762.
- Bouda, Jan, and Josef Sprojcar. “Anonymous transmission of quantum information.” In 2007 first international conference on quantum, nano, and micro technologies (ICQNM’07), pp. 12-12. IEEE, 2007.
- Broadbent, Anne, and Alain Tapp. “Information-theoretic security without an honest majority.” In International Conference on the Theory and Application of Cryptology and Information Security, pp. 410-426. Berlin, Heidelberg: Springer Berlin Heidelberg, 2007.
- Brassard, Gilles, Anne Broadbent, Joseph Fitzsimons, Sébastien Gambs, and Alain Tapp. “Anonymous quantum communication.” In Advances in Cryptology–ASIACRYPT 2007: 13th International Conference on the Theory and Application of Cryptology and Information Security, Kuching, Malaysia, December 2-6, 2007. Proceedings 13, pp. 460-473. Springer Berlin Heidelberg, 2007.
- Christandl, Matthias, and Stephanie Wehner. “Quantum anonymous transmissions.” In International conference on the theory and application of cryptology and information security, pp. 217-235. Berlin, Heidelberg: Springer Berlin Heidelberg, 2005.
- Unnikrishnan, Anupama, Ian J. MacFarlane, Richard Yi, Eleni Diamanti, Damian Markham, and Iordanis Kerenidis. “Anonymity for practical quantum networks.” Physical review letters 122, no. 24 (2019): 240501.
- 2025-05-21 at 15:33 by JuliaM
implements Anonymous Transmission
Introduction
This protocol implements the task of Anonymous Transmission in a multiple node quantum network. The protocol uses $n$-partite GHZ state to enable two nodes, sender and receiver, to establish a link which they use to transmit a quantum message. Importantly, the quantum message is transmitted in a way that the identity of the sender is unknown to every other node, and the identity of the receiver is known only to the sender.
Outline
The presented GHZ-based quantum anonymous transmission protocol is based on the work of [6]. The goal of the protocol is to transmit a quantum state $|\\\psi \\\rangle$ from the sender $S$ to the receiver $R$, while keeping the identities of $S$ and $R$ anonymous. We assume that there is exactly one receiver which is determined before the start of the protocol. The protocol consists of the following steps:
- Collision detection: Nodes run a collision detection protocol to determine a single sender $S$.
- State distribution: A trusted source distributes the $n$-partite GHZ state.
- Anonymous entanglement: $n-2$ nodes (all except for $S$ and $R$) measure in the $X$ basis and broadcast their measurement outcome. $S$ and $R$ broadcast random dummy bits. The parity of measurement outcomes allows to establish an entangled link between $S$ and $R$ which is called anonymous entanglement (AE).
- Teleportation: Sender $S$ teleports the message state $|\\\psi \\\rangle$ to the receiver $R$ using the established anonymous entanglement. Classical message $m$ associated with teleportation is also sent anonymously.
Assumptions
- Network: The network consists of $n$ nodes that are fully identified and completely connected with pairwise authenticated classical channels. Additionally, there is a secure classical broadcast channel.
- Source: Trusted multipartite state source.
- Adversarial model: active adversary who does not control the source.
Requirements
- Network stage: quantum memory network.
- Relevant parameters to establish one anonymous link: $k=1$ round of quantum communication per node, circuit depth $m=1$, $q=1$ physical qubits per node.
- Quantum memories, single-qubit Pauli gates and single-qubit measurements at the end nodes.
Notation
- $n$: number of network nodes taking part in the anonymous transmission.
- $|\\\psi \\\rangle$: quantum message which the sender wants to send anonymously.
- $S$: the sender of the quantum message.
- $R$: the receiver of the quantum message.
Properties
See Quantum Anonymous Transmission for the precise security definition. Pseudocode given below implements secure anonymous transmission, i.e. it hides the identities of the sender and the receiver from other nodes in the network. That is, the maximum probability that adversaries guess the identity of $S$ or $R$ given all the classical and quantum information they have available at the end of the protocol is no larger than the uncertainty the adversaries have about the identities of $S$ and $R$ before the protocol begins. More formally, the anonymous transmission protocol with the GHZ state is sender- and receiver-secure:
$$ P_{\\\text{guess}}[S|C,S\\\notin {\\\mathcal {A}}]\\\leq \\\max _{i \\\in [n]}P[S=i|S\\\notin {\\\mathcal {A}}]={\\\frac {1}{n-t}},$$
$$P_{\\\text{guess}}[R|C,S\\\notin {\\\mathcal {A}}]\\\leq \\\max _{i \\\in [n]}P[R=i|S\\\notin {\\\mathcal {A}}]={\\\frac {1}{n-t}},$$
where $\\\mathcal {A}$ is the subset of $t$ adversaries among $n$ nodes and $C$ is the register that contains all classical and quantum side information accessible to the adversaries. Note that this implies that the protocol is also trace-less, since even if the adversary hijacks any $ t \\\leq n-2$ players and gains access to all of their classical and quantum information after the end of the protocol, she cannot learn the identities of $S$ and $R$. For a formal argument see [6].Technical Description
Receiver $R$ is determined before the start of the protocol. $S$ holds a message qubit $|\\\psi \\\rangle$.
- Nodes run a collision detection protocol and determine a single sender $S$.
- A trusted source distributes $n$-partite GHZ state to every player
$$
|GHZ \\\rangle = \\\frac{1}{\\\sqrt{2}} ( |0^n\\\rangle + |1^n\\\rangle )
$$ - Anonymous entanglement:
- Sender $S$ and receiver $R$ do not do anything to their part of the state.
- Every player $j \\\in [n] \\\setminus{S, R}$:
- Applies a Hadamard transform to her qubit;
- Measures this qubit in the computational basis with outcome $m_j$;
- Broadcasts $m_j$.
- $S$ picks a random bit $b \\\in_R {0,1}$ and broadcasts $b$.
- $S$ applies a phase flip $Z$ to her qubit if $b = 1$.
- $R$ picks a random bit $b’ \\\in_R {0,1}$ and broadcasts $b’$.
- $R$ applies a phase flip $Z$ to her qubit, if
$$
b \\\oplus \\\bigoplus_{j \\\in [n] \\\setminus {S, R}} m_j = 1
$$
$S$ and $R$ share anonymous entanglement
$$
|\\\Gamma \\\rangle_{SR} = \\\frac{1}{\\\sqrt{2}} ( |00 \\\rangle + |11 \\\rangle )
$$
- $S$ uses the quantum teleportation circuit with input $|psirangle$ and anonymous entanglement $|\\\Gamma \\\rangle_{SR}$, and obtains measurement outcomes $m_0, m_1$.
- The players run a protocol to anonymously send bits $m_0, m_1$ from $S$ to $R$ (see Further Information for details).
- $R$ applies the transformation described by $m_0, m_1$ on his part of $|\\\Gamma \\\rangle_{SR}$ and obtains $|\\\psi \\\rangle_{SR}$.
Experimental Implementations
No content has been added to this section, yet!
Related Codes
Description Link Implementation of GHZ-based Quantum Anonymous Transmission using Netsquid. Link Further Information
- To determine the sender $S$ (Step 1) one can run either a classical collision detection protocol of [4] or a quantum collision detection protocol of [6] . The quantum version of the protocol requires additional $(\\\left\\\lceil \\\log{n} \\\right \\\rceil +1)$ GHZ states.
- To determine the receiver $R$ during the protocol one can incorporate an additional step using a classical receiver notification protocol of [4] .
To send classical teleportation bits $m_{0},m_{1}$ (Step 5) the players can run a classical logical OR protocol of [4] or anonymous transmission protocol for classical bits with quantum resources of [6] . The quantum protocol requires one additional GHZ state for transmitting one classical bit. - The anonymous transmission of quantum states was introduced in [6] .
- The problem was subsequently developed to consider the preparation and certification of the GHZ state [3], [5], [7] .
- In [5] , it was first shown that the proposed protocol is information-theoretically secure against an active adversary.
- In [1] a protocol using another multipartite state, the W state, was introduced. The reference discusses the noise robustness of both GHZ-based and W-based protocols and compares the performance of both protocols.
- Other protocols were proposed, which do not make use of multipartite entanglement, but utilise solely Bell pairs to create anonymous entanglement [2] .
References
- Lipinska, Victoria, Gláucia Murta, and Stephanie Wehner. “Anonymous transmission in a noisy quantum network using the W state.” Physical Review A 98, no. 5 (2018): 052320.
- Yang, Wei, Liusheng Huang, and Fang Song. “Privacy preserving quantum anonymous transmission via entanglement relay.” Scientific reports 6, no. 1 (2016): 26762.
- Bouda, Jan, and Josef Sprojcar. “Anonymous transmission of quantum information.” In 2007 first international conference on quantum, nano, and micro technologies (ICQNM’07), pp. 12-12. IEEE, 2007.
- Broadbent, Anne, and Alain Tapp. “Information-theoretic security without an honest majority.” In International Conference on the Theory and Application of Cryptology and Information Security, pp. 410-426. Berlin, Heidelberg: Springer Berlin Heidelberg, 2007.
- Brassard, Gilles, Anne Broadbent, Joseph Fitzsimons, Sébastien Gambs, and Alain Tapp. “Anonymous quantum communication.” In Advances in Cryptology–ASIACRYPT 2007: 13th International Conference on the Theory and Application of Cryptology and Information Security, Kuching, Malaysia, December 2-6, 2007. Proceedings 13, pp. 460-473. Springer Berlin Heidelberg, 2007.
- Christandl, Matthias, and Stephanie Wehner. “Quantum anonymous transmissions.” In International conference on the theory and application of cryptology and information security, pp. 217-235. Berlin, Heidelberg: Springer Berlin Heidelberg, 2005.
- Unnikrishnan, Anupama, Ian J. MacFarlane, Richard Yi, Eleni Diamanti, Damian Markham, and Iordanis Kerenidis. “Anonymity for practical quantum networks.” Physical review letters 122, no. 24 (2019): 240501.
- 2025-05-16 at 16:57 by JuliaM
implements Anonymous Transmission
Introduction
This protocol implements the task of Anonymous Transmission in a multiple node quantum network. The protocol uses $n$-partite GHZ state to enable two nodes, sender and receiver, to establish a link which they use to transmit a quantum message. Importantly, the quantum message is transmitted in a way that the identity of the sender is unknown to every other node, and the identity of the receiver is known only to the sender.
Outline
The presented GHZ-based quantum anonymous transmission protocol is based on the work of [6]. The goal of the protocol is to transmit a quantum state $|psi rangle$ from the sender $S$ to the receiver $R$, while keeping the identities of $S$ and $R$ anonymous. We assume that there is exactly one receiver which is determined before the start of the protocol. The protocol consists of the following steps:
- Collision detection: Nodes run a collision detection protocol to determine a single sender $S$.
- State distribution: A trusted source distributes the $n$-partite GHZ state.
- Anonymous entanglement: $n-2$ nodes (all except for $S$ and $R$) measure in the $X$ basis and broadcast their measurement outcome. $S$ and $R$ broadcast random dummy bits. The parity of measurement outcomes allows to establish an entangled link between $S$ and $R$ which is called anonymous entanglement (AE).
- Teleportation: Sender $S$ teleports the message state $|\\\psi \\\rangle$ to the receiver $R$ using the established anonymous entanglement. Classical message $m$ associated with teleportation is also sent anonymously.
Assumptions
- Network: The network consists of $n$ nodes that are fully identified and completely connected with pairwise authenticated classical channels. Additionally, there is a secure classical broadcast channel.
- Source: Trusted multipartite state source.
- Adversarial model: active adversary who does not control the source.
Requirements
- Network stage: quantum memory network.
- Relevant parameters to establish one anonymous link: $k=1$ round of quantum communication per node, circuit depth $m=1$, $q=1$ physical qubits per node.
- Quantum memories, single-qubit Pauli gates and single-qubit measurements at the end nodes.
Notation
- $n$: number of network nodes taking part in the anonymous transmission.
- $|\\\psi \\\rangle$: quantum message which the sender wants to send anonymously.
- $S$: the sender of the quantum message.
- $R$: the receiver of the quantum message.
Properties
See Quantum Anonymous Transmission for the precise security definition. Pseudocode given below implements secure anonymous transmission, i.e. it hides the identities of the sender and the receiver from other nodes in the network. That is, the maximum probability that adversaries guess the identity of $S$ or $R$ given all the classical and quantum information they have available at the end of the protocol is no larger than the uncertainty the adversaries have about the identities of $S$ and $R$ before the protocol begins. More formally, the anonymous transmission protocol with the GHZ state is sender- and receiver-secure:
$$ P_{\\\text{guess}}[S|C,S\\\notin {\\\mathcal {A}}]\\\leq \\\max _{i \\\in [n]}P[S=i|S\\\notin {\\\mathcal {A}}]={\\\frac {1}{n-t}},$$
$$P_{\\\text{guess}}[R|C,S\\\notin {\\\mathcal {A}}]\\\leq \\\max _{i \\\in [n]}P[R=i|S\\\notin {\\\mathcal {A}}]={\\\frac {1}{n-t}},$$
where $\\\mathcal {A}$ is the subset of $t$ adversaries among $n$ nodes and $C$ is the register that contains all classical and quantum side information accessible to the adversaries. Note that this implies that the protocol is also trace-less, since even if the adversary hijacks any $ t \\\leq n-2$ players and gains access to all of their classical and quantum information after the end of the protocol, she cannot learn the identities of $S$ and $R$. For a formal argument see [6].Technical Description
Receiver $R$ is determined before the start of the protocol. $S$ holds a message qubit $|\\\psi \\\rangle$.
- Nodes run a collision detection protocol and determine a single sender $S$.
- A trusted source distributes $n$-partite GHZ state to every player
$$
|GHZ \\\rangle = \\\frac{1}{\\\sqrt{2}} ( |0^n\\\rangle + |1^n\\\rangle )
$$ - Anonymous entanglement:
- Sender $S$ and receiver $R$ do not do anything to their part of the state.
- Every player $j \\\in [n] \\\setminus{S, R}$:
- Applies a Hadamard transform to her qubit;
- Measures this qubit in the computational basis with outcome $m_j$;
- Broadcasts $m_j$.
- $S$ picks a random bit $b \\\in_R {0,1}$ and broadcasts $b$.
- $S$ applies a phase flip $Z$ to her qubit if $b = 1$.
- $R$ picks a random bit $b’ \\\in_R {0,1}$ and broadcasts $b’$.
- $R$ applies a phase flip $Z$ to her qubit, if
$$
b \\\oplus \\\bigoplus_{j \\\in [n] \\\setminus {S, R}} m_j = 1
$$
$S$ and $R$ share anonymous entanglement
$$
|\\\Gamma \\\rangle_{SR} = \\\frac{1}{\\\sqrt{2}} ( |00 \\\rangle + |11 \\\rangle )
$$
- $S$ uses the quantum teleportation circuit with input $|psirangle$ and anonymous entanglement $|\\\Gamma \\\rangle_{SR}$, and obtains measurement outcomes $m_0, m_1$.
- The players run a protocol to anonymously send bits $m_0, m_1$ from $S$ to $R$ (see Further Information for details).
- $R$ applies the transformation described by $m_0, m_1$ on his part of $|\\\Gamma \\\rangle_{SR}$ and obtains $|\\\psi \\\rangle_{SR}$.
Experimental Implementations
No content has been added to this section, yet!
Related Codes
Description Link Implementation of GHZ-based Quantum Anonymous Transmission using Netsquid. Link Further Information
- To determine the sender $S$ (Step 1) one can run either a classical collision detection protocol of [4] or a quantum collision detection protocol of [6] . The quantum version of the protocol requires additional $(\\\left\\\lceil \\\log{n} \\\right \\\rceil +1)$ GHZ states.
- To determine the receiver $R$ during the protocol one can incorporate an additional step using a classical receiver notification protocol of [4] .
To send classical teleportation bits $m_{0},m_{1}$ (Step 5) the players can run a classical logical OR protocol of [4] or anonymous transmission protocol for classical bits with quantum resources of [6] . The quantum protocol requires one additional GHZ state for transmitting one classical bit. - The anonymous transmission of quantum states was introduced in [6] .
- The problem was subsequently developed to consider the preparation and certification of the GHZ state [3], [5], [7] .
- In [5] , it was first shown that the proposed protocol is information-theoretically secure against an active adversary.
- In [1] a protocol using another multipartite state, the W state, was introduced. The reference discusses the noise robustness of both GHZ-based and W-based protocols and compares the performance of both protocols.
- Other protocols were proposed, which do not make use of multipartite entanglement, but utilise solely Bell pairs to create anonymous entanglement [2] .
References
- Lipinska, Victoria, Gláucia Murta, and Stephanie Wehner. “Anonymous transmission in a noisy quantum network using the W state.” Physical Review A 98, no. 5 (2018): 052320.
- Yang, Wei, Liusheng Huang, and Fang Song. “Privacy preserving quantum anonymous transmission via entanglement relay.” Scientific reports 6, no. 1 (2016): 26762.
- Bouda, Jan, and Josef Sprojcar. “Anonymous transmission of quantum information.” In 2007 first international conference on quantum, nano, and micro technologies (ICQNM’07), pp. 12-12. IEEE, 2007.
- Broadbent, Anne, and Alain Tapp. “Information-theoretic security without an honest majority.” In International Conference on the Theory and Application of Cryptology and Information Security, pp. 410-426. Berlin, Heidelberg: Springer Berlin Heidelberg, 2007.
- Brassard, Gilles, Anne Broadbent, Joseph Fitzsimons, Sébastien Gambs, and Alain Tapp. “Anonymous quantum communication.” In Advances in Cryptology–ASIACRYPT 2007: 13th International Conference on the Theory and Application of Cryptology and Information Security, Kuching, Malaysia, December 2-6, 2007. Proceedings 13, pp. 460-473. Springer Berlin Heidelberg, 2007.
- Christandl, Matthias, and Stephanie Wehner. “Quantum anonymous transmissions.” In International conference on the theory and application of cryptology and information security, pp. 217-235. Berlin, Heidelberg: Springer Berlin Heidelberg, 2005.
- Unnikrishnan, Anupama, Ian J. MacFarlane, Richard Yi, Eleni Diamanti, Damian Markham, and Iordanis Kerenidis. “Anonymity for practical quantum networks.” Physical review letters 122, no. 24 (2019): 240501.
- 2025-05-16 at 16:51 by JuliaM
implements Anonymous Transmission
Introduction
This protocol implements the task of Anonymous Transmission in a multiple node quantum network. The protocol uses $n$-partite GHZ state to enable two nodes, sender and receiver, to establish a link which they use to transmit a quantum message. Importantly, the quantum message is transmitted in a way that the identity of the sender is unknown to every other node, and the identity of the receiver is known only to the sender.
Outline
The presented GHZ-based quantum anonymous transmission protocol is based on the work of [6]. The goal of the protocol is to transmit a quantum state $|psi rangle$ from the sender $S$ to the receiver $R$, while keeping the identities of $S$ and $R$ anonymous. We assume that there is exactly one receiver which is determined before the start of the protocol. The protocol consists of the following steps:
- Collision detection: Nodes run a collision detection protocol to determine a single sender $S$.
- State distribution: A trusted source distributes the $n$-partite GHZ state.
- Anonymous entanglement: $n-2$ nodes (all except for $S$ and $R$) measure in the $X$ basis and broadcast their measurement outcome. $S$ and $R$ broadcast random dummy bits. The parity of measurement outcomes allows to establish an entangled link between $S$ and $R$ which is called anonymous entanglement (AE).
- Teleportation: Sender $S$ teleports the message state $|\\\psi \\\rangle$ to the receiver $R$ using the established anonymous entanglement. Classical message $m$ associated with teleportation is also sent anonymously.
Assumptions
- Network: The network consists of $n$ nodes that are fully identified and completely connected with pairwise authenticated classical channels. Additionally, there is a secure classical broadcast channel.
- Source: Trusted multipartite state source.
- Adversarial model: active adversary who does not control the source.
Requirements
- Network stage: quantum memory network.
- Relevant parameters to establish one anonymous link: $k=1$ round of quantum communication per node, circuit depth $m=1$, $q=1$ physical qubits per node.
- Quantum memories, single-qubit Pauli gates and single-qubit measurements at the end nodes.
Notation
- $n$: number of network nodes taking part in the anonymous transmission.
- $|\\\psi \\\rangle$: quantum message which the sender wants to send anonymously.
- $S$: the sender of the quantum message.
- $R$: the receiver of the quantum message.
Properties
See Quantum Anonymous Transmission for the precise security definition. Pseudocode given below implements secure anonymous transmission, i.e. it hides the identities of the sender and the receiver from other nodes in the network. That is, the maximum probability that adversaries guess the identity of $S$ or $R$ given all the classical and quantum information they have available at the end of the protocol is no larger than the uncertainty the adversaries have about the identities of $S$ and $R$ before the protocol begins. More formally, the anonymous transmission protocol with the GHZ state is sender- and receiver-secure:
$$ P_{\\\text{guess}}[S|C,S\\\notin {\\\mathcal {A}}]\\\leq \\\max _{i \\\in [n]}P[S=i|S\\\notin {\\\mathcal {A}}]={\\\frac {1}{n-t}},$$
$$P_{\\\text{guess}}[R|C,S\\\notin {\\\mathcal {A}}]\\\leq \\\max _{i \\\in [n]}P[R=i|S\\\notin {\\\mathcal {A}}]={\\\frac {1}{n-t}},$$
where $\\\mathcal {A}$ is the subset of $t$ adversaries among $n$ nodes and $C$ is the register that contains all classical and quantum side information accessible to the adversaries. Note that this implies that the protocol is also trace-less, since even if the adversary hijacks any $ t \\\leq n-2$ players and gains access to all of their classical and quantum information after the end of the protocol, she cannot learn the identities of $S$ and $R$. For a formal argument see [6].Technical Description
Receiver $R$ is determined before the start of the protocol. $S$ holds a message qubit $|\\\psi \\\rangle$.
- Nodes run a collision detection protocol and determine a single sender $S$.
- A trusted source distributes $n$-partite GHZ state to every player
$$
|GHZ \\\rangle = \\\frac{1}{\\\sqrt{2}} ( |0^n\\\rangle + |1^n\\\rangle )
$$ - Anonymous entanglement:
- Sender $S$ and receiver $R$ do not do anything to their part of the state.
- Every player $j \\\in [n] \\\setminus{S, R}$:
- Applies a Hadamard transform to her qubit;
- Measures this qubit in the computational basis with outcome $m_j$;
- Broadcasts $m_j$.
- $S$ picks a random bit $b \\\in_R {0,1}$ and broadcasts $b$.
- $S$ applies a phase flip $Z$ to her qubit if $b = 1$.
- $R$ picks a random bit $b’ \\\in_R {0,1}$ and broadcasts $b’$.
- $R$ applies a phase flip $Z$ to her qubit, if
$$
b \\\oplus \\\bigoplus_{j \\\in [n] \\\setminus {S, R}} m_j = 1
$$
$S$ and $R$ share anonymous entanglement
$$
|\\\Gamma \\\rangle_{SR} = \\\frac{1}{\\\sqrt{2}} ( |00 \\\rangle + |11 \\\rangle )
$$
- $S$ uses the quantum teleportation circuit with input $|psirangle$ and anonymous entanglement $|\\\Gamma \\\rangle_{SR}$, and obtains measurement outcomes $m_0, m_1$.
- The players run a protocol to anonymously send bits $m_0, m_1$ from $S$ to $R$ (see Further Information for details).
- $R$ applies the transformation described by $m_0, m_1$ on his part of $|\\\Gamma \\\rangle_{SR}$ and obtains $|\\\psi \\\rangle_{SR}$.
Experimental Implementations
No content has been added to this section, yet!
Related Codes
Description Link Implementation of GHZ-based Quantum Anonymous Transmission using Netsquid. Link Further Information
- To determine the sender $S$ (Step 1) one can run either a classical collision detection protocol of [4] or a quantum collision detection protocol of [6] . The quantum version of the protocol requires additional $(\\\left\\\lceil \\\log{n} \\\right \\\rceil +1)$ GHZ states.
- To determine the receiver $R$ during the protocol one can incorporate an additional step using a classical receiver notification protocol of [4] .
To send classical teleportation bits $m_{0},m_{1}$ (Step 5) the players can run a classical logical OR protocol of [4] or anonymous transmission protocol for classical bits with quantum resources of [6] . The quantum protocol requires one additional GHZ state for transmitting one classical bit. - The anonymous transmission of quantum states was introduced in [6] .
- The problem was subsequently developed to consider the preparation and certification of the GHZ state [3], [5], [7] .
- In [5] , it was first shown that the proposed protocol is information-theoretically secure against an active adversary.
- In [1] a protocol using another multipartite state, the W state, was introduced. The reference discusses the noise robustness of both GHZ-based and W-based protocols and compares the performance of both protocols.
- Other protocols were proposed, which do not make use of multipartite entanglement, but utilise solely Bell pairs to create anonymous entanglement [2] .
References
need to add
- 2025-05-16 at 16:51 by JuliaM
implements Anonymous Transmission
Introduction
This protocol implements the task of Anonymous Transmission in a multiple node quantum network. The protocol uses $n$-partite GHZ state to enable two nodes, sender and receiver, to establish a link which they use to transmit a quantum message. Importantly, the quantum message is transmitted in a way that the identity of the sender is unknown to every other node, and the identity of the receiver is known only to the sender.
Outline
The presented GHZ-based quantum anonymous transmission protocol is based on the work of [6]. The goal of the protocol is to transmit a quantum state $|psi rangle$ from the sender $S$ to the receiver $R$, while keeping the identities of $S$ and $R$ anonymous. We assume that there is exactly one receiver which is determined before the start of the protocol. The protocol consists of the following steps:
- Collision detection: Nodes run a collision detection protocol to determine a single sender $S$.
- State distribution: A trusted source distributes the $n$-partite GHZ state.
- Anonymous entanglement: $n-2$ nodes (all except for $S$ and $R$) measure in the $X$ basis and broadcast their measurement outcome. $S$ and $R$ broadcast random dummy bits. The parity of measurement outcomes allows to establish an entangled link between $S$ and $R$ which is called anonymous entanglement (AE).
- Teleportation: Sender $S$ teleports the message state $|\\\psi \\\rangle$ to the receiver $R$ using the established anonymous entanglement. Classical message $m$ associated with teleportation is also sent anonymously.
Assumptions
- Network: The network consists of $n$ nodes that are fully identified and completely connected with pairwise authenticated classical channels. Additionally, there is a secure classical broadcast channel.
- Source: Trusted multipartite state source.
- Adversarial model: active adversary who does not control the source.
Requirements
- Network stage: quantum memory network.
- Relevant parameters to establish one anonymous link: $k=1$ round of quantum communication per node, circuit depth $m=1$, $q=1$ physical qubits per node.
- Quantum memories, single-qubit Pauli gates and single-qubit measurements at the end nodes.
Notation
- $n$: number of network nodes taking part in the anonymous transmission.
- $|\\\psi \\\rangle$: quantum message which the sender wants to send anonymously.
- $S$: the sender of the quantum message.
- $R$: the receiver of the quantum message.
Properties
See Quantum Anonymous Transmission for the precise security definition. Pseudocode given below implements secure anonymous transmission, i.e. it hides the identities of the sender and the receiver from other nodes in the network. That is, the maximum probability that adversaries guess the identity of $S$ or $R$ given all the classical and quantum information they have available at the end of the protocol is no larger than the uncertainty the adversaries have about the identities of $S$ and $R$ before the protocol begins. More formally, the anonymous transmission protocol with the GHZ state is sender- and receiver-secure:
$$ P_{\\\text{guess}}[S|C,S\\\notin {\\\mathcal {A}}]\\\leq \\\max _{i \\\in [n]}P[S=i|S\\\notin {\\\mathcal {A}}]={\\\frac {1}{n-t}},$$
$$P_{\\\text{guess}}[R|C,S\\\notin {\\\mathcal {A}}]\\\leq \\\max _{i \\\in [n]}P[R=i|S\\\notin {\\\mathcal {A}}]={\\\frac {1}{n-t}},$$
where $\\\mathcal {A}$ is the subset of $t$ adversaries among $n$ nodes and $C$ is the register that contains all classical and quantum side information accessible to the adversaries. Note that this implies that the protocol is also trace-less, since even if the adversary hijacks any $ t \\\leq n-2$ players and gains access to all of their classical and quantum information after the end of the protocol, she cannot learn the identities of $S$ and $R$. For a formal argument see [6].Technical Description
Receiver $R$ is determined before the start of the protocol. $S$ holds a message qubit $|\\\psi \\\rangle$.
- Nodes run a collision detection protocol and determine a single sender $S$.
- A trusted source distributes $n$-partite GHZ state to every player
$$
|GHZ \\\rangle = \\\frac{1}{\\\sqrt{2}} ( |0^n\\\rangle + |1^n\\\rangle )
$$ - Anonymous entanglement:
- Sender $S$ and receiver $R$ do not do anything to their part of the state.
- Every player $j \\\in [n] \\\setminus{S, R}$:
- Applies a Hadamard transform to her qubit;
- Measures this qubit in the computational basis with outcome $m_j$;
- Broadcasts $m_j$.
- $S$ picks a random bit $b \\\in_R {0,1}$ and broadcasts $b$.
- $S$ applies a phase flip $Z$ to her qubit if $b = 1$.
- $R$ picks a random bit $b’ \\\in_R {0,1}$ and broadcasts $b’$.
- $R$ applies a phase flip $Z$ to her qubit, if
$$
b \\\oplus \\\bigoplus_{j \\\in [n] \\\setminus {S, R}} m_j = 1
$$
$S$ and $R$ share anonymous entanglement
$$
|\\\Gamma \\\rangle_{SR} = \\\frac{1}{\\\sqrt{2}} ( |00 \\\rangle + |11 \\\rangle )
$$
- $S$ uses the quantum teleportation circuit with input $|psirangle$ and anonymous entanglement $|\\\Gamma \\\rangle_{SR}$, and obtains measurement outcomes $m_0, m_1$.
- The players run a protocol to anonymously send bits $m_0, m_1$ from $S$ to $R$ (see Further Information for details).
- $R$ applies the transformation described by $m_0, m_1$ on his part of $|\\\Gamma \\\rangle_{SR}$ and obtains $|\\\psi \\\rangle_{SR}$.
Experimental Implementations
No content has been added to this section, yet!
Related Codes
Description Link Implementation of GHZ-based Quantum Anonymous Transmission using Netsquid. Link Further Information
- To determine the sender $S$ (Step 1) one can run either a classical collision detection protocol of [4] or a quantum collision detection protocol of [6] . The quantum version of the protocol requires additional $(\\\left\\\lceil \\\log{n} \\\right \\\rceil +1)$ GHZ states.
- To determine the receiver $R$ during the protocol one can incorporate an additional step using a classical receiver notification protocol of [4] .
To send classical teleportation bits $m_{0},m_{1}$ (Step 5) the players can run a classical logical OR protocol of [4] or anonymous transmission protocol for classical bits with quantum resources of [6] . The quantum protocol requires one additional GHZ state for transmitting one classical bit. - The anonymous transmission of quantum states was introduced in [6] .
- The problem was subsequently developed to consider the preparation and certification of the GHZ state [3], [5], [7] .
- In [5] , it was first shown that the proposed protocol is information-theoretically secure against an active adversary.
- In [1] a protocol using another multipartite state, the W state, was introduced. The reference discusses the noise robustness of both GHZ-based and W-based protocols and compares the performance of both protocols.
- Other protocols were proposed, which do not make use of multipartite entanglement, but utilise solely Bell pairs to create anonymous entanglement [2] .
References
need to add
- 2025-05-16 at 11:07 by JuliaM
implements Anonymous Transmission
Introduction
This protocol implements the task of Anonymous Transmission in a multiple node quantum network. The protocol uses $n$-partite GHZ state to enable two nodes, sender and receiver, to establish a link which they use to transmit a quantum message. Importantly, the quantum message is transmitted in a way that the identity of the sender is unknown to every other node, and the identity of the receiver is known only to the sender.
Outline
The presented GHZ-based quantum anonymous transmission protocol is based on the work of [6]. The goal of the protocol is to transmit a quantum state $|psi rangle$ from the sender $S$ to the receiver $R$, while keeping the identities of $S$ and $R$ anonymous. We assume that there is exactly one receiver which is determined before the start of the protocol. The protocol consists of the following steps:
- Collision detection: Nodes run a collision detection protocol to determine a single sender $S$.
- State distribution: A trusted source distributes the $n$-partite GHZ state.
- Anonymous entanglement: $n-2$ nodes (all except for $S$ and $R$) measure in the $X$ basis and broadcast their measurement outcome. $S$ and $R$ broadcast random dummy bits. The parity of measurement outcomes allows to establish an entangled link between $S$ and $R$ which is called anonymous entanglement (AE).
- Teleportation: Sender $S$ teleports the message state $|\\\psi \\\rangle$ to the receiver $R$ using the established anonymous entanglement. Classical message $m$ associated with teleportation is also sent anonymously.
Assumptions
- Network: The network consists of $n$ nodes that are fully identified and completely connected with pairwise authenticated classical channels. Additionally, there is a secure classical broadcast channel.
- Source: Trusted multipartite state source.
- Adversarial model: active adversary who does not control the source.
Requirements
- Network stage: quantum memory network.
- Relevant parameters to establish one anonymous link: $k=1$ round of quantum communication per node, circuit depth $m=1$, $q=1$ physical qubits per node.
- Quantum memories, single-qubit Pauli gates and single-qubit measurements at the end nodes.
Notation
- $n$: number of network nodes taking part in the anonymous transmission.
- $|\\\psi \\\rangle$: quantum message which the sender wants to send anonymously.
- $S$: the sender of the quantum message.
- $R$: the receiver of the quantum message.
Properties
See Quantum Anonymous Transmission for the precise security definition. Pseudocode given below implements secure anonymous transmission, i.e. it hides the identities of the sender and the receiver from other nodes in the network. That is, the maximum probability that adversaries guess the identity of $S$ or $R$ given all the classical and quantum information they have available at the end of the protocol is no larger than the uncertainty the adversaries have about the identities of $S$ and $R$ before the protocol begins. More formally, the anonymous transmission protocol with the GHZ state is sender- and receiver-secure:
$$ P_{\\\text{guess}}[S|C,S\\\notin {\\\mathcal {A}}]\\\leq \\\max _{i \\\in [n]}P[S=i|S\\\notin {\\\mathcal {A}}]={\\\frac {1}{n-t}},$$
$$P_{\\\text{guess}}[R|C,S\\\notin {\\\mathcal {A}}]\\\leq \\\max _{i \\\in [n]}P[R=i|S\\\notin {\\\mathcal {A}}]={\\\frac {1}{n-t}},$$
where $\\\mathcal {A}$ is the subset of $t$ adversaries among $n$ nodes and $C$ is the register that contains all classical and quantum side information accessible to the adversaries. Note that this implies that the protocol is also trace-less, since even if the adversary hijacks any $ t \\\leq n-2$ players and gains access to all of their classical and quantum information after the end of the protocol, she cannot learn the identities of $S$ and $R$. For a formal argument see [6].Technical Description
Receiver $R$ is determined before the start of the protocol. $S$ holds a message qubit $|\\\psi \\\rangle$.
- Nodes run a collision detection protocol and determine a single sender $S$.
- A trusted source distributes $n$-partite GHZ state to every player
$$
|GHZ \\\rangle = \\\frac{1}{\\\sqrt{2}} ( |0^n\\\rangle + |1^n\\\rangle )
$$ - Anonymous entanglement:
- Sender $S$ and receiver $R$ do not do anything to their part of the state.
- Every player $j \\\in [n] \\\setminus{S, R}$:
- Applies a Hadamard transform to her qubit;
- Measures this qubit in the computational basis with outcome $m_j$;
- Broadcasts $m_j$.
- $S$ picks a random bit $b \\\in_R {0,1}$ and broadcasts $b$.
- $S$ applies a phase flip $Z$ to her qubit if $b = 1$.
- $R$ picks a random bit $b’ \\\in_R {0,1}$ and broadcasts $b’$.
- $R$ applies a phase flip $Z$ to her qubit, if
$$
b \\\oplus \\\bigoplus_{j \\\in [n] \\\setminus {S, R}} m_j = 1
$$
$S$ and $R$ share anonymous entanglement
$$
|\\\Gamma \\\rangle_{SR} = \\\frac{1}{\\\sqrt{2}} ( |00 \\\rangle + |11 \\\rangle )
$$
- $S$ uses the quantum teleportation circuit with input $|psirangle$ and anonymous entanglement $|\\\Gamma \\\rangle_{SR}$, and obtains measurement outcomes $m_0, m_1$.
- The players run a protocol to anonymously send bits $m_0, m_1$ from $S$ to $R$ (see Further Information for details).
- $R$ applies the transformation described by $m_0, m_1$ on his part of $|\\\Gamma \\\rangle_{SR}$ and obtains $|\\\psi \\\rangle_{SR}$.
Experimental Implementations
No content has been added to this section, yet!
Further Information
- To determine the sender $S$ (Step 1) one can run either a classical collision detection protocol of [4] or a quantum collision detection protocol of [6] . The quantum version of the protocol requires additional $(\\\left\\\lceil \\\log{n} \\\right \\\rceil +1)$ GHZ states.
- To determine the receiver $R$ during the protocol one can incorporate an additional step using a classical receiver notification protocol of [4] .
To send classical teleportation bits $m_{0},m_{1}$ (Step 5) the players can run a classical logical OR protocol of [4] or anonymous transmission protocol for classical bits with quantum resources of [6] . The quantum protocol requires one additional GHZ state for transmitting one classical bit. - The anonymous transmission of quantum states was introduced in [6] .
- The problem was subsequently developed to consider the preparation and certification of the GHZ state [3], [5], [7] .
- In [5] , it was first shown that the proposed protocol is information-theoretically secure against an active adversary.
- In [1] a protocol using another multipartite state, the W state, was introduced. The reference discusses the noise robustness of both GHZ-based and W-based protocols and compares the performance of both protocols.
- Other protocols were proposed, which do not make use of multipartite entanglement, but utilise solely Bell pairs to create anonymous entanglement [2] .
- 2025-05-16 at 10:56 by JuliaM
implements Anonymous Transmission
Introduction
This protocol implements the task of Anonymous Transmission in a multiple node quantum network. The protocol uses $n$-partite GHZ state to enable two nodes, sender and receiver, to establish a link which they use to transmit a quantum message. Importantly, the quantum message is transmitted in a way that the identity of the sender is unknown to every other node, and the identity of the receiver is known only to the sender.
Outline
The presented GHZ-based quantum anonymous transmission protocol is based on the work of [6]. The goal of the protocol is to transmit a quantum state $|psi rangle$ from the sender $S$ to the receiver $R$, while keeping the identities of $S$ and $R$ anonymous. We assume that there is exactly one receiver which is determined before the start of the protocol. The protocol consists of the following steps:
- Collision detection: Nodes run a collision detection protocol to determine a single sender $S$.
- State distribution: A trusted source distributes the $n$-partite GHZ state.
- Anonymous entanglement: $n-2$ nodes (all except for $S$ and $R$) measure in the $X$ basis and broadcast their measurement outcome. $S$ and $R$ broadcast random dummy bits. The parity of measurement outcomes allows to establish an entangled link between $S$ and $R$ which is called anonymous entanglement (AE).
- Teleportation: Sender $S$ teleports the message state $|\\\psi \\\rangle$ to the receiver $R$ using the established anonymous entanglement. Classical message $m$ associated with teleportation is also sent anonymously.
Assumptions
- Network: The network consists of $n$ nodes that are fully identified and completely connected with pairwise authenticated classical channels. Additionally, there is a secure classical broadcast channel.
- Source: Trusted multipartite state source.
- Adversarial model: active adversary who does not control the source.
Requirements
- Network stage: quantum memory network.
- Relevant parameters to establish one anonymous link: $k=1$ round of quantum communication per node, circuit depth $m=1$, $q=1$ physical qubits per node.
- Quantum memories, single-qubit Pauli gates and single-qubit measurements at the end nodes.
Notation
- $n$: number of network nodes taking part in the anonymous transmission.
- $|psi rangle$: quantum message which the sender wants to send anonymously.
- $S$: the sender of the quantum message.
- $R$: the receiver of the quantum message.
Properties
See Quantum Anonymous Transmission for the precise security definition. Pseudocode given below implements secure anonymous transmission, i.e. it hides the identities of the sender and the receiver from other nodes in the network. That is, the maximum probability that adversaries guess the identity of $S$ or $R$ given all the classical and quantum information they have available at the end of the protocol is no larger than the uncertainty the adversaries have about the identities of $S$ and $R$ before the protocol begins. More formally, the anonymous transmission protocol with the GHZ state is sender- and receiver-secure:
$$ P_{text{guess}}[S|C,Snotin {mathcal {A}}]leq max _{iin [n]}P[S=i|Snotin {mathcal {A}}]={frac {1}{n-t}},$$
$$P_{text{guess}}[R|C,Snotin {mathcal {A}}]leq max _{iin [n]}P[R=i|Snotin {mathcal {A}}]={frac {1}{n-t}},$$
where $mathcal {A}$ is the subset of $t$ adversaries among $n$ nodes and $C$ is the register that contains all classical and quantum side information accessible to the adversaries. Note that this implies that the protocol is also trace-less, since even if the adversary hijacks any $ tleq n-2$ players and gains access to all of their classical and quantum information after the end of the protocol, she cannot learn the identities of $S$ and $R$. For a formal argument see [6].Technical Description
Receiver $R$ is determined before the start of the protocol. $S$ holds a message qubit $|psirangle$.
- Nodes run a collision detection protocol and determine a single sender $S$.
- A trusted source distributes $n$-partite GHZ state to every player
$$
|GHZrangle = frac{1}{sqrt{2}} ( |0^nrangle + |1^nrangle )
$$ - Anonymous entanglement:
- Sender $S$ and receiver $R$ do not do anything to their part of the state.
- Every player $j in [n] setminus {S, R}$:
- Applies a Hadamard transform to her qubit;
- Measures this qubit in the computational basis with outcome $m_j$;
- Broadcasts $m_j$.
- $S$ picks a random bit $b in_R {0,1}$ and broadcasts $b$.
- $S$ applies a phase flip $Z$ to her qubit if $b = 1$.
- $R$ picks a random bit $b’ in_R {0,1}$ and broadcasts $b’$.
- $R$ applies a phase flip $Z$ to her qubit, if
$$
b oplus bigoplus_{j in [n] setminus {S, R}} m_j = 1
$$
$S$ and $R$ share anonymous entanglement
$$
|Gammarangle_{SR} = frac{1}{sqrt{2}} ( |00rangle + |11rangle )
$$
- $S$ uses the quantum teleportation circuit with input $|psirangle$ and anonymous entanglement $|Gammarangle_{SR}$, and obtains measurement outcomes $m_0, m_1$.
- The players run a protocol to anonymously send bits $m_0, m_1$ from $S$ to $R$ (see Further Information for details).
- $R$ applies the transformation described by $m_0, m_1$ on his part of $|Gammarangle_{SR}$ and obtains $|psirangle_{SR}$.
Experimental Implementations
No content has been added to this section, yet!
Further Information
- To determine the sender $S$ (Step 1) one can run either a classical collision detection protocol of [4] or a quantum collision detection protocol of [6] . The quantum version of the protocol requires additional $(leftlceil log nrightrceil +1)$ GHZ states.
- To determine the receiver $R$ during the protocol one can incorporate an additional step using a classical receiver notification protocol of [4] .
To send classical teleportation bits $m_{0},m_{1}$ (Step 5) the players can run a classical logical OR protocol of [4] or anonymous transmission protocol for classical bits with quantum resources of [6] . The quantum protocol requires one additional GHZ state for transmitting one classical bit. - The anonymous transmission of quantum states was introduced in [6] .
- The problem was subsequently developed to consider the preparation and certification of the GHZ state [3], [5], [7] .
- In [5] , it was first shown that the proposed protocol is information-theoretically secure against an active adversary.
- In [1] a protocol using another multipartite state, the W state, was introduced. The reference discusses the noise robustness of both GHZ-based and W-based protocols and compares the performance of both protocols.
- Other protocols were proposed, which do not make use of multipartite entanglement, but utilise solely Bell pairs to create anonymous entanglement [2] .
- 2025-05-16 at 10:56 by JuliaM
implements Anonymous Transmission
Introduction
This protocol implements the task of Anonymous Transmission in a multiple node quantum network. The protocol uses $n$-partite GHZ state to enable two nodes, sender and receiver, to establish a link which they use to transmit a quantum message. Importantly, the quantum message is transmitted in a way that the identity of the sender is unknown to every other node, and the identity of the receiver is known only to the sender.
Outline
The presented GHZ-based quantum anonymous transmission protocol is based on the work of [6]. The goal of the protocol is to transmit a quantum state $|psi rangle$ from the sender $S$ to the receiver $R$, while keeping the identities of $S$ and $R$ anonymous. We assume that there is exactly one receiver which is determined before the start of the protocol. The protocol consists of the following steps:
- Collision detection: Nodes run a collision detection protocol to determine a single sender $S$.
- State distribution: A trusted source distributes the $n$-partite GHZ state.
- Anonymous entanglement: $n-2$ nodes (all except for $S$ and $R$) measure in the $X$ basis and broadcast their measurement outcome. $S$ and $R$ broadcast random dummy bits. The parity of measurement outcomes allows to establish an entangled link between $S$ and $R$ which is called anonymous entanglement (AE).
- Teleportation: Sender $S$ teleports the message state $|\\\psi \\\rangle$ to the receiver $R$ using the established anonymous entanglement. Classical message $m$ associated with teleportation is also sent anonymously.
Assumptions
- Network: The network consists of $n$ nodes that are fully identified and completely connected with pairwise authenticated classical channels. Additionally, there is a secure classical broadcast channel.
- Source: Trusted multipartite state source.
- Adversarial model: active adversary who does not control the source.
Requirements
- Network stage: quantum memory network.
- Relevant parameters to establish one anonymous link: $k=1$ round of quantum communication per node, circuit depth $m=1$, $q=1$ physical qubits per node.
- Quantum memories, single-qubit Pauli gates and single-qubit measurements at the end nodes.
Notation
- $n$: number of network nodes taking part in the anonymous transmission.
- $|psi rangle$: quantum message which the sender wants to send anonymously.
- $S$: the sender of the quantum message.
- $R$: the receiver of the quantum message.
Properties
See Quantum Anonymous Transmission for the precise security definition. Pseudocode given below implements secure anonymous transmission, i.e. it hides the identities of the sender and the receiver from other nodes in the network. That is, the maximum probability that adversaries guess the identity of $S$ or $R$ given all the classical and quantum information they have available at the end of the protocol is no larger than the uncertainty the adversaries have about the identities of $S$ and $R$ before the protocol begins. More formally, the anonymous transmission protocol with the GHZ state is sender- and receiver-secure:
$$ P_{text{guess}}[S|C,Snotin {mathcal {A}}]leq max _{iin [n]}P[S=i|Snotin {mathcal {A}}]={frac {1}{n-t}},$$
$$P_{text{guess}}[R|C,Snotin {mathcal {A}}]leq max _{iin [n]}P[R=i|Snotin {mathcal {A}}]={frac {1}{n-t}},$$
where $mathcal {A}$ is the subset of $t$ adversaries among $n$ nodes and $C$ is the register that contains all classical and quantum side information accessible to the adversaries. Note that this implies that the protocol is also trace-less, since even if the adversary hijacks any $ tleq n-2$ players and gains access to all of their classical and quantum information after the end of the protocol, she cannot learn the identities of $S$ and $R$. For a formal argument see [6].Technical Description
Receiver $R$ is determined before the start of the protocol. $S$ holds a message qubit $|psirangle$.
- Nodes run a collision detection protocol and determine a single sender $S$.
- A trusted source distributes $n$-partite GHZ state to every player
$$
|GHZrangle = frac{1}{sqrt{2}} ( |0^nrangle + |1^nrangle )
$$ - Anonymous entanglement:
- Sender $S$ and receiver $R$ do not do anything to their part of the state.
- Every player $j in [n] setminus {S, R}$:
- Applies a Hadamard transform to her qubit;
- Measures this qubit in the computational basis with outcome $m_j$;
- Broadcasts $m_j$.
- $S$ picks a random bit $b in_R {0,1}$ and broadcasts $b$.
- $S$ applies a phase flip $Z$ to her qubit if $b = 1$.
- $R$ picks a random bit $b’ in_R {0,1}$ and broadcasts $b’$.
- $R$ applies a phase flip $Z$ to her qubit, if
$$
b oplus bigoplus_{j in [n] setminus {S, R}} m_j = 1
$$
$S$ and $R$ share anonymous entanglement
$$
|Gammarangle_{SR} = frac{1}{sqrt{2}} ( |00rangle + |11rangle )
$$
- $S$ uses the quantum teleportation circuit with input $|psirangle$ and anonymous entanglement $|Gammarangle_{SR}$, and obtains measurement outcomes $m_0, m_1$.
- The players run a protocol to anonymously send bits $m_0, m_1$ from $S$ to $R$ (see Further Information for details).
- $R$ applies the transformation described by $m_0, m_1$ on his part of $|Gammarangle_{SR}$ and obtains $|psirangle_{SR}$.
Experimental Implementations
No content has been added to this section, yet!
Further Information
- To determine the sender $S$ (Step 1) one can run either a classical collision detection protocol of [4] or a quantum collision detection protocol of [6] . The quantum version of the protocol requires additional $(leftlceil log nrightrceil +1)$ GHZ states.
- To determine the receiver $R$ during the protocol one can incorporate an additional step using a classical receiver notification protocol of [4] .
To send classical teleportation bits $m_{0},m_{1}$ (Step 5) the players can run a classical logical OR protocol of [4] or anonymous transmission protocol for classical bits with quantum resources of [6] . The quantum protocol requires one additional GHZ state for transmitting one classical bit. - The anonymous transmission of quantum states was introduced in [6] .
- The problem was subsequently developed to consider the preparation and certification of the GHZ state [3], [5], [7] .
- In [5] , it was first shown that the proposed protocol is information-theoretically secure against an active adversary.
- In [1] a protocol using another multipartite state, the W state, was introduced. The reference discusses the noise robustness of both GHZ-based and W-based protocols and compares the performance of both protocols.
- Other protocols were proposed, which do not make use of multipartite entanglement, but utilise solely Bell pairs to create anonymous entanglement [2] .