Revision History for: Prepare-and-Send Verifiable Universal Blind Quantum Computation
- 2026-01-09 at 14:50 by Mina Doosti
Introduction
This protocol achieves the functionality of Secure Verifiable Delegated Quantum Computation, which enables a client with limited quantum technology to delegate a computation to an untrusted but powerful quantum server in such a manner that the privacy of the computation is maintained. This protocol introduces verifiability as a property and allows the client to verify the correctness of Prepare-and-Send Universal Blind Quantum Computation. The client has the ability to verify whether the server has followed the instructions of the protocol, and also can check if the server tried to deviate from the protocol ,which would have resulted in an incorrect output state.
Outline
This protocol is a modified version of Prepare-and-Send Universal Blind Quantum Computation, which is based on (MBQC). Here a powerful adversarial server is delegated with quantum computation which maintains the privacy of the computation. Any computational deviations by this server are detected by high probability. This is achieved by insertion of randomly prepared and blindly isolated single qubits in the computation, which act as a trap (trap qubits), hence assisting the client in verification.
MBQC required a set of the initial state for computation. The brickwork states used in Prepare-and-Send Universal Blind Quantum Computation are modified to cylinder brickwork states which enables the client to embed a trap qubit surrounded by multiple dummy qubits without disrupting the computation. This state is universal and maintains the privacy of the client’s preparation. The dummy qubits here do not take part in the actual computation as they are disentangled from the rest of the qubits of the graph state. Hence by adding them to the neighboring nodes of the trap qubits, they are blindly isolated and thus do not interfere with the actual computation. The dummy qubits are added next to the trap qubit in a tape format as seen in cylinder brickwork states.
This protocol is divided into four stages: Client’s preparation, server’s preparation, interaction and measurement, verification.
- Client’s preparation: The partially quantum client prepares the quantum states with embedded traps qubits and sends them to the server for creation of the cylinder brickwork state.
1. For the server to create a cylinder brickwork state, the client prepares $m$ single qubit states. The first $n$ qubit input states are specially encoded and Quantum one time pad is applied to these states with randomly chosen keys.
2. Then the client randomly selects one qubit as the trap qubit and corresponding to the graph of cylinder brickwork state, all the other qubits in the tape are set as the dummy qubits. The trap qubit is prepared with the local phase angle set to $0$. The dummy qubits isolate the trap qubit from the graph state.
3. The remaining non-input qubit states (not including the dummy states and trap qubit) are prepared with randomly chosen local phase angles.
4. The client then sends all the prepared qubits in the respective order to the server so the graph state can be constructed. - Server’s Preparation: The server receives the qubits in a sequential order of rows and columns till all $m$ qubits are received. The server then entangles them according to the cylinder brickwork state (using CZ gate).
- Interaction and Measurement: This step is exactly the same as for Prepare-and-Send Universal Blind Quantum Computation.
1. For a specific computation, MBQC decides which measurement angle is selected along with some extra Pauli X, Z corrections for every qubit. The correction sets are unique for every graph state and depend on the previous measurement. These can obtained from flow construction. The qubits have a randomly chosen local phase angle and hence the same local phase angle is used for computation as well as for output correction. To hide the state, a randomly chosen $\\\pi$ rotation which may or may not be added. From all the above-mentioned conditions, a final measurement angle is formed and the client sends a classical message to the server to inform the server about the final measurement basis (in $(X, Y)$ plane) in which they should measure the corresponding qubit. Thus it reveals no information about the underlying computation.
2. The server sends the classical output of each non-input qubit’s measurement to the client. The client considers the $\\\pi$ rotation to get the corrected output. The client also uses this to calculate the measurement angle for the next qubit and thus repeats the process until the last output qubits are reached. - Verification: The verification is carried on by the client by comparing the outcome of the trap qubit measurements with the expected outcome.
- For Quantum outputs:
1. The server sends all the output qubits to the client.
2. From these output qubits, the client performs a measurement on the trap qubit. If the output is equal to the expected outcome, the computation is verified. Otherwise, it is rejected.
3. If the computation is accepted, output correction is performed on the other output qubits (except the trap qubit). - For Classical outputs:
1. The server continues performing measurements on the output qubits with the measurement angles sent by the server.
2. The client compares the output of the trap qubit with the expected output. If it is equal, computation is verified. Otherwise, it is rejected. If the computation is accepted, the client accepts the other output measurement results as the computation result.
- For Quantum outputs:
Assumptions
- The protocol assumes perfect state preparation, transmissions, and measurements.
- The client never deviates from the protocol.
- The position of the trap qubit always remains hidden from the server.
Requirements
- Quantum computation resources for the server.
- A quantum channel from the client to the server to transfer initial quantum states.
- Classical channel from the client to the server to transfer measurement angles and outputs.
- Measurement devices for the server.
- Measurement devices for the client in case of quantum outputs.
Notation
- $n$: Total number of input qubits. Also total number of output qubits in quantum outputs.
- $m$: Total number of qubits in the graph state.
- $|I\\\rangle$: $n$ qubit input state.
- $|e\\\rangle$: Encoded $n$ qubit input state.
- $x$: Set of random bits used in encoding $|I\\\rangle$ via quantum one time pad.
- $t$: Trap qubit position vertex in the graph state.
- $D$: Set of all position vertices in the tape of the cylinder brickwork state.
- $\\\theta_i$: Random local phase angles for qubit $i$.
- $|+\\\rangle_{\\\theta_i}$: $\\\frac{1}{\\\sqrt{2}}(|0\\\rangle + e^{i\\\theta_i}|1\\\rangle)$.
- $\\\phi_i$: True measurement angle for qubit $i$. This is assigned corresponding to the graph state.
- $r \\\in \\\{0,1\\\}$: randomly chosen parameter for $\\\pi$ rotation in order to hide classical output.
- $N_g(k)$: Denotes neighborhood of vertex $k$ in graph state.
- $f$: Function which defines flow from measured qubits to non-input qubits, $f$: output vertices $\\\to$ input vertices.
- $\\\theta_i’$: Updated version of Random local phase angle for qubit $i$.
- $\\\delta_i$: Final measurement angle for qubit $i$.
- $b_i$: Measurement output by the server.
- $s$: Sequence of length $m$ describing the result of the nonoutput measurements. $s_i \\\in \\\{0,1\\\}$.
Properties
- The client is partially quantum and should be able to prepare the given initial quantum states.
Security: This protocol is secure against malicious adversary setting and also detects a cheating server. - Universality: This protocol is universal in nature. The universality of the cylinder brickwork state guarantees that the server’s knowledge about the graph does not reveal anything about the underlying computation.
- Correctness: If Client and Server follow the protocol as described above, the outcome will be correct.
- Blindness: This protocol is blind in nature, only revealing $n$ and $m$.
- This protocol requires no quantum memory for the client.
- This protocol is $1 – \\\frac{1}{2m}$ verifiable in the quantum output case.
- This protocol is $1 – \\\frac{1}{2m}$ verifiable in the classical output case.
- The trap qubit in the tape format of the cylinder brickwork state remains disentangled from the rest of the graph.
- Every qubit of the underlying graph could potentially be an isolated trap qubit.
Technical Description
Protocol for quantum output case
Stage 1: Client’s preparation
Input: Cylindrical brickwork state, $|I\\\rangle$.
Output to server: $m$ qubits sequentially.- The client prepares
$$
|e\\\rangle = X_1^{x_1} Z_1(\\\theta_1) \\\otimes \\\cdots \\\otimes X_n^{x_n} Z_n(\\\theta_n)\\\, |I\\\rangle
$$
using QOTP. - Client randomly chooses $t$, where $t \\\in D$.
- For $i = n+1, n+2, \\\ldots, m$ (non-input qubits):
- if $i \\\in D$:
- if $i \\\neq t$, then prepare $|0\\\rangle$ or $|1\\\rangle$,
- if $i = t$, then prepare $|+\\\rangle_{\\\theta_i}$,
- else prepare $|+\\\rangle_{\\\theta_i}$.
- $\\\forall\\\, l \\\in \\\{1,\\\ldots,n\\\}$, client sends all qubits to the server.
Stage 2: Server’s preparation
Input: $m$ qubits sequentially.
Output: Entangled graph state with a disentangled trap qubit.- The server entangles all received qubits using CZ operations according to their indices, creating the cylinder brickwork state.
Stage 3: Interaction and measurement
Input: $\\\delta_i$.
Output: $s_i$.- For $i = 1,2,\\\ldots,m-n$ (received qubits):
- Client computes $\\\phi_i$.
- If $i = t$, then $\\\phi_i = 0$.
- Client randomly selects $r_i$ and generates $\\\theta_i’ = \\\theta_i + r_i .$
- Client computes $ \\\delta_i = (-1)^{x_i + s_{f^{-1}(i)}} \\\phi_i + \\\sum_{j: i \\\in N_g(f(j))} \\\theta_i’ + s_i \\\pi ,$ and sends $\\\delta_i$ to the server.
- Server measures qubit $i$ and sends $b_i$ to the client.
- Client sets $s_i = b_i \\\oplus r_i$ in $s$.
Stage 4: Verification
Input: Output qubits $m-n+1$ to $m$.
Output: Verification result.- For $i = m-n+1,\\\ldots,m$ (output qubits):
- Server sends qubit $i$ to the client.
- Client measures the output trap qubit $t$ with angle $\\\delta_t = \\\phi_t + r_t \\\pi .$
- Client obtains $b_t$.
- If $b_t = r_t$, the computation is accepted;
- otherwise it is rejected.
Experimental Implementations
No content has been added to this section, yet!
Related Codes
Description Link A simulation code for benchmarking the Quantum Token Protocol via VBQC Link Further Information
No content has been added to this section, yet!
References
[1] Fitzsimons, Joseph F., and Elham Kashefi. “Unconditionally verifiable blind quantum computation.” Physical Review A 96, no. 1 (2017): 012303.
- Client’s preparation: The partially quantum client prepares the quantum states with embedded traps qubits and sends them to the server for creation of the cylinder brickwork state.
- 2026-01-09 at 14:49 by Mina Doosti
Introduction
This protocol achieves the functionality of Secure Verifiable Delegated Quantum Computation, which enables a client with limited quantum technology to delegate a computation to an untrusted but powerful quantum server in such a manner that the privacy of the computation is maintained. This protocol introduces verifiability as a property and allows the client to verify the correctness of Prepare-and-Send Universal Blind Quantum Computation. The client has the ability to verify whether the server has followed the instructions of the protocol, and also can check if the server tried to deviate from the protocol ,which would have resulted in an incorrect output state.
Outline
This protocol is a modified version of Prepare-and-Send Universal Blind Quantum Computation, which is based on (MBQC). Here a powerful adversarial server is delegated with quantum computation which maintains the privacy of the computation. Any computational deviations by this server are detected by high probability. This is achieved by insertion of randomly prepared and blindly isolated single qubits in the computation, which act as a trap (trap qubits), hence assisting the client in verification.
MBQC required a set of the initial state for computation. The brickwork states used in Prepare-and-Send Universal Blind Quantum Computation are modified to cylinder brickwork states which enables the client to embed a trap qubit surrounded by multiple dummy qubits without disrupting the computation. This state is universal and maintains the privacy of the client’s preparation. The dummy qubits here do not take part in the actual computation as they are disentangled from the rest of the qubits of the graph state. Hence by adding them to the neighboring nodes of the trap qubits, they are blindly isolated and thus do not interfere with the actual computation. The dummy qubits are added next to the trap qubit in a tape format as seen in cylinder brickwork states.
This protocol is divided into four stages: Client’s preparation, server’s preparation, interaction and measurement, verification.
- Client’s preparation: The partially quantum client prepares the quantum states with embedded traps qubits and sends them to the server for creation of the cylinder brickwork state.
1. For the server to create a cylinder brickwork state, the client prepares $m$ single qubit states. The first $n$ qubit input states are specially encoded and Quantum one time pad is applied to these states with randomly chosen keys.
2. Then the client randomly selects one qubit as the trap qubit and corresponding to the graph of cylinder brickwork state, all the other qubits in the tape are set as the dummy qubits. The trap qubit is prepared with the local phase angle set to $0$. The dummy qubits isolate the trap qubit from the graph state.
3. The remaining non-input qubit states (not including the dummy states and trap qubit) are prepared with randomly chosen local phase angles.
4. The client then sends all the prepared qubits in the respective order to the server so the graph state can be constructed. - Server’s Preparation: The server receives the qubits in a sequential order of rows and columns till all $m$ qubits are received. The server then entangles them according to the cylinder brickwork state (using CZ gate).
- Interaction and Measurement: This step is exactly the same as for Prepare-and-Send Universal Blind Quantum Computation.
1. For a specific computation, MBQC decides which measurement angle is selected along with some extra Pauli X, Z corrections for every qubit. The correction sets are unique for every graph state and depend on the previous measurement. These can obtained from flow construction. The qubits have a randomly chosen local phase angle and hence the same local phase angle is used for computation as well as for output correction. To hide the state, a randomly chosen $\\\pi$ rotation which may or may not be added. From all the above-mentioned conditions, a final measurement angle is formed and the client sends a classical message to the server to inform the server about the final measurement basis (in $(X, Y)$ plane) in which they should measure the corresponding qubit. Thus it reveals no information about the underlying computation.
2. The server sends the classical output of each non-input qubit’s measurement to the client. The client considers the $\\\pi$ rotation to get the corrected output. The client also uses this to calculate the measurement angle for the next qubit and thus repeats the process until the last output qubits are reached. - Verification: The verification is carried on by the client by comparing the outcome of the trap qubit measurements with the expected outcome.
- For Quantum outputs:
1. The server sends all the output qubits to the client.
2. From these output qubits, the client performs a measurement on the trap qubit. If the output is equal to the expected outcome, the computation is verified. Otherwise, it is rejected.
3. If the computation is accepted, output correction is performed on the other output qubits (except the trap qubit). - For Classical outputs:
1. The server continues performing measurements on the output qubits with the measurement angles sent by the server.
2. The client compares the output of the trap qubit with the expected output. If it is equal, computation is verified. Otherwise, it is rejected. If the computation is accepted, the client accepts the other output measurement results as the computation result.
- For Quantum outputs:
Assumptions
- The protocol assumes perfect state preparation, transmissions, and measurements.
- The client never deviates from the protocol.
- The position of the trap qubit always remains hidden from the server.
Requirements
- Quantum computation resources for the server.
- A quantum channel from the client to the server to transfer initial quantum states.
- Classical channel from the client to the server to transfer measurement angles and outputs.
- Measurement devices for the server.
- Measurement devices for the client in case of quantum outputs.
Notation
- $n$: Total number of input qubits. Also total number of output qubits in quantum outputs.
- $m$: Total number of qubits in the graph state.
- $|I\\\rangle$: $n$ qubit input state.
- $|e\\\rangle$: Encoded $n$ qubit input state.
- $x$: Set of random bits used in encoding $|I\\\rangle$ via quantum one time pad.
- $t$: Trap qubit position vertex in the graph state.
- $D$: Set of all position vertices in the tape of the cylinder brickwork state.
- $\\\theta_i$: Random local phase angles for qubit $i$.
- $|+\\\rangle_{\\\theta_i}$: $\\\frac{1}{\\\sqrt{2}}(|0\\\rangle + e^{i\\\theta_i}|1\\\rangle)$.
- $\\\phi_i$: True measurement angle for qubit $i$. This is assigned corresponding to the graph state.
- $r \\\in \\\{0,1\\\}$: randomly chosen parameter for $\\\pi$ rotation in order to hide classical output.
- $N_g(k)$: Denotes neighborhood of vertex $k$ in graph state.
- $f$: Function which defines flow from measured qubits to non-input qubits, $f$: output vertices $\\\to$ input vertices.
- $\\\theta_i\’$: Updated version of Random local phase angle for qubit $i$.
- $\\\delta_i$: Final measurement angle for qubit $i$.
- $b_i$: Measurement output by the server.
- $s$: Sequence of length $m$ describing the result of the nonoutput measurements. $s_i \\\in \\\{0,1\\\}$.
Properties
- The client is partially quantum and should be able to prepare the given initial quantum states.
Security: This protocol is secure against malicious adversary setting and also detects a cheating server. - Universality: This protocol is universal in nature. The universality of the cylinder brickwork state guarantees that the server’s knowledge about the graph does not reveal anything about the underlying computation.
- Correctness: If Client and Server follow the protocol as described above, the outcome will be correct.
- Blindness: This protocol is blind in nature, only revealing $n$ and $m$.
- This protocol requires no quantum memory for the client.
- This protocol is $1 – \\\frac{1}{2m}$ verifiable in the quantum output case.
- This protocol is $1 – \\\frac{1}{2m}$ verifiable in the classical output case.
- The trap qubit in the tape format of the cylinder brickwork state remains disentangled from the rest of the graph.
- Every qubit of the underlying graph could potentially be an isolated trap qubit.
Technical Description
Protocol for quantum output case
Stage 1: Client’s preparation
Input: Cylindrical brickwork state, $|I\\\rangle$.
Output to server: $m$ qubits sequentially.- The client prepares
$$
|e\\\rangle = X_1^{x_1} Z_1(\\\theta_1) \\\otimes \\\cdots \\\otimes X_n^{x_n} Z_n(\\\theta_n)\\\, |I\\\rangle
$$
using QOTP. - Client randomly chooses $t$, where $t \\\in D$.
- For $i = n+1, n+2, \\\ldots, m$ (non-input qubits):
- if $i \\\in D$:
- if $i \\\neq t$, then prepare $|0\\\rangle$ or $|1\\\rangle$,
- if $i = t$, then prepare $|+\\\rangle_{\\\theta_i}$,
- else prepare $|+\\\rangle_{\\\theta_i}$.
- $\\\forall\\\, l \\\in \\\{1,\\\ldots,n\\\}$, client sends all qubits to the server.
Stage 2: Server’s preparation
Input: $m$ qubits sequentially.
Output: Entangled graph state with a disentangled trap qubit.- The server entangles all received qubits using CZ operations according to their indices, creating the cylinder brickwork state.
Stage 3: Interaction and measurement
Input: $\\\delta_i$.
Output: $s_i$.- For $i = 1,2,\\\ldots,m-n$ (received qubits):
- Client computes $\\\phi_i$.
- If $i = t$, then $\\\phi_i = 0$.
- Client randomly selects $r_i$ and generates $\\\theta_i\’ = \\\theta_i + r_i .$
- Client computes $ \\\delta_i = (-1)^{x_i + s_{f^{-1}(i)}} \\\phi_i + \\\sum_{j: i \\\in N_g(f(j))} \\\theta_i\’ + s_i \\\pi ,$ and sends $\\\delta_i$ to the server.
- Server measures qubit $i$ and sends $b_i$ to the client.
- Client sets $s_i = b_i \\\oplus r_i$ in $s$.
Stage 4: Verification
Input: Output qubits $m-n+1$ to $m$.
Output: Verification result.- For $i = m-n+1,\\\ldots,m$ (output qubits):
- Server sends qubit $i$ to the client.
- Client measures the output trap qubit $t$ with angle $\\\delta_t = \\\phi_t + r_t \\\pi .$
- Client obtains $b_t$.
- If $b_t = r_t$, the computation is accepted;
- otherwise it is rejected.
Experimental Implementations
No content has been added to this section, yet!
Related Codes
Description Link A simulation code for benchmarking the Quantum Token Protocol via VBQC Link Further Information
No content has been added to this section, yet!
References
[1] Fitzsimons, Joseph F., and Elham Kashefi. “Unconditionally verifiable blind quantum computation.” Physical Review A 96, no. 1 (2017): 012303.
- Client’s preparation: The partially quantum client prepares the quantum states with embedded traps qubits and sends them to the server for creation of the cylinder brickwork state.
- 2026-01-09 at 14:49 by Mina Doosti
Introduction
This protocol achieves the functionality of Secure Verifiable Delegated Quantum Computation, which enables a client with limited quantum technology to delegate a computation to an untrusted but powerful quantum server in such a manner that the privacy of the computation is maintained. This protocol introduces verifiability as a property and allows the client to verify the correctness of Prepare-and-Send Universal Blind Quantum Computation. The client has the ability to verify whether the server has followed the instructions of the protocol, and also can check if the server tried to deviate from the protocol ,which would have resulted in an incorrect output state.
Outline
This protocol is a modified version of Prepare-and-Send Universal Blind Quantum Computation, which is based on (MBQC). Here a powerful adversarial server is delegated with quantum computation which maintains the privacy of the computation. Any computational deviations by this server are detected by high probability. This is achieved by insertion of randomly prepared and blindly isolated single qubits in the computation, which act as a trap (trap qubits), hence assisting the client in verification.
MBQC required a set of the initial state for computation. The brickwork states used in Prepare-and-Send Universal Blind Quantum Computation are modified to cylinder brickwork states which enables the client to embed a trap qubit surrounded by multiple dummy qubits without disrupting the computation. This state is universal and maintains the privacy of the client’s preparation. The dummy qubits here do not take part in the actual computation as they are disentangled from the rest of the qubits of the graph state. Hence by adding them to the neighboring nodes of the trap qubits, they are blindly isolated and thus do not interfere with the actual computation. The dummy qubits are added next to the trap qubit in a tape format as seen in cylinder brickwork states.
This protocol is divided into four stages: Client’s preparation, server’s preparation, interaction and measurement, verification.
- Client’s preparation: The partially quantum client prepares the quantum states with embedded traps qubits and sends them to the server for creation of the cylinder brickwork state.
1. For the server to create a cylinder brickwork state, the client prepares $m$ single qubit states. The first $n$ qubit input states are specially encoded and Quantum one time pad is applied to these states with randomly chosen keys.
2. Then the client randomly selects one qubit as the trap qubit and corresponding to the graph of cylinder brickwork state, all the other qubits in the tape are set as the dummy qubits. The trap qubit is prepared with the local phase angle set to $0$. The dummy qubits isolate the trap qubit from the graph state.
3. The remaining non-input qubit states (not including the dummy states and trap qubit) are prepared with randomly chosen local phase angles.
4. The client then sends all the prepared qubits in the respective order to the server so the graph state can be constructed. - Server’s Preparation: The server receives the qubits in a sequential order of rows and columns till all $m$ qubits are received. The server then entangles them according to the cylinder brickwork state (using CZ gate).
- Interaction and Measurement: This step is exactly the same as for Prepare-and-Send Universal Blind Quantum Computation.
1. For a specific computation, MBQC decides which measurement angle is selected along with some extra Pauli X, Z corrections for every qubit. The correction sets are unique for every graph state and depend on the previous measurement. These can obtained from flow construction. The qubits have a randomly chosen local phase angle and hence the same local phase angle is used for computation as well as for output correction. To hide the state, a randomly chosen $\\\pi$ rotation which may or may not be added. From all the above-mentioned conditions, a final measurement angle is formed and the client sends a classical message to the server to inform the server about the final measurement basis (in $(X, Y)$ plane) in which they should measure the corresponding qubit. Thus it reveals no information about the underlying computation.
2. The server sends the classical output of each non-input qubit’s measurement to the client. The client considers the $\\\pi$ rotation to get the corrected output. The client also uses this to calculate the measurement angle for the next qubit and thus repeats the process until the last output qubits are reached. - Verification: The verification is carried on by the client by comparing the outcome of the trap qubit measurements with the expected outcome.
- For Quantum outputs:
1. The server sends all the output qubits to the client.
2. From these output qubits, the client performs a measurement on the trap qubit. If the output is equal to the expected outcome, the computation is verified. Otherwise, it is rejected.
3. If the computation is accepted, output correction is performed on the other output qubits (except the trap qubit). - For Classical outputs:
1. The server continues performing measurements on the output qubits with the measurement angles sent by the server.
2. The client compares the output of the trap qubit with the expected output. If it is equal, computation is verified. Otherwise, it is rejected. If the computation is accepted, the client accepts the other output measurement results as the computation result.
- For Quantum outputs:
Assumptions
- The protocol assumes perfect state preparation, transmissions, and measurements.
- The client never deviates from the protocol.
- The position of the trap qubit always remains hidden from the server.
Requirements
- Quantum computation resources for the server.
- A quantum channel from the client to the server to transfer initial quantum states.
- Classical channel from the client to the server to transfer measurement angles and outputs.
- Measurement devices for the server.
- Measurement devices for the client in case of quantum outputs.
Notation
- $n$: Total number of input qubits. Also total number of output qubits in quantum outputs.
- $m$: Total number of qubits in the graph state.
- $|I\\\rangle$: $n$ qubit input state.
- $|e\\\rangle$: Encoded $n$ qubit input state.
- $x$: Set of random bits used in encoding $|I\\\rangle$ via quantum one time pad.
- $t$: Trap qubit position vertex in the graph state.
- $D$: Set of all position vertices in the tape of the cylinder brickwork state.
- $\\\theta_i$: Random local phase angles for qubit $i$.
- $|+\\\rangle_{\\\theta_i}$: $\\\frac{1}{\\\sqrt{2}}(|0\\\rangle + e^{i\\\theta_i}|1\\\rangle)$.
- $\\\phi_i$: True measurement angle for qubit $i$. This is assigned corresponding to the graph state.
- $r \\\in \\\{0,1\\\}$: randomly chosen parameter for $\\\pi$ rotation in order to hide classical output.
- $N_g(k)$: Denotes neighborhood of vertex $k$ in graph state.
- $f$: Function which defines flow from measured qubits to non-input qubits, $f$: output vertices $\\\to$ input vertices.
- $\\\theta_i\’$: Updated version of Random local phase angle for qubit $i$.
- $\\\delta_i$: Final measurement angle for qubit $i$.
- $b_i$: Measurement output by the server.
- $s$: Sequence of length $m$ describing the result of the nonoutput measurements. $s_i \\\in \\\{0,1\\\}$.
Properties
- The client is partially quantum and should be able to prepare the given initial quantum states.
Security: This protocol is secure against malicious adversary setting and also detects a cheating server. - Universality: This protocol is universal in nature. The universality of the cylinder brickwork state guarantees that the server’s knowledge about the graph does not reveal anything about the underlying computation.
- Correctness: If Client and Server follow the protocol as described above, the outcome will be correct.
- Blindness: This protocol is blind in nature, only revealing $n$ and $m$.
- This protocol requires no quantum memory for the client.
- This protocol is $1 – \\\frac{1}{2m}$ verifiable in the quantum output case.
- This protocol is $1 – \\\frac{1}{2m}$ verifiable in the classical output case.
- The trap qubit in the tape format of the cylinder brickwork state remains disentangled from the rest of the graph.
- Every qubit of the underlying graph could potentially be an isolated trap qubit.
Technical Description
Protocol for quantum output case
Stage 1: Client’s preparation
Input: Cylindrical brickwork state, $|I\\\rangle$.
Output to server: $m$ qubits sequentially.- The client prepares
$$
|e\\\rangle = X_1^{x_1} Z_1(\\\theta_1) \\\otimes \\\cdots \\\otimes X_n^{x_n} Z_n(\\\theta_n)\\\, |I\\\rangle
$$
using QOTP. - Client randomly chooses $t$, where $t \\\in D$.
- For $i = n+1, n+2, \\\ldots, m$ (non-input qubits):
- if $i \\\in D$:
- if $i \\\neq t$, then prepare $|0\\\rangle$ or $|1\\\rangle$,
- if $i = t$, then prepare $|+\\\rangle_{\\\theta_i}$,
- else prepare $|+\\\rangle_{\\\theta_i}$.
- $\\\forall\\\, l \\\in \\\{1,\\\ldots,n\\\}$, client sends all qubits to the server.
Stage 2: Server’s preparation
Input: $m$ qubits sequentially.
Output: Entangled graph state with a disentangled trap qubit.- The server entangles all received qubits using CZ operations according to their indices, creating the cylinder brickwork state.
Stage 3: Interaction and measurement
Input: $\\\delta_i$.
Output: $s_i$.- For $i = 1,2,\\\ldots,m-n$ (received qubits):
- Client computes $\\\phi_i$.
- If $i = t$, then $\\\phi_i = 0$.
- Client randomly selects $r_i$ and generates $\\\theta_i\’ = \\\theta_i + r_i .$
- Client computes $ \\\delta_i = (-1)^{x_i + s_{f^{-1}(i)}} \\\phi_i + \\\sum_{j: i \\\in N_g(f(j))} \\\theta_i\’ + s_i \\\pi ,$ and sends $\\\delta_i$ to the server.
- Server measures qubit $i$ and sends $b_i$ to the client.
- Client sets $s_i = b_i \\\oplus r_i$ in $s$.
Stage 4: Verification
Input: Output qubits $m-n+1$ to $m$.
Output: Verification result.- For $i = m-n+1,\\\ldots,m$ (output qubits):
- Server sends qubit $i$ to the client.
- Client measures the output trap qubit $t$ with angle $\\\delta_t = \\\phi_t + r_t \\\pi .$
- Client obtains $b_t$.
- If $b_t = r_t$, the computation is accepted;
- otherwise it is rejected.
Experimental Implementations
No content has been added to this section, yet!
Related Codes
Description Link A simulation code for benchmarking the Quantum Token Protocol via VBQC Link Further Information
No content has been added to this section, yet!
References
[1] Fitzsimons, Joseph F., and Elham Kashefi. “Unconditionally verifiable blind quantum computation.” Physical Review A 96, no. 1 (2017): 012303.
- Client’s preparation: The partially quantum client prepares the quantum states with embedded traps qubits and sends them to the server for creation of the cylinder brickwork state.