We demonstrate how the 5G network slicing model can be extended to address data security requirements. In this work we demonstrate two different slice configurations, with different encryption requirements, representing two diverse use-cases for 5G networking: namely, an enterprise application hosted at a metro network site, and a content delivery network. We create a modified software-defined networking (SDN) orchestrator which calculates and provisions network slices according to the requirements, including encryption backed by quantum key distribution (QKD), or other methods. Slices are automatically provisioned by SDN orchestration of network resources, allowing selection of encrypted links as appropriate, including those which use standard Diffie-Hellman key exchange, QKD and quantum-resistant algorithms (QRAs), as well as no encryption at all. We show that the set-up and tear-down times of the network slices takes of the order of 1-2 minutes, which is an order of magnitude improvement over manually provisioning a link today.

中文翻译：

---

具有 QKD 和量子安全安全性的 5G 网络切片

我们演示了如何扩展 5G 网络切片模型以满足数据安全要求。在这项工作中，我们展示了两种不同的切片配置，具有不同的加密要求，代表了 5G 网络的两个不同用例：即托管在城域网络站点的企业应用程序和内容交付网络。我们创建了一个经过修改的软件定义网络 (SDN) 编排器，它根据要求计算和配置网络切片，包括由量子密钥分发 (QKD) 或其他方法支持的加密。切片由网络资源的 SDN 编排自动提供，允许根据需要选择加密链接，包括使用标准 Diffie-Hellman 密钥交换、QKD 和量子抗性算法 (QRA) 的链接，以及根本没有加密。我们表明，网络切片的设置和拆除时间大约为 1-2 分钟，与目前手动配置链接相比，这是一个数量级的改进。