The explosive growth of users’ requirements promotes the development of optical network function virtualization (ONFV) over elastic optical networks (EON). Through optical network virtualization, network services can be provided by sharing physical resources in terms of virtual optical network (VON), which can simplify optical-layer resource management and promote the flexibility of multi-dimensional resource allocation. However, few studies have paid attention to the security of data transmission in VON. Eavesdropping against VON could compromise not just virtualized services, but the whole infrastructure. Quantum key distribution (QKD) integrated with traditional optical network is a promising technology to solve this problem. In this paper, we first demonstrate the concept of VON embedding (VONE) in the EON integrated with QKD. Based on this concept, a dynamic VONE algorithm is proposed to allocate physical network resources to VON requests, which considers not only bandwidth requirements but also key demands. The performance of the proposed VONE algorithm is evaluated via simulation in terms of blocking probability, key resource utilization as well as average path length. Results show that in order to achieve a tradeoff between blocking probability and key resource utilization, the values of adjustment factor and key generation rate should be appropriately set.

用户需求的爆炸性增长促进了弹性光网络（EON）上光网络功能虚拟化（ONFV）的发展。通过光网络虚拟化，可以通过共享虚拟光网络（VON）的物理资源来提供网络服务，这可以简化光层资源管理并提高多维资源分配的灵活性。但是，很少有研究关注VON中数据传输的安全性。窃听VON不仅会损害虚拟化服务，还会损害整个基础架构。与传统的光网络集成的量子密钥分发（QKD）是解决此问题的有前途的技术。在本文中，我们首先演示了在与QKD集成的EON中进行VON嵌入（VONE）的概念。基于这一概念，提出了一种动态的VONE算法来为VON请求分配物理网络资源，该算法不仅考虑带宽需求，还考虑关键需求。通过仿真，从阻塞概率，关键资源利用率以及平均路径长度等方面评估了所提出的VONE算法的性能。结果表明，为了在阻塞概率和关键资源利用之间取得平衡，应该适当设置调整因子和密钥生成率的值。关键资源利用率以及平均路径长度。结果表明，为了在阻塞概率和关键资源利用之间取得平衡，应该适当设置调整因子和密钥生成率的值。关键资源利用率以及平均路径长度。结果表明，为了在阻塞概率和关键资源利用之间取得平衡，应该适当设置调整因子和密钥生成率的值。