Introduction

Entanglement, a very powerful and efficient quantum resource, is a cornerstone of many quantum communication and quantum computation protocols. A lot of quantum schemes depend heavily on the property of entanglement1, such as quantum key distribution2, quantum teleportation3, quantum metrology4, and quantum sensing5.

There is no doubt that the preparation of entangled quantum states is of great concern in the past decades. Many schemes have been proposed theoretically and achieved experimentally6,7,8,9,10,11,12,13. However, the preparation of high-dimensional entangled states is so difficult that it has been implemented almost exclusively in photonic systems14. Entanglement swapping15, also known as teleportation of entanglement, can entangle two particles that are not related at first by performing a joint Bell-state measurement on them, which plays an important role in long-distance quantum communication, such as quantum repeater16,17. However, ref. 18 has pointed out that it is impossible to perform perfect Bell state measurement for qudits by using only linear elements and particle detectors. It is of interest to know if we can sidestep this thorny issue but still entangle designate parts. And in addition to the simple case involving two-qubit entangled quantum state, GHZ entanglement swapping by using three pairs EPR entangled state has also been discussed19. Then, ref. 20 demonstrated entanglement swapping between two multipartite entangled state, such as GHZ state and EPR state, and two GHZ states. However, a relatively general framework for generating entangled state via entanglement swapping is missing, let alone the experimental platform chosen to test.

Motivated by this, we develop a scheme to generate multipartite entanglement in high dimensions by using quantum walks instead of direct Bell state measurement in the framework of entanglement swapping and thus avoid the difficulty of the realization of Bell state measurement. Our scheme is mainly based on the model of quantum walks with multiple coins21 which can bring out entanglement between position space and coin space and has been proved to be useful in quantum communication protocols22,23. Here we mainly consider quantum walks with multiple coins on 2-line, 2-circle, and 2-complete (d-complete) graph, which are all the building blocks in quantum network. In this way, we can generate two-qubit entangled state, two-qudit entangled state, three-qubit GHZ state and even three-qudit GHZ state between several designate parties.

In terms of experimental realization of entangled state, it is very difficult to find an appropriate experimental preparation device especially for the high-dimensional entangled state, let alone universal method and experimental device. However, the physical implementations of the quantum walk have been realized in many different physical systems, such as trapped atom24, trapped ions25, photonic system26, and so on. Since quantum walk is a universal quantum computing model27,28,29,30, these schemes may provide a universal platform for entanglement generation.

Recently, IBM Quantum Experience, as a superconducting flux qubit based open platform, attracts the attention of many researchers31. Many theoretical schemes in the field of quantum computation and quantum information have been detected and performed on this platform32,33,34,35,36. Here, we carry out experiments on this platform to generate Bell state and three-qubit GHZ state between several designate parties. Also, the accuracy of our scheme can be verified well by performing quantum state tomography37.

Furthermore, we give its application in quantum communication. In detail, we provide an improved multiparty quantum secret sharing protocol based on ref. 38 by using our scheme. Compared with the original protocols, our scheme are high code capacity and high security. And it is easy to be implemented in experiment.

The paper is organized as follows. First, we will briefly introduce the model of quantum walks with multiple coins and give theoretical schemes based on quantum walks that can generate two-qubit entangled state, two-qudit entangled state, three-qubit GHZ state, and three-qudit GHZ state. Next, we demonstrate experiments using our schemes to generate Bell state and three-qubit GHZ state on IBM Quantum Experience. And then, we give an application of our schemes to multiparty quantum secret sharing. Finally, we make a summary and outlook.

Results

For the quantum walks with k coins on an arbitrary graph, the k coins were used cyclically. The whole evolutionary Hilbert space is \({\mathcal{H}}={{\mathcal{H}}}^{{\rm{P}}}\otimes {{\mathcal{H}}}^{{{\rm{C}}}_{1}}\otimes ...\otimes {{\mathcal{H}}}^{{{\rm{C}}}_{{\rm{k}}}}\), where \({{\mathcal{H}}}^{{\rm{P}}}\) and \({{\mathcal{H}}}^{{{\rm{C}}}_{{\rm{i}}}}\) represent the position space and the i-th coin space respectively. At i-th step of quantum walks, the coin state can be flipped with the i-th coin operator Ci and then the walker moves to another position according to the conditional shift operator Si, which can be described as

$${U}_{i}={S}_{i}\cdot (I\otimes {C}_{i}),$$
(1)

where Ci acts on the i-th coin space \({{\mathcal{H}}}^{{{\rm{C}}}_{{\rm{i}}}}\) and Si acts on the combination space of position \({{\mathcal{H}}}^{{\rm{P}}}\) and i-th coin space \({{\mathcal{H}}}^{{{\rm{C}}}_{{\rm{i}}}}\). To make it clear that Ci and Si operate on different spaces, we explicitly write the above unitary operator by expanding all involved subspaces and adding the space of action of the identity operator involved in the upper right corner of the operator, i.e. \({U}_{i}=({S}_{i}\otimes {I}^{{{\mathcal{H}}}^{{{\rm{C}}}_{1}}}\ldots \otimes {I}^{{{\mathcal{H}}}^{{{\rm{C}}}_{{\rm{i}}-1}}}\otimes {I}^{{{\mathcal{H}}}^{{{\rm{C}}}_{{\rm{i}}+1}}}\ldots \otimes {I}^{{{\mathcal{H}}}^{{{\rm{C}}}_{{\rm{k}}}}})\cdot ({I}^{{{\mathcal{H}}}^{{\rm{p}}}}\otimes {I}^{{{\mathcal{H}}}^{{{\rm{C}}}_{{\rm{1}}}}}\ldots \otimes {I}^{{{\mathcal{H}}}^{{{\rm{C}}}_{{\rm{i}}-1}}}\otimes {C}_{i}\otimes {I}^{{{\mathcal{H}}}^{{{\rm{C}}}_{{\rm{i}}+1}}}\ldots \otimes {I}^{{{\mathcal{H}}}^{{{\rm{C}}}_{{\rm{k}}}}})\). After t steps, the initial state \(\left|\phi (0)\right\rangle\) evolves into

$$\left|\phi (t)\right\rangle ={({U}_{k}\cdots {U}_{1})}^{t/k}\left|\phi (0)\right\rangle .$$
(2)

We denote the line, circle and complete graph with N vertices as N-line, N-circle, and N-complete graph respectively. The three corresponding conditional shift operators acting on the position space and the coin space that is active at the step can be written as:

$${S}^{{\rm{N-complete}}}=\mathop{\sum }\limits_{x,j=0}^{N-1}\left|(x+j)\,\mathrm{mod}\,\,\ N\right\rangle \left\langle x\right|\otimes \left|j\right\rangle \left\langle j\right|,$$
(3)
$$\begin{array}{lll}{S}^{{\rm{N-circle}}}&=&\mathop{\sum }\limits_{x=0}^{N-1}\left(\left|(x+1)\,\mathrm{mod}\,\,\ N\right\rangle \left\langle x\right|\otimes \left|0\right\rangle \left\langle 0\right|\right.\\&&\left.+\left|(x-1)\,\mathrm{mod}\,\,\ N\right\rangle \left\langle x\right|\otimes \left|1\right\rangle \left\langle 1\right|\right),\end{array}$$
(4)
$$\begin{array}{lll}{S}^{{\rm{N-line}}}&=&\mathop{\sum }\limits_{x=0}^{N-2}\left|(x+1)\,\mathrm{mod}\,\,\ N\right\rangle \left\langle x\right|\otimes \left|0\right\rangle \left\langle 0\right|\\&&+\mathop{\sum }\limits_{x=1}^{N-1}\left|(x-1)\,\mathrm{mod}\,\,\ N\right\rangle \left\langle x\right|\otimes \left|1\right\rangle \left\langle 1\right|\\ &&+\left|N-1\right\rangle \left\langle N-1\right|\otimes \left|1\right\rangle \left\langle 0\right|+\left|0\right\rangle \left\langle 0\right|\otimes \left|0\right\rangle \left\langle 1\right|.\end{array}$$
(5)

In particular, when the number of vertices is 2, the conditional shift operators are:

$${S}^{{\rm{2-complete}}}=(\left|0\right\rangle \left\langle 0\right|+\left|1\right\rangle \left\langle 1\right|)\otimes \left|0\right\rangle \left\langle 0\right|+(\left|1\right\rangle \left\langle 0\right|+\left|0\right\rangle \left\langle 1\right|)\otimes \left|1\right\rangle \left\langle 1\right|,$$
(6)
$${S}^{{\rm{2-circle}}}=(\left|1\right\rangle \left\langle 0\right|+\left|0\right\rangle \left\langle 1\right|)\otimes \left|0\right\rangle \left\langle 0\right|+(\left|1\right\rangle \left\langle 0\right|+\left|0\right\rangle \left\langle 1\right|)\otimes \left|1\right\rangle \left\langle 1\right|,$$
(7)
$$\begin{array}{lll}{S}^{{\rm{2-line}}}&=&\left|1\right\rangle \left\langle 0\right|\otimes \left|0\right\rangle \left\langle 0\right|+\left|0\right\rangle \left\langle 1\right|\otimes \left|1\right\rangle \left\langle 1\right|\\&&+\left|0\right\rangle \left\langle 0\right|\otimes \left|0\right\rangle \left\langle 1\right|+\left|1\right\rangle \left\langle 1\right|\otimes \left|1\right\rangle \left\langle 0\right|.\end{array}$$
(8)

Generation of two-qubit entangled state

We start by discussing the generation of two-qubit entangled state. And the setup is illustrated in Fig. 1a. Without loss of generality, we can assume that the initial state of the four particles is

$$\left|\psi (0)\right\rangle ={\left(a\left|01\right\rangle +b\left|10\right\rangle \right)}_{1,2}{\left(a\left|01\right\rangle +b\left|10\right\rangle \right)}_{3,4},$$
(9)

where a2 + b2 = 1. Now we try to generate entanglement between particle 1 and 4. Here, we can view particle 1 and 2, 3, 4 as walker and three coins respectively. And thus we can consider quantum walks with three coins on 2-line, 2-circle and 2-complete graph.

Fig. 1: The schematic diagram of our scheme.
figure 1

The small boxes indicate particles and the dotted lines indicate entanglement. a represents the generation of bipartite entangled state. b represents the generation of GHZ state. Due to the symmetry of the particles, any two or three unrelated particles can be entangled by our scheme. But for the sake of narration, let us take entanglement generation of particles 1, 4 and particles 1, 4, 5 as examples.

For the case of quantum walks with three coins on 2-line, we can perform two-step quantum walks where C1 = H and C2 = I. According to conditional shift operator and initial state shown in Eqs. (8) and (9), the evolution process is written as follows:

$$\begin{array}{lll}\left|\psi (1)\right\rangle &=&\frac{1}{\sqrt{2}}\left({a}^{2}\left|1001\right\rangle -{a}^{2}\left|0001\right\rangle +ab\left|1010\right\rangle -ab\left|0010\right\rangle \right.\\ &&{\left.+\,ab\left|1101\right\rangle +ab\left|0101\right\rangle +{b}^{2}\left|1110\right\rangle +{b}^{2}\left|0110\right\rangle \right)}_{1,2,3,4},\end{array}$$
(10)
$$\begin{array}{lll}\left|\psi (2)\right\rangle &=&\frac{1}{\sqrt{2}}{\left(-a\left|00\right\rangle +a\left|01\right\rangle +b\left|10\right\rangle\right.} \\ && + \left. b\left|11\right\rangle \right)_{2,3}{\left(a\left|11\right\rangle +b\left|00\right\rangle \right)}_{1,4}\end{array}.$$
(11)

Therefore, we can definitely obtain entangled state between particle 1 and 4 by performing two local measurements on the other two particles. In particular, the state will be Bell state, also known as maximal entangled state, when \(a=b=\frac{1}{\sqrt{2}}\).

In the case of quantum walks with three coins on 2-circle, it is impossible to get entangled between particle 1 and 4 no matter how many steps we take. In this case, the conditional shift operator happens to be the second-order Pauli matrix X2. Therefore, the general form of evolved quantum state under three-step quantum walks is \((I\otimes {C}_{1}\otimes {C}_{2}\otimes {C}_{3})({a}^{2}\left|1101\right\rangle +ab\left|1110\right\rangle +ab\left|0001\right\rangle +{b}^{2}\left|0010\right\rangle )\). And it has a definite explicit form by giving three unitary coin operators with parameters. Then, it is not hard for us to find that there is no satisfied coin operator by analyzing the final state with parameters.

As regards quantum walks with three coins on 2-complete graph, we can take three-step quantum walks where C1 = I, C2 = H and C3 = X2. Thus the whole evolutionary process can be described as follows:

$$\left|\psi (1)\right\rangle ={\left({a}^{2}\left|1101\right\rangle +ab\left|1110\right\rangle +ab\left|1001\right\rangle +{b}^{2}\left|1010\right\rangle \right)}_{1,2,3,4},$$
(12)
$$\begin{array}{lll}\left|\psi (2)\right\rangle &=&\frac{1}{\sqrt{2}}\left({a}^{2}\left|1101\right\rangle +{a}^{2}\left|0111\right\rangle +ab\left|1100\right\rangle -ab\left|0110\right\rangle \right.\\ &&{\left.+\,ab\left|1001\right\rangle +ab\left|0011\right\rangle +{b}^{2}\left|1000\right\rangle -{b}^{2}\left|0010\right\rangle \right)}_{1,2,3,4},\end{array}$$
(13)
$$\begin{array}{lll}\left|\psi (3)\right\rangle &=&\frac{1}{\sqrt{2}}\left[{\left(b\left|00\right\rangle +a\left|10\right\rangle \right)}_{2,3}{(a\left|10\right\rangle +b\left|01\right\rangle )}_{1,4}\right.\\ &&\left.+\,{\left(b\left|01\right\rangle +a\left|11\right\rangle \right)}_{2,3}{\left(a\left|00\right\rangle -b\left|11\right\rangle \right)}_{1,4}\right].\end{array}$$
(14)

So we obtain entanglement between particle 1 and 4 by performing three-step quantum walks and two local measurements. Of course, the state obtained happens to be Bell state when \(a=b=\frac{1}{\sqrt{2}}\). In addition, there are other ways to select coin operators to generate entanglement. For example, C1 = I, C2 = X2, C3 = H or C1 = X2, C2 = X2, C3 = H, or C1 = X2, C2 = H, C3 = X2 can also be used to generate entanglement between particle 1 and 4.

Generation of two-qudit entangled state

High-dimensional entangled states are of paramount interest both from a theoretical and practical perspective. Generalized Bell states in Hilbert space CdCd, a basis of maximally entangled high-dimensional bipartite states, can be described as3,39

$$\left|{\psi }_{k,l}\right\rangle =\frac{1}{\sqrt{d}}\mathop{\sum }\limits_{m=0}^{d-1}\exp \left(\frac{2\pi {\rm{i}}}{d}mk\right)\left|m\right\rangle \left|m-l\right\rangle ,$$
(15)

where m −l means \((m-l)\,{\rm{mod}}\,d\). The general entangled state can be written as \(\mathop{\sum }\nolimits_{i = 0}^{d-1}{a}_{i}\left|i\right\rangle \left|i\right\rangle\), where \(\mathop{\sum }\nolimits_{i = 0}^{d-1}| {a}_{i}{| }^{2}=1\). For the sake of simplicity, we denote d-order generalized Pauli operator as \({X}_{d}=\mathop{\sum }\nolimits_{i = 0}^{d-1}\left|i+1\right\rangle \left\langle i\right|\), which is also known as discrete Weyl operator. Next, we propose two schemes to generate maximal and non-maximal entangled high-dimensional states (two-qudit entangled state) by performing quantum walks with three coins on d-complete graph. And its schematic diagram is shown in Fig. 1a.

For the case of maximal entangled state, the initial state is \(\left|\psi (0)\right\rangle ={\left|{\psi }_{k,l}\right\rangle }_{1,2}{\left|{\psi }_{k,l}\right\rangle }_{3,4}=\frac{1}{d}\mathop{\sum }\nolimits_{m,n = 0}^{d-1}\exp (\frac{2\pi {\rm{i}}}{d}(m+n)k)\left|m,m-l,n,n-l\right\rangle\). Now we can perform three-step quantum walks where C1 = I, C2 = F (Fourier transformation) and C3 = Xd. Thus, we can obtain the final state:

$$\begin{array}{ll}\left|\psi (3)\right\rangle =\frac{1}{d}\mathop{\sum }\limits_{m,p=0}^{d-1}\left[\exp \left(\frac{2\pi {\rm{i}}}{d}mk\right){\left|m-l\right\rangle }_{2}{\left|p\right\rangle }_{3}\left(\frac{1}{\sqrt{d}}\mathop{\sum }\limits_{n=0}^{d-1}\right.\right.\\ \left.\left.\exp \left(\frac{2\pi {\rm{i}}}{d}(k+p)n\right){\left|2m+p+n-2l+1\right\rangle }_{1}{\left|n-l+1\right\rangle }_{4}{\vphantom{\frac{1}{\sqrt{d}}\mathop{\sum}\limits_{n=0}^{d-1}}}\right)\right]\end{array}.$$
(16)

Then we take two local measurements on particle 2 and 3 and assume that the result are \(\exp (\frac{2\pi {\rm{i}}}{d}{m}_{0}k){\left|{m}_{0}-l\right\rangle }_{2}{\left|{p}_{0}\right\rangle }_{3}\). So the reduced state would be \(\exp (-\frac{2\pi {\rm{i}}}{d}(2{m}_{0}+{p}_{0}-2l+1)(k+{p}_{0}))|{\psi }_{k+{p}_{0},2{m}_{0}+{p}_{0}-l}\rangle_{1,4}\).

More generally, in the case of non-maximal entangled state, the initial state can be written as \(\left|\psi (0)\right\rangle ={\left(\mathop{\sum }\nolimits_{i = 0}^{d-1}{a}_{i}\left|i\right\rangle \left|i\right\rangle \right)}_{1,2}\otimes {\left(\mathop{\sum }\nolimits_{j = 0}^{d-1}{b}_{j}\left|j\right\rangle \left|j\right\rangle \right)}_{3,4}\), where \(\mathop{\sum }\nolimits_{i = 0}^{d-1}| {a}_{i}{| }^{2}=\mathop{\sum }\nolimits_{j = 0}^{d-1}| {b}_{j}{| }^{2}=1\). After the same three-step quantum walks (C1 = I, C2 = F and C3 = Xd), the final state will be \(\left|\psi (3)\right\rangle =\frac{1}{\sqrt{d}}\mathop{\sum }\nolimits_{i,k = 0}^{d-1}[{a}_{i}{\left|i\right\rangle }_{2}{\left|k\right\rangle }_{3}(\mathop{\sum }\nolimits_{j = 0}^{d-1}{b}_{j}\exp (\frac{2\pi {\rm{i}}}{d}jk){\left|2i+j+k+1\right\rangle }_{1}{\left|j+1\right\rangle }_{4})]\). Similarly, particle 1 is entangled with 4 after two local measurements.

Generation of three-qubit GHZ state

The three-qubit GHZ states maximize entanglement monotones40,41 and have extremely non-classical properties. The setup for this problem is shown in the Fig. 1b. The initial state of the five particles can be written as

$$\left|\psi (0)\right\rangle ={\left(a\left|01\right\rangle +b\left|10\right\rangle \right)}_{1,2}{\left(\frac{\left|000\right\rangle +\left|111\right\rangle }{\sqrt{2}}\right)}_{3,4,5},$$
(17)

where a2 + b2 = 1. In order to generate entanglement between particle 1, 4, and 5, we can view these five particles as the walker and four coins respectively. So we can discuss the quantum walks with four coins on 2-line, 2-circle, and 2-complete graph.

Let us start by talking about the case of quantum walks with four coins on 2-line. And in order to do that, we perform two-step quantum walks where C1 = H and C2 = X. Thus the initial quantum state presented in Eq. (17) will evolves over time into

$$\left|\psi (1)\right\rangle =\frac{1}{2}{\left(-a\left|00\right\rangle +b\left|01\right\rangle +a\left|10\right\rangle +b\left|11\right\rangle \right)}_{1,2}{\left(\left|000\right\rangle +\left|111\right\rangle \right)}_{3,4,5},$$
(18)

and

$$\left|\psi (2)\right\rangle =\frac{1}{2}{\left(-a\left|00\right\rangle +a\left|01\right\rangle +b\left|10\right\rangle +b\left|11\right\rangle \right)}_{2,3}{\left(\left|000\right\rangle +\left|111\right\rangle \right)}_{1,4,5}.$$
(19)

Then we just have to make local measurements of particle 2 and particle 3, and no matter what the measurements are, the remaining three particles always collapse to be GHZ state.

For quantum walks with four coins on 2-circle, particle 1, 4, and 5 will never get entangled no matter how many steps we take. Given an initial state in Eq. (17), after four steps the state evolves to \(\frac{1}{\sqrt{2}}(I\otimes {C}_{1}\otimes {C}_{2}\otimes {C}_{3}\otimes {C}_{4})(a\left|01000\right\rangle +a\left|01111\right\rangle +b\left|10000\right\rangle +b\left|10111\right\rangle )\), where these four operators can be any unitary operator of the second order. By calculating the undetermined coefficients of these four coin operators, we find that particle 1, 4, and 5 are never completely entangled.

In regard to the quantum walks with four coins on 2-complete graph, we can generate entanglement between particle 1, 4 and 5 by performing four-step quantum walks where C1 = C2 = I and C3 = C4 = H. After the first two steps of quantum walks, the quantum state evolves into

$$\left|\psi (2)\right\rangle =\frac{1}{\sqrt{2}}{\left(a\left|11000\right\rangle +a\left|01111\right\rangle +b\left|10000\right\rangle +b\left|00111\right\rangle \right)}_{1,2,3,4,5}.$$
(20)

The resulting state will be

$$\begin{array}{l}\left|\psi (3)\right\rangle =\frac{1}{2}\left(a\left|11000\right\rangle +a\left|01010\right\rangle +a\left|01101\right\rangle -a\left|11111\right\rangle \right.\\ \,\,\quad \qquad {\left.+\,b\left|10000\right\rangle +b\left|00010\right\rangle +b\left|00101\right\rangle -b\left|10111\right\rangle \right)}_{1,2,3,4,5}\end{array}$$
(21)

after one step with coin operator C3 = H. And then the final quantum state can be described as follows:

$$\begin{array}{ll}\big|\psi(4)\big\rangle &=\frac{1}{2\sqrt{2}}\big[(b|00\rangle+a|10\rangle)_{2,3}(|100\rangle+|001\rangle+|010\rangle+|111\rangle)_{1,4,5}\\&+(b|01\rangle+a|11\rangle)_{2,3}(|000\rangle-|101\rangle-|110\rangle+|011\rangle)_{1,4,5}\big]\end{array}$$
(22)

So we can get the GHZ-like state42 of particle 1, 4, and 5, which is the entangled quantum state and belongs to the class of GHZ state, by taking two local measurements of particle 2 and 3.

Generation of three-qudit GHZ state

Three-qudit GHZ state can be written as \(\frac{1}{\sqrt{d}}\mathop{\sum }\nolimits_{n = 0}^{d-1}{\left|n\right\rangle }^{{\otimes }^{3}}\). And its generation process is presented in Fig. 1b. For the initial state

$$\begin{array}{ll}\left|\psi (0)\right\rangle &={\left|{\psi }_{k,l}\right\rangle }_{1,2}{\left(\frac{1}{\sqrt{d}}\mathop{\sum }\limits_{n = 0}^{d-1}{\left|n\right\rangle }^{{\otimes }^{3}}\right)}_{3,4,5}\\&=\frac{1}{d}\mathop{\sum }\limits_{m,n=0}^{d-1}\exp \left(\frac{2\pi {\rm{i}}}{d}mk\right){\left|m,m-l,n,n,n\right\rangle }_{1,2,3,4,5},\end{array}$$
(23)

we can perform four-step quantum walks with four coins on d-complete graph by choosing C1 = C2 = I and C3 = C4 = F to establish the entanglement between particle 1, 4 and 5 that are unrelated at first. The evolutionary process can be described as follows:

$$\left|\psi (2)\right\rangle =\frac{1}{d}\mathop{\sum }\limits_{m,n=0}^{d-1}\exp \left(\frac{2\pi {\rm{i}}}{d}mk\right){\left|2m-l+n,m-l,n,n,n\right\rangle }_{1,2,3,4,5},$$
(24)
$$\begin{array}{ll}\left|\psi (4)\right\rangle =\frac{1}{{d}^{2}}\mathop{\sum }\limits_{m,n,p,q=0}^{d-1}\exp \left(\frac{2\pi {\rm{i}}}{d}(mk+np+nq)\right)\\{\left|2m-l+n+p+q, m-l,n,p,q\right\rangle }_{1,2,3,4,5}\\ =\frac{1}{d}\mathop{\sum }\limits_{m,n=0}^{d-1}\left[\exp \left(\frac{2\pi {\rm{i}}}{d}mk\right){\left|m-l\right\rangle }_{2}{\left|n\right\rangle }_{3}\right.\\ \left.\left(\frac{1}{d}\mathop{\sum }\limits_{p,q=0}^{d-1}\exp \left(\frac{2\pi {\rm{i}}}{d}(np+nq)\right){\left|2m-l+n+p+q,p,q\right\rangle }_{1,4,5}\right)\right].\end{array}$$
(25)

Then we can obtain an entangled state of particle 1, 4 and 5 by performing two local measurements on particle 2 and 3. Note that any state like \(\mathop{\sum }\nolimits_{p,q = 0}^{d-1}\left|{x}_{0}+p+q,p,q\right\rangle\) is completely entangled, where x0 {0, 1, 2, … , d − 1}. It can be seen as the high-dimensional case of GHZ-like state.

Experimental protocol

We provide the experimental realization of our scheme using IBM quantum computer ibmq_5_yorktown − ibmqx2 (it is called ibmqx2 for short) and ibmq_qasm_simulator (simulator) with 8192 number shots (see Supplementary Note 1 for the introduction). Here, we mainly discuss the generation of standard Bell state and three-qubit GHZ state based on quantum walks. To verify the effect of our scheme, we focus on the fidelity between the theoretical and experimental (simulation) results by performing quantum state tomography37. Here the theoretical results can be calculated in our schemes directly. The experimental results are obtained on a real quantum machine, i.e. on ibmqx2. And the simulation results are provided on a quantum simulator, which is a classical computer that simulates the quantum operation under realistic device noisy models.

Based on the theoretical scheme, we provide the corresponding IBM quantum circuit that can be seen in Fig. 2 to generate Bell state by performing three-step quantum walks on 2-complete graph. And the results, measured in Z-basis, are shown in Fig. 3. According to the Fig. 3a, the simulation seems very close to the theoretical result (there are eight outcomes appeared in Fig. 3a and the probability of each is 12.5%). And the results on ibmqx2 shown in Fig. 3b are not as good as the simulation results. In fact, there are some noises on the quantum platform, such as decoherence, depolarizing, general noises and so on, which result in the discrepancy between theoretical values and the run results. According to the quantum state tomography37 and the detailed experimental data, we find that the fidelity between theoretical and simulation density matrix \(F({\rho }_{ij}^{{\rm{T}}},{\rho }_{ij}^{{\rm{E}}\_{\rm{simulator}}})\) where i, j {0, 1} are approximately equal to 1 (see Supplementary Note 2). And the fidelity between theoretical and experimental density matrix \(F({\rho }_{ij}^{{\rm{T}}},{\rho }_{ij}^{{\rm{E}}\_{\rm{ibmqx2}}})\) are 0.8535, 0.8793, 0.7909, 0.8549 (see Supplementary Note 2).

Fig. 2: Quantum circuit for generating Bell state between two parties that are not related at first.
figure 2

The measurements on q[0] and q[3] are in X-basis. The measurements on q[1] and q[2] are in Z-basis.

Fig. 3: The probability results of quantum circuit after four measurements in Z-basis.
figure 3

a is on simulator and b is on ibmqx2.

As for the generation of three-qubit GHZ state, we provide the corresponding IBM quantum circuit diagram that can be seen in Fig. 4a, which is realized by performing two-step quantum walks on 2-line. The whole design idea is similar to the experimental realization of Bell state. The only thing that needs to be noticed is the design of shift operator on 2-line. Here we give the simulation results and probability results on ibmqx2 in Fig. 4b, c, respectively. The analysis of the experimental results can be similarly obtained, so we will not repeat it.

Fig. 4: The experimental demonstration of generating GHZ state.
figure 4

a Quantum circuit for generating three-qubit GHZ state between three parties that are not related at first. b The simulation results of quantum circuit after five measurements in Z-basis. c The probability results of quantum circuit on ibmqx2.

Application

In fact, our proposed schemes not only generate entangled states, but also really work in the quantum domain. To illustrate this point, here we present an application of our scheme in the field of quantum cryptography. In order to share secret among some agents and reconstruct it only when they collaborate together, the scheme of quantum secret sharing (QSS) was proposed in 199943. Zhang proposed a multiparty quantum secret sharing (MQSS) protocol by using entanglement swapping38. Then Lin and Zhang revised and improved the protocol, respectively44,45.

Here, we improve and extend the performance of MQSS protocol proposed by Zhang38 by using our scheme. According to our scheme, for the initial state

$$\begin{array}{ll}|\phi (0)\rangle &={|{\psi }_{x,y}\rangle }_{1,2}{|{\psi }_{k,l}\rangle }_{3,4}\\ &=\frac{1}{d}\mathop{\sum }\limits_{m,n=0}^{d-1}\exp \left(\frac{2\pi {\rm{i}}}{d}mx+nk\right){|m,m-y,n,n-l\rangle }_{1,2,3,4},\end{array}$$
(26)

after three-step quantum walks (the coin operators are I, F, Xd in sequence), we could obtain the final state

$$\begin{array}{ll}\left|\phi (3)\right\rangle =\frac{1}{d\sqrt{d}}\mathop{\sum }\limits_{m,n,p=0}^{d-1}\exp \left(\frac{2\pi {\rm{i}}}{d}mx+nk+np\right)\\ {\left|2m+p+n-y-l+1,m-y,p,n-l+1\right\rangle }_{1,2,3,4} \\=\frac{1}{d}\mathop{\sum }\limits_{m,p=0}^{d-1}\exp \left(\frac{2\pi {\rm{i}}}{d}\left(mx-\left(2m+p-y-l+1\right)(k+p)\right)\right)\\{\left|m-y\right\rangle }_{2}{\left|p\right\rangle }_{3}{\left|{\psi }_{k+p,2m+p-y}\right\rangle }_{1,4}.\end{array}$$
(27)

Assume that d is odd, we can set up a bijection between the pairs (m − y, p) and (k + p, 2m + p − y), where y and k are known fixed numbers.

Let \({U}_{i}={X}_{d}^{i}=\mathop{\sum }\nolimits_{j = 0}^{d-1}\left|j+i\right\rangle \left\langle j\right|\) be d local unitary transformations (i = 0, 1, … , d − 1) that correspond to \(\lceil \mathrm{log}\,d\rceil\) classical bits respectively. To be specific, U0 corresponds to 0 … 000, U1 corresponds to 0 … 001, U2 corresponds to 0 … 010 and so on. Based on the property Ui holds,

$$(I\otimes {U}_{i})\left|{\psi }_{k,l}\right\rangle =\left|{\psi }_{k,l-i}\right\rangle ,$$
(28)

we can establish correspondence between the unitary operators {Ui: i = 0, 1, … , d − 1} and generalized Bell states \(\{\left|{\psi }_{k,l}\right\rangle :l=0,1,\cdots \ ,d-1\}\) for an arbitrary fixed k. Next, we will show the improved MQSS based on38 in which d is an odd number. And the schematic flow chart of the whole process is shown in Fig. 5.

Fig. 5: The schematic diagram of the improved multiparty quantum secret sharing.
figure 5

The small boxes indicate particles and the dotted lines indicate entanglement. The particles in yellow belong to Alice. The particles in green and red are in Bob’s and Charlie’s possession. The purple particle has been performed by a unitary operator.

  1. 1.

    Alice prepares three identical generalized Bell state pairs \({|{\psi }_{k,l}\rangle }_{1,2}\), \({|{\psi }_{k,l}\rangle }_{3,4}\) and \({|{\psi }_{k,l}\rangle }_{5,6}\). She sends qudit 2 and 3 to Bob, 4 and 5 to Charlie via their quantum channels respectively. Then, Alice enters step 2 with probability q, or enters step 3 with probability 1 − q.

  2. 2.

    Alice chooses randomly from two mutually unbiased measurement basis, \({{\mathcal{M}}}_{1}=\{\left|i\right\rangle \!:i=0,1, \ldots \ ,d-1\}\) and \({{\mathcal{M}}}_{2}=\{|\tilde{i}\rangle :i=0,1,\ldots \ ,d-1\}\), where \(|\tilde{i}\rangle =\frac{1}{\sqrt{d}}\mathop{\sum }\nolimits_{j = 0}^{d-1}\exp (\frac{2\pi {\rm{i}}}{d}ij)|j\rangle\). Alice tells Bob the basis she has chosen. They measure qudit 1 and 2 by chosen measurement basis respectively. Then Bob tells Alice his outcome of qudit 2. Alice compares these two outcomes to judge the security of Alice-Bob quantum channel (For example, if the generalized Bell state pairs that Alice prepares is \(\left|{\psi }_{0,0}\right\rangle\), these two measurement outcomes must be identical when the channel is safe). The security of Alice-Charlie quantum channel can also be checked in the same way. If the two channel are both secure, returns to step 3. Otherwise, this process will be terminated.

  3. 3.

    Alice applies a local unitary operator chosen randomly from {Ui: i = 0, 1, … , d − 1} on one of her qudits 1 and 6 (say, on qudit 6). Firstly, they perform three-step quantum walks on qudit 5, 6, 1 and 2. Alice performs two local measurements on qudit 6 and 1 and announces her outcome. Next, they perform three-step quantum walks on qudit 5, 2, 3, and 4. Bob performs two local measurements on qudit 2 and 3 and writes down the outcomes. At this times, Charlie records his own state. Bob and Charlie can deduce the unitary transformation Alice performs and the classical bits Alice wants to share.

Now let us explain how we derived Ui in step 3 based on the three measurement results they announced and evolutionary properties. Without loss of generality, we can denote the outcome Alice announces as \({\left|a,b\right\rangle }_{6,1}\). Suppose the quantum state of qudit 5 and 2 is \(|{\psi }_{\bar{k},\bar{l}}\rangle\) after the first quantum walks. According to Eq. (27), we can denote the outcome Bob writes down and the state Charlie possesses as \({|m-\bar{l},p\rangle }_{2,3}\) and \({|{\psi }_{k+p,2m+p-\bar{l}}\rangle }_{5,4}\) respectively. Since k is known, p, m and \(\bar{l}\) are also known. Next we can infer that \(\bar{k}=k+b\) and the state of qudit 5 and 6 after the local unitary transformation performed by Alice is \({|{\psi }_{k,\bar{l}-b-2a}\rangle }_{5,6}\) based on the first quantum walks. Thus, the unitary transformation Alice performed is \({U}_{l-(\bar{l}-b-2a)}\). Note that the above-mentioned addition and subtraction methods are all of modulo d. So it is not hard to infer the classical bits Alice wants to share.

In addition, our protocol can also be generalized to a multiparty case. Without loss of generality, we suppose that there are N parties in total. First, the sender prepares N identical generalized Bell state pairs and distributes two qudits to the agents one by one and does not tell their the ordering of the two qudits. So the i-th agent and the i + 1-th agent share a generalized Bell state pair. And the N-th agent will share a generalized Bell state pair with the sender. Then, they check the security of quantum channel (step 2) with probability q or transmit message (step 3) with probability 1 − q. The order of quantum walk and measurements, which is crucial for the whole process, is the same as the order of entanglement swapping in the previous protocol44,45. The security (even in a noisy channel) can be guaranteed on step 2 by the similar discussions in ref. 38,44,45. For example, the communication protocol here is secure against the intercept and resend attack (i.e., Eve intercepts the qudit during the transmission between Alice and Bob, and sends a fake qudit to Bob) and direct measurement attack (Eve intercepts the qudit, makes the measurement and resends the measured qudit to Bob), which can be guaranteed by step 2. When it enters into the step 3, the whole process becomes evolution of quantum walk which takes place in an isolated system and does not involve a transmission channel. So it is safe.

Now, let us make some comparisons between our scheme and the other schemes38,46. Compared with ref. 38, the advantage of our scheme is that the capacity of classical messages it can distribute is much larger. Specifically, it is a task to distribute \(N=\lceil \mathrm{log}\,d\rceil\) classical bits instead of just two bits. In addition, ref. 38 needs \(\frac{3N}{2(1-q)}\) Bell states in step 3. Our scheme just needs \(\frac{3}{1-q}\) generalized Bell states. Although the preparation of generalized Bell state is difficult with the current technological level, our scheme may show some advantage in theory. It could be better when the generalized Bell state is possibly generated in the lab. Thus, from the view point of the resource, our scheme is much better theoretically and has the merit of potential application.

In ref. 46, Zhang et.al designed a MQSS protocol by swapping qutrit-state entanglement and then generalized to the qudit case, in which the so-called two-qutrit (two-qudit) entangled-state measurement is crucial but hard to implement in experiment. Our scheme avoids the difficulty in the experimental realization of Bell state measurement, especially for the measurement of high dimensional Bell state18. So our protocol is more feasible than the one in ref. 46. Here we give a theoretical scheme to do QSS by quantum walk and provide the potential implementation merit by IBM quantum machine. Because quantum walk is a universal quantum computing platform, it may inspire some different idea for the implementation of QSS in a truly distributed quantum system.

Discussion

The generation of entanglement, especially in the high-dimensional case, between several designated parties is vital and essential in scalable quantum network. Inspired by entanglement swapping, we have developed a scheme to generate entangled state by using quantum walks with multiple coins, including two-qubit entangled state, two-qudit entangled state, three-qubit GHZ state, and three-qudit GHZ state. In comparison with original entanglement swapping, the benefit of using our scheme is expected to avoid performing joint Bell state measurement that is still an unsolved problem to date, and provide a relatively general framework for generating entangled state via entanglement swapping.

Also, we provide the experimental realization of our scheme to generate Bell state and three-qubit GHZ state on IBM platform. And our scheme exhibits high fidelity by performing quantum state tomography. Moreover, we present an improved multiparty quantum secret sharing by using our our scheme. After our improvement, it can convey more classical information and require less quantum resources.

It remains an interesting open question to design further the GHZ state and W state for a system of n qubit, where n is an arbitrary integer. It is also highly desired to extend our method to more practical applications.