Skip to content
Quantum.world

Research

Improving the Loss Tolerance of Heralded Photonic GHZ States for Long-Distance Device-Independent Conference Key Agreement

Overview Research area: Quantum information science — specifically multipartite entanglement distribution, photonic quantum networks, Bell-inequality testing (parity–CHSH), and device-independent conf

Improving the Loss Tolerance of Heralded Photonic GHZ States for Long-Distance Device-Independent Conference Key Agreement
arXiv
2609.24941
Published
2026-09-21
Authors
Yazeed K. Alwehaibi, Makoto Ishihara, Shakib Daryanoosh, Ewan Mer, Shang Yu, Wojciech Roga, Ian A. Walmsley, Masahiro Takeoka, Raj B. Patel

AI summary

Overview

Research area: Quantum information science — specifically multipartite entanglement distribution, photonic quantum networks, Bell-inequality testing (parity–CHSH), and device-independent conference key agreement (DI-CKA).

Technical level: Advanced. The paper assumes familiarity with GHZ states, Bell inequalities, photon-number encoding, linear optics, and quantum key rate analysis, though its central message — that how you encode a bit in photons matters as much as entanglement itself — is conceptually accessible.

Scope: The paper derives exact detection-efficiency thresholds for two photon-number encodings of GHZ states under parity–CHSH tests and introduces a heterogeneous-source star-network protocol that directly heralds the more loss-tolerant "vacuum–n-photon" encoding while preserving the favourable O(η_c^(n/2)) rate scaling, benchmarking it for four users against direct transmission and a previously proposed identical-source scheme.

What This Paper Is About

Device-independent conference key agreement lets several users share a secret key certified only by observed Bell violations, but optical loss and detector inefficiency can erase those violations and open the detection loophole. The authors ask whether the photon-number encoding of a GHZ state — the "computational-basis" vacuum–n-photon form |Φ_n(q)⟩ versus the fixed-photon-number form |Ψ_n(q)⟩ — changes loss tolerance in the multipartite regime, even though the two are locally equivalent in the lossless case, and whether the more tolerant encoding can actually be heralded efficiently over lossy links.

Key Contributions

  1. Exact analytical detection-efficiency thresholds for parity–CHSH violation by both GHZ encodings. For the complementary-occupation assignment the thresholds are the unique roots in 0 < η < 1 of (η_th^φ)^(n−1) = 2(1 − η_th^φ) for |Φ_n(q)⟩ and (η_th,comp^ψ)^(n−1) = 4(1 − η_th,comp^ψ) for |Ψ_n(q)⟩, for any even n ≥ 4.

  2. Identification of measurement-role assignment as a design parameter. Because the parity–CHSH test singles out two parties (A and B) with two settings each while the other n−2 parties perform one fixed measurement, the assignment of these roles to physical modes matters for the non-permutation-symmetric state |Ψ_n(q)⟩. Assigning equal-occupation parties to A and B gives (η_th,eq^ψ)^(n−1) = 2(1 − η_th,eq^ψ), i.e. η_th,eq^ψ = η_th^φ, closing the Bell-violation gap.

  3. A heterogeneous-source star-network protocol that directly heralds the vacuum–n-photon GHZ state at O(η_c^(n/2)) scaling (O(η_c^2) for four users), using Type-A parties that prepare single-photon path-entangled (SPPE) states and Type-B parties that prepare vacuum-pair entangled (VPE) states — something the authors state cannot be achieved with an otherwise equivalent network of identical sources.

  4. Full four-user characterization under loss, plus a DI-CKA key-rate comparison for n = 4 under ideal Pauli XZ-plane measurements and displacement-based measurements, benchmarked against the identical-source fixed-photon-number scheme (with measurement roles optimized) and against direct transmission.

Main Findings

  • The two encodings are not operationally equivalent under loss. Although |Φ_n(q)⟩ and |Ψ_n(q)⟩ are related by local bit flips and give identical lossless Bell violations, a bit flip in single-rail photon-number encoding exchanges vacuum and one photon and is not photon-number conserving. Both branches of |Ψ_n⟩ contain photons and are loss-affected; |Φ_n⟩ has a vacuum branch invariant under loss.

  • Under the conventional (complementary-occupation) role assignment, |Φ_n(q)⟩ is more loss tolerant. Since f_n(η) = η^(n−1)/(1−η) is strictly increasing on (0,1) and the coefficient for |Ψ_n(q)⟩ is twice that for |Φ_n(q)⟩, η_th,comp^ψ > η_th^φ for every even n ≥ 4.

  • The advantage is largest for few parties. Both thresholds increase with n and approach unity in the large-n limit, while the difference Δη_th = η_th,comp^ψ − η_th^φ gradually narrows. For n = 2 the figure's thresholds were derived previously in the literature; there, each photon-number class of |Ψ_2(q)⟩ contains only one party, so an equal-occupation assignment is unavailable.

  • The Bell-threshold gap is an artifact of role assignment, not intrinsic. With free choice of roles, the role-optimized Bell thresholds of the two families coincide. The authors note, however, that free assignment may be unavailable in asymmetric networks (e.g. where active basis selection or fast random-number generation exists only at certain stations), and that equal Bell thresholds do not imply equal key rates.

  • The origin of the differing loss tolerance is diagonal, not coherence-based. The paper explicitly shows the difference does not come from better preservation of off-diagonal coherence in the vacuum–n–photon state but from the diagonal correlations entering the parity–CHSH expression under complementary occupation.

  • Heralding maps click patterns onto encodings. Of the six two-click coincidence patterns, (D₁,D₂) and (D₃,D₄) (with |Φ₃₄⟩ = −|Φ₁₂⟩) herald the target vacuum–n–photon GHZ state, while (D₁,D₃)/(D₂,D₄) and (D₁,D₄)/(D₂,D₃) herald fixed-photon-number GHZ-like states — the only class accessible to identical-source schemes.

  • Rate scaling is preserved. Direct transmission for four parties scales as O(η_c^4), while both heralding protocols scale as O(η_c^2). With the symmetric choice q = 0.5, the target-state heralding probability is slightly lower than in the identical-source protocol, but when all heralded entangled outcomes are included the two protocols have the same total success probability (P^Ψ_tot = 2P^Φ_tot, R_succ^tot = 3P^Φ_tot).

  • A fidelity–rate trade-off is exposed. In the symmetric case (|α|² = |γ|² ≡ q), P^Φ_tot = η_c²(1−q)²[1 − η_c(1−q)]² and F_Φ = [q/(1−(1−q)η_c)]². Fidelity rises monotonically with q and approaches unity as q → 1, at the cost of raw heralding probability; heralding probability is maximized at q_opt(η_c) = 1 − 1/(2η_c) for η_c > 1/2.

  • Genuine multipartite entanglement survives at any finite distance. Using the projector-based GHZ witness, GME is certified whenever F_Φ > 1/2; tuning source parameters lets GME persist at any finite channel distance. This witness is state-based and distinct from parity–CHSH nonlocality certification.

  • Key-rate conclusions (qualitative in the available text). With ideal Pauli and displacement-based measurements, the protocol yields positive DI-CKA key rates at lower detection efficiencies than previous schemes while retaining comparable or greater rates and communication distances at high efficiency. The specific numerical key rates, distances and threshold efficiencies are not reported in the supplied text, which is truncated within Section III.2; Sections IV and V are absent.

  • Numerical parameters used in the figures. Heralding probabilities are plotted versus link distance assuming 0.2 dB/km fiber attenuation, source parameter q = 0.5 and heralding-detector efficiency η_d = 0.9, with η_c = η_ch·η_d and η_ch = 10^(−0.02L). The rate–fidelity trade-off is shown for η_c = 0.7 (≈7.7 km) down to η_c = 0.01 (100 km) at unity detection efficiency.

Methodology in Plain English

The authors proceed in two stages. First, they treat the two GHZ encodings as abstract qubit states and ask how much detector inefficiency each can survive. They model loss as an identical, independent amplitude-damping channel on every mode before an ideal measurement, they keep all rounds in the statistics (no post-selection of loss events), and for each efficiency η they jointly optimize the state parameter q and every measurement angle over the XZ plane. Because the parity–CHSH inequality treats two parties differently from the rest, they separately analyze the two inequivalent ways of assigning those distinguished roles in the fixed-photon-number state — parties with equal photon occupation versus complementary occupation — and solve the optimization exactly rather than numerically.

Second, they design a network that produces the more tolerant state directly. Four users sit around a central station. Two of them ("Type-A") each hold one photon split coherently between a kept mode and a transmitted mode; the other two ("Type-B") hold a superposition of vacuum and a photon pair across their two modes. The four transmitted modes interfere on a network of 50:50 beam splitters and are monitored by photon-number-resolving detectors. Only events with exactly two clicks in distinct detectors count as successful heralds. Working backwards through the interferometer unitary tells them which retained-mode state each click pattern projects onto; then, adding beam-splitter loss on each link and tracing out the environment, they compute the heralding probability and the fidelity of the conditional state with the target four-party GHZ state. Finally they feed these states, rates and fidelities into a DI-CKA key-rate calculation for n = 4 and compare against two benchmarks: sending a pre-made state directly, and the earlier identical-source heralding scheme.

Why This Matters

The work reframes a design question that is usually treated as settled: two GHZ states that are mathematically equivalent as qubits behave very differently once each bit is carried by photon number over a lossy fiber. That distinction determines whether a device-independent protocol can produce a key at all with realistic detectors, and the paper shows it can be engineered deliberately rather than inherited from whatever source happens to be available.

Real-world applications:

  • Secure multiparty conferencing, where several offices establish one shared key certified without trusting the hardware.
  • Quantum secret sharing and distributed multiparty protocols among networked nodes.
  • Distributed quantum sensing, which relies on distributing multipartite entanglement to separated stations.
  • Metropolitan-scale quantum network links where fiber loss and detector inefficiency, not source quality, are the binding constraints.

Industry relevance: The protocol is designed around hardware that already exists — 50:50 beam-splitter networks, photon-number-resolving detectors, and spontaneous parametric down-conversion (SPDC) sources, which the authors analyze as a concrete implementation. It reuses the same rate-versus-loss advantage that made twin-field QKD attractive, generalized to many parties, so it fits the engineering trajectory of fiber-based quantum network infrastructure rather than requiring a new platform.

Future Directions

  • Experimental demonstration with SPDC sources. The authors analyze SPDC as a concrete example; an actual tabletop or fiber-link realization, including dark counts and source imperfections, is the obvious next step.
  • Scaling to more users. The paper analyzes four users in detail and outlines an extension to arbitrary even n > 4 with O(η_c^(n/2)) scaling in Appendix B.4; verifying that the loss advantage and the key-rate benefit survive at larger n remains open.
  • Suppressing false heralding. Loss-induced false-heralding components (histories where photons leak into the environment and leave distinguishable records) reduce fidelity; better interferometer designs or tighter photon-number resolution could improve this.
  • Closing the gap between ideal and realistic measurements. The displacement-based measurement scenario is more experimentally relevant than ideal Pauli measurements, and the detailed key-rate comparison between the two is the natural continuation of the truncated Section IV.
  • Role assignment in real network topologies. The paper notes that free assignment of the two-setting roles may not be available in asymmetric networks, leaving the question of how to design role-constrained networks that retain the advantage.

Target Audience

Quantum photonics experimentalists and quantum-network theorists working on entanglement distribution and device-independent protocols will get the most from this paper, particularly those focused on multipartite Bell tests and conference key agreement. It is also relevant to quantum communication engineers assessing fiber-based network architectures, and to graduate students in quantum information who want a clear worked example of how physical encoding, rather than abstract state equivalence, governs real-world loss tolerance.

Authors’ abstract

Heralded multipartite entanglement distribution is a key requirement for device-independent conference key agreement (DI-CKA) over lossy quantum networks. Although locally equivalent in the absence of loss, different single-rail photon-number encodings of Greenberger--Horne--Zeilinger (GHZ) states respond differently to photon loss. Here, we investigate the critical detection efficiencies for detection-loophole-free parity--CHSH violations of computational-basis GHZ states---a coherent superposition of the vacuum and an $n$-photon component---and of fixed-photon-number GHZ states, deriving exact analytical conditions for both. We show that for states that are not permutation symmetric, such as the latter, the assignment of measurement roles to physical modes affects loss tolerance. We introduce a star-network protocol employing heterogeneous sources to directly herald the loss-tolerant vacuum-$n$-photon GHZ states while retaining the favourable long-distance scaling $O(η_{\text{c}}^{n/2})$, where $η_{\text{c}}$ is the channel transmittance. For four users, we characterize the heralded state under photon loss and show that tunable source parameters allow genuine multipartite entanglement to persist at any finite channel distance. With ideal Pauli and displacement-based measurements, our protocol achieves positive DI-CKA key rates at lower detection efficiencies than previous schemes, while retaining comparable or greater rates and communication distances at high efficiency. Overall, our work improves the loss tolerance of heralded photonic GHZ states for DI-CKA both by directly heralding a more loss-tolerant encoding and by optimizing existing schemes. These results identify photon-number encoding, source architecture, and measurement-role assignment as key design parameters for loss-resilient multipartite quantum networks, offering a practical route toward near-term DI-CKA.

Read the original paper