Quantum computing on encrypted data

K. Fisher,A. Broadbent,L.K. Shalm,Z. Yan,J. Lavoie,R. Prevedel,T. Jennewein,K.J. Resch

DOI: https://doi.org/10.1038/ncomms4074

2013-09-11

Abstract:The ability to perform computations on encrypted data is a powerful tool for protecting privacy. Recently, protocols to achieve this on classical computing systems have been found. Here we present an efficient solution to the quantum analogue of this problem that enables arbitrary quantum computations to be carried out on encrypted quantum data. We prove that an untrusted server can implement a universal set of quantum gates on encrypted quantum bits (qubits) without learning any information about the inputs, while the client, knowing the decryption key, can easily decrypt the results of the computation. We experimentally demonstrate, using single photons and linear optics, the encryption and decryption scheme on a set of gates sufficient for arbitrary quantum computations. Because our protocol requires few extra resources compared to other schemes it can be easily incorporated into the design of future quantum servers. These results will play a key role in enabling the development of secure distributed quantum systems.

Quantum Physics

What problem does this paper attempt to address?

The problem that this paper attempts to solve is to achieve the calculation of encrypted data in quantum computing, that is, how to let an untrusted server perform arbitrary quantum calculations without revealing any information about the input data. Specifically, the paper proposes an efficient method, which enables the client to send encrypted qubits to a remote server for processing. Without knowing the decryption key, the server can perform a series of quantum gate operations and finally return the processed encrypted results to the client. The client uses the decryption key to decrypt these results, thereby obtaining the answer to the calculation, while ensuring that the server cannot obtain any content related to quantum information throughout the process.

The key contribution of the paper lies in providing a scheme that can not only meet the requirements of fully homomorphic encryption at the quantum level, that is, the total number of operations of the client is proportional to the size of the input and output, but also requires very few additional resources in the process of achieving this goal. This makes the scheme can be easily integrated into the design of future quantum servers and lays the foundation for the development of secure distributed quantum systems.