- freely available
- re-usable

*Entropy*
**2015**,
*17*(4),
2218-2227;
doi:10.3390/e17042218

## Abstract

**:**Besides achieving secure communication between two spatially-separated parties, another important issue in modern cryptography is related to secure communication in time, i.e., the possibility to confidentially store information on a memory for later retrieval. Here we explore this possibility in the setting of quantum reading, which exploits quantum entanglement to efficiently read data from a memory whereas classical strategies (e.g., based on coherent states or their mixtures) cannot retrieve any information. From this point of view, the technique of quantum reading can provide a new form of technological security for data storage.

## 1. Introduction

Quantum cryptography [1,2] aims to realize a completely unbreakable scheme for the distribution of a secret key between two remote parties, usually called Alice and Bob. Indeed quantum key distribution (QKD) relies its security on one of the the most fundamental physical laws, the uncertainty principle, which is actively exploited for detecting and overcoming the presence of a malicious eavesdropper, usually called Eve. In this scenario, an important role is also played by quantum entanglement [3], which can be exploited to make QKD protocols device-independent, i.e., more robust to practical flaws (e.g., in the detectors) which may potentially be exploited by Eve. Very recently, quantum discord [4] (see [5] for its computation with Gaussian states) has also been identified as a useful resource for device-dependent QKD with trusted noise [6], e.g., in scenarios such as measurement-device independent QKD [7–10].

In this preliminary study, we investigate a different but still important problem: The confidential storage of information on a physical device, such as an optical memory. It has been recently proven that quantum entanglement can provide an advantage in the readout of classical data from optical memories, especially in the low-energy regime, i.e., when a few photons are irradiated over the memory cells. This approach is known as quantum reading [11] (see also follow-up papers [12–23]), a notable application of quantum channel discrimination to a practical task as the memory readout. From this point of view, another well-known protocol is quantum illumination, which aims at improving target detection [25–31], and has been recently extended to its most natural domain, the microwaves [32].

Here we show how the performance advantage given by quantum reading can be exploited to completely hide classical information in optical memories. The strategy is to design a photo-degradable optical memory whose cells have very close reflectivities (each reflectivity encoding a bit-value). Because of the photodegrable effects, each cell can only be read with a limited number of photons. In these low-energy conditions, we find that only well-tailored quantum sources (in particular, entangled) are able to discriminate two very close reflectivities and, therefore, retrieve the information stored in the cell. Specifically, we derive a simple analytical formula which relates the reflectivities of the memory cell with the mean number of photons to be employed by the quantum source.

This approach would provide a layer of technological security to the stored data, in the sense that only an advanced laboratory equipped with quantum-correlated sources would be able to read the information, whereas any other standard optical reader based on classical states, such as coherent states or even thermal states, can only extract a negligible number of bits.

The paper is organized as follows. In Section 2, we briefly review the basic setup of quantum reading and we discuss the performances achievable by quantum entanglement and classical (coherent) states. Then, in Section 3 we show how to design memories which are not accessible to classical methods. Finally, Section 4 is for conclusions.

## 2. Basic Setup for Quantum Reading

For our purpose we consider the simplest version of quantum reading, considering only ideal optical memories, i.e., with high reflectivities, and neglecting decoherence effects (see [11] for more advanced models). Each memory cell is assumed to be in one of two hypotheses: Non-unit reflectivity r_{0} := r < 1 (encoding bit-value 0) or unit reflectivity r_{1} = 1 (encoding bit-value 1). Mathematically, this is equivalent to distinguish between a lossy channel ε_{r} whose loss parameter is the reflectivity r < 1 and an identity channel
$\mathcal{I}$.

In symmetric quantum hypothesis testing, these two hypotheses have the same cost, so that we aim to optimize the mean error probability. In other words, we need to minimize
$\overline{p}:=p(1|0){p}_{0}+p(0|1){p}_{1}$, where p_{0} and p_{1} are the a priori probabilities of the two hypotheses, while p(1|0) is the probability of a false positive and p(0|1) is the probability of a false negative. For simplicity, we consider here equiprobable hypotheses, i.e., p_{0} = p_{1} = 1/2, which means that a bit of information is stored per cell. The amount of information which is retrieved in the readout process is therefore given by
${I}_{\text{read}}(\overline{p})=1-H(\overline{p})$, where
$H(\overline{p})=-\overline{p}{\mathrm{log}}_{2}\overline{p}-(1-\overline{p}){\mathrm{log}}_{2}(1-\overline{p})$ is the binary formula of the Shannon entropy [33].

#### 2.1. Classical Benchmark

To distinguish between the two hypotheses Alice exploits an input source of light (a transmitter) and an output detection scheme (a receiver). In the classical reading setup, the transmitter consists of a single bosonic mode, the signal (S), which is prepared in a coherent state |α〉 sent to the memory cell. At the output, the receiver is typically a photodetector counting the number of photons reflected, followed by a digital processing based on a classical hypothesis test. The performance of this receiver can be bounded by considering an optimal quantum measurement, constructed from the Helstrom matrix ρ_{0} – ρ_{1} of the two possible output states
${\rho}_{0}=|\sqrt{r}\alpha \rangle \langle \sqrt{r}\alpha |\text{and}\phantom{\rule{0.2em}{0ex}}{\rho}_{1}=|\alpha \rangle \langle \alpha |$.

The minimum error probability is given by the Helstrom bound [34] which is here very simple to compute since the two states are pure. In fact, for two arbitrary pure states |φ_{0}〉 and |φ_{1}〉, the Helstrom bounds reads

In our specific case, we have [2]

#### 2.2. Quantum Transmitter

In the quantum reading setup, we consider a transmitter composed of two entangled modes, that we call signal (S) and reference (R). This is taken to be an Einstein–Podolsky–Rosen (EPR) state, also known as a two-mode squeezed vacuum state [2]. An EPR state is a zero-mean pure Gaussian state |μ〉_{SR} with covariance matrix (CM)

The signal mode, with
$\overline{n}$ mean photons, is sent to read the memory cell and its reflection S′ is combined with the reference mode in an optimal quantum measurement. Given the state ρ_{SR} = |μ〉_{SR} 〈μ| of the input modes S and R, we get two possible states

_{0}is a mixed Gaussian state with CM

The minimum mean error probability is given by the Helstrom bound
${\overline{p}}_{\mathrm{quantam}}=[1-D({\sigma}_{0},{\sigma}_{1})]/2$, where D(σ_{0}, σ_{1}) is the trace distance between σ_{0} and σ_{1}. The Helstrom bound is difficult to compute when one or both the output states are mixed. For this reason, we resort to an upper-bound, known as quantum Chernoff bound (QCB) [35–37]. This can be written as

_{1}= |φ〉〈φ|, we may write C = F, using the quantum fidelity F = 〈φ|σ

_{0}|φ〉. For zero-mean Gaussian states, this fidelity can easily be computed in terms of their CMs [38,39]. In fact, we have

As a result, the mean error probability associated with this quantum transmitter is upperbounded by the QCB as follows

Thus, the EPR transmitter is able to read at least ${I}_{\text{read}}^{\text{quant}}={I}_{\text{read}}({\overline{p}}_{\text{quantun}}^{\mathrm{QCB}})$ bits per cell.

## 3. Data Secured by Quantum Reading

We can compare the readout performances of the two transmitters by considering the information gain $\mathrm{\Delta}:={I}_{\text{read}}^{\text{quant}}-{I}_{\text{read}}^{\text{class}}$. Its positivity means that quantum reading outperforms the classical readout strategy. In particular, for Δ ≃ 1 bit per cell we have that the EPR transmitter reads all data, while the classical transmitter is not able to retrieve any information. Here we aim to exploit this feature to make the data storage secure in absence of entanglement (and, more generally, quantum resources). As we can see from Figure 1, the value of the gain Δ is close to the maximum value of 1 bit per cell when the memory cell is characterized by very high reflectivities, i.e., r ≃ 1. In particular, the good region where Δ > 0.95 is particularly evident at low photon numbers, while it tends to shrink towards r = 1 for increasing energy.

We now discuss how we can exploit this advantage of quantum reading for designing a secure classical memory. Let us expand the information quantities ${I}_{\text{read}}^{\text{class}}$ and ${I}_{\text{read}}^{\text{quant}}$ at the leading order in (1 − r) ≃ 0. We find

As we can see, at high reflectivities, there is a different behaviour of these quantities in the mean number of photons $\overline{n}$. In particular, we may write

According to Equation (13), a non-trivial difference between ${I}_{\text{read}}^{\text{class}}$ and ${I}_{\text{read}}^{\text{quant}}$ arises by imposing the condition

Indeed this leads to the following behaviour for large $\overline{n}$

We can see that only quantum reading enables to retrieve non-zero information from the memory (combining this performance with suitable error correcting codes would enable us to achieve a complete readout of the memory). In the following Figure 2, we show the behaviour of the two information quantities ${I}_{\text{read}}^{\text{class}}$ and ${I}_{\text{read}}^{\text{quant}}$ in terms of the mean photon number $\overline{n}$ and assuming the condition of Equation (15).

We can see that, at any fixed energy $\overline{n}$ irradiated over the memory cell, there is a memory with reflectivity r satisfying Equation (15) which is readable by using a quantum transmitter with signal energy $\overline{n}$ but unreadable by a classical transmitter with the same irradiated energy $\overline{n}$. More precisely, any classical transmitter with energy up to $\overline{n}$ is inefficient. In fact, let us fix some value ${\overline{n}}_{max}$ and consider a memory with $1-r={\overline{n}}_{max}^{-1}$, then the performance of all classical transmitters with signal energy $\overline{n}\le {\overline{n}}_{max}$ is shown in Figure 3. We see that the optimal classical transmitter is that with the maximal energy ${\overline{n}}_{max}$ as clearly expected from the monotonic expression in Equation (5).

Thus, if we construct a theoretical memory which can be irradiated with at most ${\overline{n}}_{max}$ photons per cell (otherwise data is lost, e.g., due to photodegrable effects) and having reflectivity r satisfying Equation (15), then this will be unreadable by any classical transmitter based on coherent states while its data can be retrieved by a quantum transmitter with signal energy $\simeq {\overline{n}}_{max}$.

Note that in general, we can design a memory with reflectivity r such that

## 4. Conclusions

In this preliminary study on the cryptographic aspects of quantum reading, we have shown how it is possible to construct classical memories which cannot be read by classical means, namely coherent states (and mixtures of coherent states, by invoking the same convexity arguments of Ref. [26]) but still they can be read using quantum entanglement. In particular, we have considered an EPR state and we have connected the mean number of photons to be employed by this quantum source with the reflectivies to be used in the memory cells, see Equation (15) and also its generalization in Equation (17). Note that other non-classical states may also provide non-trivial advantages with respect to coherent states and their mixtures. In general, the security provided by the scheme relies on the technological difference between two types of labs, one limited to classical sources and the other able to access quantum features, such as entanglement or squeezing.

It is interesting to discuss the connections between our scheme of data-hiding by quantum reading and the traditional technique of quantum data hiding [40,41]. The latter is about to store classical information into entangled states, so that it can only be retrieved by joint measurements. It is clearly an application of quantum state discrimination. By contrast, data-hiding by quantum reading is related to the problem of quantum channel discrimination. Classical data is stored in a channel (not a state) and quantum entanglement is used as an input resource to be processed by the channel. This is a crucial difference, also for practical purposes, since data stored in a classical memory does not decohere (like the entangled states typically prepared in quantum data hiding), and quantum entanglement is used a resource on demand, which is needed only for the readout of the information (not for the storage process).

Note that our study can be extended in several ways. We have only considered ideal memories where the cells are addressed individually and have very high reflectivities (in particular, we have assumed unit reflectivity for one of the two bit values stored in the cell). There is no inclusion of additional noise sources in the model, e.g., coming from stray photons scattered during the readout process, neither analysis of diffraction or other optical effects. Finally, we have also assumed that high values of entanglement can be generated. While this is possible theoretically, it is very hard to achieve experimentally. This would not be a problem if we were able to construct memories which are extremely photo-sensitive, so that that the maximum values of tolerable energies are of the order of ${\overline{n}}_{max}\lesssim 10$ photons per cell.

## Acknowledgments

This work is supported by an EPSRC DTG grant (United Kingdom). Gaetana Spedalieri would like to thank C. Ottaviani, S.L. Braunstein, S. Mancini and S. Pirandola for useful discussions.

## Conflicts of Interest

The author declares no conflicts of interest.

## References

- Gisin, N.; Ribordy, G.; Tittel, W.; Zbinden, H. Quantum cryptography. Rev. Mod. Phys.
**2002**, 74, 145–195. [Google Scholar] - Weedbrook, C.; Pirandola, S.; Garcia-Patron, R.; Cerf, N.J.; Ralph, T.C.; Shapiro, J.H.; Lloyd, S. Gaussian quantum information. Rev. Mod. Phys.
**2012**, 84, 621–669. [Google Scholar] - Nielsen, M.A.; Chuang, I.L. Quantum Computation and Quantum Information; Cambridge University Press: Cambridge, MA, USA, 2000. [Google Scholar]
- Modi, K.; Brodutch, A.; Cable, H.; Paterek, T.; Vedral, V. The classical-quantum boundary for correlations: Discord and related measures. Rev. Mod. Phys.
**2012**, 84, 1655–1707. [Google Scholar] - Pirandola, S.; Spedalieri, G.; Braunstein, S.L.; Cerf, N.J.; Lloyd, S. Optimality of Gaussian Discord. Phys. Rev. Lett.
**2014**, 113, 140405. [Google Scholar] - Pirandola, S. Quantum discord as a resource for quantum cryptography. Sci. Rep.
**2014**, 4. [Google Scholar] [CrossRef] - Braunstein, S.L.; Pirandola, S. Side-Channel-Free Quantum Key Distribution. Phys. Rev. Lett.
**2012**, 108, 130502. [Google Scholar] - Rubenok, A.; Slater, J.A.; Chan, P.; Lucio-Martinez, I.; Tittel, W. Real-World Two-Photon Interference and Proof-of-Principle Quantum Key Distribution Immune to Detector Attacks. Phys. Rev. Lett.
**2013**, 111, 130501. [Google Scholar] - Pirandola, S.; Ottaviani, C.; Spedalieri, G.; Weedbrook, C.; Braunstein, S.L.; Lloyd, S.; Gehring, T.; Jacobsen, C.S.; Andersen, U.L. High-rate quantum cryptography in untrusted networks
**2013**, arXiv, 1312.4104. - Ottaviani, C.; Spedalieri, G.; Braunstein, S.L.; Pirandola, S. Continuous-variable quantum cryptography with an untrusted relay: Detailed security analysis of the symmetric configuration. Phys. Rev. A
**2015**, 91, 022320. [Google Scholar] - Pirandola, S. Quantum Reading of a Classical Digital Memory. Phys. Rev. Lett.
**2011**, 106, 090504. [Google Scholar] - Pirandola, S.; Lupo, C.; Giovannetti, V.; Mancini, S.; Braunstein, S.L. Quantum reading capacity. New J. Phys.
**2011**, 13, 113012. [Google Scholar] - Spedalieri, G.; Lupo, C.; Mancini, S.; Braunstein, S.L.; Pirandola, S. Quantum reading under a local energy constraint. Phys. Rev. A
**2012**, 86, 012315. [Google Scholar] - Lupo, C.; Pirandola, S.; Giovannetti, V.; Mancini, S. Quantum reading capacity under thermal and correlated noise. Phys. Rev. A
**2013**, 87, 062310. [Google Scholar] - Hirota, O. Error Free Quantum Reading by Quasi Bell State of Entangled Coherent States
**2011**, arXiv, 1108.4163. - Nair, R. Discriminating quantum-optical beam-splitter channels with number-diagonal signal states: Applications to quantum reading and target detection. Phys. Rev. A
**2011**, 84, 032312. [Google Scholar] - Bisio, A.; Dall’Arno, M.; D’Ariano, G.M. Tradeoff between energy and error in the discrimination of quantum-optical devices. Phys. Rev. A
**2011**, 84, 012310. [Google Scholar] - Guha, S.; Dutton, Z.; Nair, R.; Shapiro, J.; Yen, B. Information Capacity of Quantum Reading, Proceedings of Frontiers in Optics (FiO) 2011/Laser Science (LS) XXVII, San Jose, CA, USA, 16–20 October 2011.
- Dall’Arno, M.; Bisio, A.; D’Ariano, G.M.; Mikova, M.; Jezek, M.; Dusek, M. Experimental implementation of unambiguous quantum reading. Phys. Rev. A
**2012**, 85, 012308. [Google Scholar] - Dall’Arno, M.; Bisio, A.; D’Ariano, G.M. Ideal Quantum Reading of Optical Memories. Int. J. Quant. Inf.
**2012**, 10, 1241010. [Google Scholar] - Wilde, M.M.; Guha, S.; Tan, S.-H.; Lloyd, S. Explicit Capacity-Achieving Receivers for Optical Communication and Quantum Reading, Proceedings of the 2012 IEEE International Symposium on Information Theory (ISIT 2012), Cambridge, MA, USA, 1–6 July 2012; pp. 551–555.
- Dall’Arno, M. Optimization of Quantum Communication Protocols. Ph.D. Thesis, University of Pavia, Pavia, Italy, 2012. [Google Scholar]
- Dall’Arno, M. Gaussian Quantum Reading beyond the Standard Quantum Limit
**2013**, arXiv, 1302.1624. - Einstein, A.; Podolsky, B.; Rosen, N. Can Quantum-Mechanical Description of Physical Reality Be Considered Complete? Phys. Rev.
**1935**, 47, 777–780. [Google Scholar] - Lloyd, S. Enhanced Sensitivity of Photodetection via Quantum Illumination. Science
**2008**, 321, 1463–1465. [Google Scholar] - Tan, S.-H.; Erkmen, B.I.; Giovannetti, V.; Guha, S.; Lloyd, S.; Maccone, L.; Pirandola, S.; Shapiro, J.H. Quantum Illumination with Gaussian States. Phys. Rev. Lett.
**2008**, 101, 253601. [Google Scholar] - Guha, S.; Erkmen, B.I. Gaussian-state quantum-illumination receivers for target detection. Phys. Rev. A
**2009**, 80, 052310. [Google Scholar] - Shapiro, J.H. Defeating passive eavesdropping with quantum illumination. Phys. Rev. A
**2009**, 80, 022320. [Google Scholar] - Lopaeva, E.D.; Berchera, I.R.; Degiovanni, I.P.; Olivares, S.; Brida, G.; Genovese, M. Experimental Realization of Quantum Illumination. Phys. Rev. Lett.
**2013**, 110, 153603. [Google Scholar] - Zhang, Z.; Tengner, M.; Zhong, T.; Wong, F.N.C.; Shapiro, J.H. Entanglement’s Benefit Survives an Entanglement-Breaking Channel. Phys. Rev. Lett.
**2013**, 111, 010501. [Google Scholar] - Zhang, Z.; Mouradian, S.; Wong, F.N.C.; Shapiro, J.H. Entanglement-Enhanced Sensing in a Lossy and Noisy Environment. Phys. Rev. Lett.
**2015**, 114, 110506. [Google Scholar] - Barzanjeh, S.; Guha, S.; Weedbrook, C.; Vitali, D.; Shapiro, J.H.; Pirandola, S. Microwave Quantum Illumination. Phys. Rev. Lett.
**2015**, 114, 080503. [Google Scholar] - Cover, T.M.; Thomas, J.A. Elements of Information Theory; Wiley: Hoboken, NJ, USA, 2006. [Google Scholar]
- Helstrom, C.W. Quantum Detection and Estimation Theory, Mathematics in Science and Engineering; Academic Press: New York, NY, USA, 1976; Volume 123. [Google Scholar]
- Audenaert, K.M.R.; Calsamiglia, J.; Masanes, L.; Muñoz-Tapia, R.; Acin, A.; Bagan, E.; Verstraete, F. Discriminating States: The Quantum Chernoff Bound. Phys. Rev. Lett.
**2007**, 98, 160501. [Google Scholar] - Audenaert, K.M.R.; Nussbaum, M.; Szkola, A.; Verstraete, F. Asymptotic Error Rates in Quantum Hypothesis Testing. Commun. Math. Phys.
**2008**, 279, 251–283. [Google Scholar] - Pirandola, S.; Lloyd, S. Computable bounds for the discrimination of Gaussian states. Phys. Rev. A
**2008**, 78, 012331. [Google Scholar] - Spedalieri, G.; Braunstein, S.L. Asymmetric quantum hypothesis testing with Gaussian states. Phys. Rev. A
**2014**, 90, 052307. [Google Scholar] - Spedalieri, G.; Weedbrook, C.; Pirandola, S. A limit formula for the quantum fidelity. J. Phys. A: Math. Theor.
**2013**, 46, 025304. [Google Scholar] - Terhal, B.M.; DiVincenzo, D.P.; Leung, D.W. Hiding Bits in Bell States. Phys. Rev. Lett.
**2001**, 86, 5807–5810. [Google Scholar] - DiVincenzo, D.P.; Leung, D.W.; Terhal, B.M. Quantum data hiding. IEEE Trans. Inf. Theory
**2002**, 48, 580–599. [Google Scholar]

**Figure 1.**We plot $\mathrm{\Delta}(\overline{n},r)$ in the high-reflectivity range 0.99 ≤ r < 1 and wide range of $\overline{n}$ up to 5 × 10

^{4}. We see how the Einstein–Podolsky–Rosen (EPR) transmitter is superior for r ≃ 1, where Δ becomes close to 1 bit per cell.

**Figure 2.**We plot ${I}_{\text{read}}^{\text{class}}$ (lower curve) and ${I}_{\text{read}}^{\text{quant}}$ (upper curve) versus the mean photon number $\overline{n}>1$. We assume a memory with reflectivity r satisfying the condition of Equation (15).

**Figure 3.**We plot the information quantity ${I}_{\text{read}}^{\text{class}}$ in log-scale for $\overline{n}\le {\overline{n}}_{max}$. We consider the readout of a memory with $1-r={\overline{n}}_{max}^{-1}$. Here we consider the numerical value ${\overline{n}}_{max}=1000$ but the behaviour is generic.

**Figure 4.**We plot the information quantities ${I}_{\text{read}}^{\text{class}}$ (lower curve) and ${I}_{\text{read}}^{\text{quant}}$ (upper curve) versus the mean photon number $\overline{n}\ge 1$. We consider memories with reflectivity r satisfying Equation (17) with c = 0.1.

© 2015 by the authors; licensee MDPI, Basel, Switzerland This article is an open access article distributed under the terms and conditions of the Creative Commons Attribution license (http://creativecommons.org/licenses/by/4.0/).