arxiv:quant-ph/ v1 28 Oct 2002

Transcription

1 Continuous Variables (,) Threshold Quantum Secret Sharing Schemes Andrew M. Lance, Thomas Symul, Warwick P. Bowen, Tomáš Tyc,, Barry C. Sanders, andpingkoylam Quantum Otics Grou, Deartment of Physics, Faculty of Science, Australian National University, ACT 000, Australia Deartment of Physics and the Centre for Advanced Comuting - Algorithms and Crytograhy, Macquarie University, Sydney, NSW 09, Australia Institute of Theoretical Physics, Masaryk University, 67 Brno, Czech Reublic (Dated: January 9, 00) We resent two exerimental schemes to erform continuous variable (,) threshold quantum secret sharing on the quadratures amlitudes of bright light beams. Both schemes require a air of entangled light beams. The first scheme utilizes two hase sensitive otical amlifiers, whilst the second uses an electro-otic feedforward loo for the reconstruction of the secret. We examine the efficacy of quantum secret sharing in terms of fidelity, as well as the signal transfer coefficients and the conditional variances of the reconstructed outut state. We show that both schemes in the ideal case yield erfect secret reconstruction. PACS numbers: 0.67.Dd, 4.50.Dv, 4.50.Lv, 4.65.Yj arxiv:quant-h/0088 v 8 Oct 00 I. INTRODUCTION Quantum secret sharing (QSS) has attracted a lot of attention recently as an imortant rimitive for rotecting quantum information. QSS, originally roosed as a means to rotect classical information using laws of quantum hysics [], has develoed into a general theory describing a secure transmission of quantum information to a grou of arties (layers), not all of whom can be trusted. The collaboration of the layers is essential in order to recover the quantum information. This general aroach to QSS is the quantum analogue of classical secret sharing []. A QSS rotocol involves a dealer who holds a secret state (quantum information) jψ in i, encodes it into an entangled state jψi over n quantum sub-systems (shares) and distributes the shares to n layers. The encoding is done in such a way that only secified subsets of the layers (the access structure) are able to extract the secret while all other subsets (forming the adversary structure) are unable to learn anything about it. The reconstruction of the secret by the collaborating layers is then achieved by alying a suitable joint unitary oeration on their shares, which disentangles one share from all the others and yields the secret state. Among QSS rotocols, there is an imortant class of socalled (k; n) threshold schemes [], in which the access structure consists of all grous of k or more layers while there are n layers in total. This makes the rotocol fair in the sense that no layer is favored among others. The simlest threshold scheme is the (; ) scheme where there are only two layers and both have to collaborate to retrieve the secret. The imlementation of this scheme is, in general, very simle. The dealer only needs to interfere the quantum secret on a beam slitter with a noisy beam, each layer receiving one of the oututs. It is imossible to obtain any information about the secret state through oerations on either share indeendently due to the contamination of the noisy beam. The secret can be erfectly reconstructed, however, if the layers co-oerate by interfering their shares on another : beam slitter. A continuous variable (,) QSS threshold schemes has been roosed by Tyc and Sanders [4]. This scheme uses electromagnetic field modes, and emloys interferometers for both the encoding and decoding of the secret. In this aer, we extend the original roosal by Tyc and Sanders and introduce another more ractical scheme that utilizes an electro-otic feedforward technique. We consider the secret to be encoded on the sideband frequency quadrature amlitudes of a light beam. Ideally the dealer would emloy a erfectly entangled air of beams. This is in ractice imossible, however, imrovement over classical schemes can still be achieved with finite amounts of entanglement. Moreover we will show that the introduction of classical noise by the dealer can further imrove the QSS scheme. We comare and quantify the erformances of both schemes in terms of available inut entanglement using two measures. We use the fidelity between inut and outut states as a figure of merit. We also characterize QSS in terms of the signal transfer coefficients and the conditional variances of both conjugate quadrature amlitudes of the secret. The aer is organized in the following manner. In Section II we resent the dealer rotocol to generate three shares. We outline, in Section III, the central role of the otical arametric rocesses in the QSS schemes. We then resent the two secret sharing schemes in Section IV and characterize these schemes in Section V. a ψ II. (,) THRESHOLD SCHEME a EPR : a EPR FIG. : Dealer rotocol for the roduction of three shares in a (,) threshold QSS scheme. a a a

2 Figure shows the dealer rotocol of a (,) threshold QSS scheme as roosed by Tyc and Sanders [4]. The dealer emloys a air of entangled beams to encode the secret by interfering one of them with the secret state on a : beam slitter. We let ^a ψ, ^a EPR and ^a EPR denote the annihilation oerators corresonding to the secret and the two entangled beams, resectively. The linearized exression for the annihilation oerator is given by ^a(t) = ff + ffi^a(t) where ff and ffi^a(t) denote the steady state comonent and zero mean value fluctuations of the annihilation oerator, resectively. The amlitude and hase quadrature oerators are denoted as ^X + =^a y +^a and ^X = ^a y ^a, whilst the variance of these oerators is exressed in the frequency domain as V ± (!) =h[ffi ^X ± (!)] i. The annihilation oerators corresonding to the three shares are then given by ^a = ^a ψ +^a EPR () ^a = ^a ψ ^a EPR () ^a = ^a EPR () Similar to the (,) secret sharing scheme discussed earlier, layers and (henceforth denoted by f,g) only need to comlete a Mach-Zehnder interferometer with the use of a : beam slitter to retrieve the secret state. The outut beams of the Mach-Zehnder are described by ^a 0 = ^a +^a =^a ψ (4) ^a 0 = ^a ^a =^a EPR (5) Eq. (4) clearly shows that the the secret is erfectly reconstructed. In contrast, secret reconstructions for f,g or f,g require more comlex rotocols. The aer now focuses on exerimental alternatives for the imlementation of this reconstruction rocess. III. OPTICAL PARAMETRIC GAIN AND ENTANGLEMENT One of the imortant element for QSS is the otical arametric down conversion rocess. In this rocess a um hoton is converted into a air of twin hotons following the simle scheme: ~! um! ~! s + ~! i, where the signal and idler modes are denoted! s and! i, resectively. A. Tye II system This down conversion can be achieved in a bulk Tye II second order non-linear crystal in a traveling wave configuration. By treating the um as a classical beam, we find the inutoutut relations for the signal and idler annihilation oerators to be [6] ^a s;out = ^a s;in cosh r +^a y i;in sinh r (6) ^a i;out = ^a i;in cosh r +^a y s;in sinh r (7) where ^a s and ^a i are the annihilation oerators of the signal and the idler modes, resectively. The interaction arameter is r = flt, wherefl is roortional to the um field amlitude and the second order suscetibility coefficient of the crystal. By choosing ^a and ^a q to be the ±45 o olarized modes defined by ^a ;q =(^a s ± ^a i )= and assuming that all the ower is carried by mode ^a, Eq. (6) and Eq. (7) give ^a ;out =^a ;in cosh r +^a y ;in sinh r (8) from which we can deduce the total number of hotons at the outut h ^N ;out i = G(ffi)N o with gain G(ffi) = cosh r + sinh r cos ffi (9) where ffi = ffi um ffi is the hase mismatch between the um and the ^a mode. The gain G(ffi) oscillates between the two values G 0 = e r and e r, deending of the relative hase between the inut and the um beam. Finally we note that the outut quadrature amlitudes are given by ^X + ;out = G ^X + 0 ;in (0) ^X ;out = G0 ^X ;in () B. Tye I system Another way of erforming the otical arametric down conversion rocess is by using a Tye I crystal. Otical arametric oscillators (OPO) oerating below threshold can exhibit hase sensitive amlification [7]. We assume the OPO is a simle Fabry-Perot cavity with a second order non-linear gain medium. The equations of motion for a general OPO cavity are given by _a = fl^a»^a+» ^A b b +» ^A f f +» ^ l ffia l () _a y = fl Λ^a y»^a y +» ^A y b b» + ^A y f f + y» ^ l ffia l () where ^A f and ^A b are the inuts into the front and back mirrors and ffia ^ l is a vacuum fluctuation term due to loss in the cavity.» =» f +» b +» l is the total cavity daming rate, where» f,» b and» l are the daming rates of the front and back mirrors and the loss in the cavity resectively. The outut from the OPA exressed in terms of an inut ^A f can be derived from Eq. () and Eq. (). By setting» b =0 and» l = 0, so that no vacuum fluctuation coule into the cavity, the outut field quadratures from the OPA exressed in the frequency domain are X + out (!) =» f i! + fl i! +» fl X+ f (!) (4) X out (!) =» f i! fl i! +» + fl X f (!) (5) where the general oerator Z = Z(!) is the Fourier transform of the time oerator ^Z = ^Z(t). By assuming the frequency is

3 small such that! fi» f, the outut field quadratures can be exressed more succinctly as X + out = GX + f (6) X out = G X f (7) where the gain is defined as G =(» f + fl)=(» f fl). The amount of gain is deendent on the um ower, and on the relative hase between the um and inut beams. In the amlification regime hase squeezed light is roduced, whilst in the deamlification regime amlitude squeezed light is roduced. C. Production of entangled beams For Tye II systems, the signal and idler outut modes generated by a single PSA, as defined in Eq. (6) and (7), exhibit quadrature entanglement [8, 9]. Since the two modes are orthogonally olarized, the entangled beams can be satially searated using a olarizing beam slitter. Whilst for Tye I systems, quadrature entangled beams can be roduced by interfering a air of squeezed beams roduced by two OPAs on a : beam slitter [0]. The outut beams from the beam slitter also will exhibit quadrature entanglement. The entanglement between the X + and X quadratures of the outut modes in both systems can be characterized by using the insearability criterion roosed by Duan et al. []. For symmetric inuts, Duan s insearability criterion is given by h(ffix + s + ffix+ i ) i + h(ffix s ffix i ) i < (8) where subscrits s and i denote the two entangled beams. Since h(ffix + s + ffix+ i ) i = h(ffix s ffix i ) i == cosh r for both configurations, the beams show quadrature entanglement when r > 0 (Where r is the squeezing arameter of the inut beams for Tye I, or the interaction arameter for Tye II). IV. PROPOSED EXPERIMENTAL SETUPS In this section, we analyze how f,g can reconstruct the secret sent by the dealer. The method described here can also be alied unchanged to f,g, and so we will not cite exlicitly this case in the following aragrahs. First, one can remark that by erforming homodyne measurement on ^a and ^a, and then by combining their results with a well chosen gain, f,g can get a measure of the amlitude or the hase of the secret, but they can not measure both at the same time. This scheme can be used for ractical alications which require only classical information of a single quadrature to be transfered between the dealer and the layers. Since the secret is not reconstructed, nor quantum information of both quadratures transferred, this rotocol does not qualify as QSS. Let us now concentrate on schemes which effectively reconstruct both the amlitude and hase of the secret at the same time. A. The PSA scheme This scheme follows the original idea of Tyc and Sanders [4]. To reconstruct the secret using two PSAs, f,g first combine ^a and ^a on a : beam slitter, roducing two beams ^a and ^b, as deicted in Fig.. They ass each of these beams though searate PSAs, denoted by PSA a and PSA b resectively. Both the PSAs are adjusted so that the outut of PSA a is amlified in the X + quadrature and deamlified in the X quadrature whilst the PSA b outut is deamlified in the X + quadrature and amlified in the X quadrature. The gain of both PSAs is assumed to be equal. The final ste required for reconstruction of the secret is to combine both PSA oututs on another : beam slitter. We denote these oututs as ^a out and ^a out. a a a PSA a : : b PSA b a out a out FIG. : Reconstruction of secret for f,g using the PSA scheme. The PSAs can be used in both configurations discussed in Section III. We find the outut quadrature amlitudes for both configurations to be of the form X ± out = X ± ψ G+ G + ff± + fi± sqrt (9) It is obvious that if outut is used to construct the secret, then outut will in the limit of erfect QSS contain no relevant information. We will therefore not analyse outut. For the Tye II configuration, the ff ± and fi ± arameters are deendent on the interaction arameters of the arametric rocess ff ± = fi ± =» G sinh r cosh r G» G cosh r sinh r G cosh r+ sinh r sinh r+ cosh r X ± s;in (0) X ± i;in ()

4 4 For the Tye I configuration, they are deendent on the amount of squeezing of both squeezed state inuts. We therefore obtain ff ± = X sqz G ( ) + G( ± ) () a ψ a sqz PM : a a a out b HR fi ± = X ± sqz G ( ± ) + G( ) () a sqz PM : a : AM G c a LO In the case of erfect entanglement (i.e. r!), setting the arametric gain to G = + (4) will comletely eliminate the contribution of the inut entanglement modes. We are therefore left with the original secret. With imerfect entanglement, we find for the Tye II configuration X ± out = X ± ψ e r X ± s;in + e r X ± i;in (5) Similarly, the outut quadrature amlitudes for the Tye I configuration are given by X + out = X + ψ X + sqz (6) X out = X ψ X + sqz (7) where it is assumed that X sqz + ; are the squeezed quadratures. The results above demonstrate that with finite entanglement, f,g are able to reconstruct the secret ^a ψ with added noise variance of e r. In addition to the arametric rocesses required for the generation of a air of entangled beams, the QSS scheme described above requires two additional PSAs. This is exerimentally very challenging. Since non-linear effects in otics are small, there have been methods used to increase otical intensities in exeriments to enhance the arametric rocess. One such examle is the utilization of high eak ower ulsed light sources, either in Q-switched or mode-locked setus, to single ass light beams through the non-linear mediums to achieve the required hase sensitive amlification. A common difficulty found in such systems is the distortion of otical wave fronts due to the nonlinear medium. This would result in oor otical interference and losses. Another method of increasing otical intensity in non-linear rocesses is the use of otical resonators. In this situation, the resonators also act as mode cleaners to the beams, thus ensuring better beam quality. However, imedance matching of the resonators, which is not required for single-ass hase sensitive amlification, is difficult to achieve. Imerfect imedance matching again leads to losses. It is therefore interesting to find an alternative scheme which does not require additional arametric rocesses for the reconstruction of the secret. In the next section, we will resent a QSS scheme that requires only an electro-otic feedforward loo for f,g in secret reconstruction. FIG. : Dealer rotocol and the reconstruction of secret for f,g using an electro-otic feedforward loo. : is a = reflective beam slitter and HR is a highly reflective beam slitter. PM ; are hase modulators on the resective amlitude squeezed beams. B. Feedforward loo scheme Electro-otic feedforward loos have been widely used in many continuous variable exeriments. The feedforward setu has been demonstrated to be useful in noiseless control of light beams [] and has recently been used in teleortation exeriments [4, 5]. In our feedforward QSS scheme, the dealer is required to add classical noise on the entangled beams. The urose of adding classical noise will be discussed in the characterization Section V. This can be achieved using a air of hase modulators on the constituent amlitude squeezed beams as shown in Fig.. This results in the two entangled beams having anticorrelated classical noise in the amlitude quadratures and correlated classical noise in the hase quadratures. Due to the : beam slitter ratio, both beams have an equal amount of added noise. The shares can then be exressed as ^a = ^a ψ +^a EPR + ffi^a m (8) ^a = ^a ψ ^a EPR ffi^a m (9) ^a = ^a EPR + ffi^a m (0) where ffi^a m; =(±ffi ^X m + + iffi ^X m )= are the additional classical noise introduced by the two hase modulators. The strength of these additional modulations is given by V m ± = h(ffi ^X m ± ) i = e s. Similar to the revious dealer rotocol, f,g can retrieve the secret by comleting a Mach-Zehnder interferometer. To reconstruct the secret, f,g can interfere beams ^a and ^a on a = reflective beam slitter as shown in Fig. [7]. The beams slitter oututs are given by X + b = (X sqz X sqz +X + ψ X+ m ) () X b = (X + sqz X + sqz +X ψ ) () X + c = [(X sqz X sqz ) (X + sqz +X + sqz )+(X + ψ +X+ m )] 4 X c [(X + = sqz X + sqz ) (X sqz +X sqz )+(X ψ X m )] 4 () (4)

5 5 Since X + sqz; fi in the limit of large squeezing. We note that the = reflective beam slitter ensures that the hase quadrature of the secret is already faithfully reconstructed in X b. By measuring the amlitude fluctuations X+ c and alying them to X + b, it is ossible to eliminate the remaining anti-squeezed fluctuations, X sqz;, and the classical amlitude noise X m + on the same beam. This can be done simly by directly detecting beam ^c and then electro-otically feeding the detected signal to the amlitude of beam ^b with the right gain. Due to otical losses, however, better efficiency can be achieved by divorcing the modulators from beam ^b as shown in Fig.. Instead the detected signal from beam ^c is encoded off line on a strong local oscillator beam, a LO. The signal on the local oscillator can then be mixed back onto beam ^b using a highly reflective beam slitter as shown in Fig.. The resulting outut quadratures are given by X ± out = fflx ± b + fflx ± LO. In the limit of high beam slitter reflectivity, ffl! 0, we obtain X + out ' X + b + K(!)ffiI X out ' X b (5) where K(!) is a gain transfer function which takes into account the resonse of the electro-otic feedforward circuit and the loss due to the HR beam slitter. ffii is the detected hotocurrent of the amlitude quadrature fluctuations of beam ^c given by ffii = hx + c i " r # ffix sqz ffix sqz ffix + sqz +ffix + sqz + ffix m + + ffix+ ψ + ffix + d (6) where and ffix + d are, resectively, the detection efficiency and the vacuum fluctuations due to an imerfect detector. The outut quadrature fluctuations can be re-exressed as ffix + out = + G G ffix + ψ + ffix sqz ffix sqz 6 6 r r ffix + sqz + ffix + sqz + G ffix m + (7) ffix out = G r ffix ψ + r ffix + sqz ffix + sqz ffix+ d + G 6 (8) where G = K(!)hX c + i is the total gain of the feedforward loo. By setting G =, it is clear that the anti-squeezing and classical noise terms of Eq. (7) are cancelled. In the limit of erfect detection efficiency and large squeezing, we obtain ffix + out = ffix + ψ (9) ffix out = ffix ψ (40) Hence f,g can reroduce a symlectically transformed version of the secret, ^a ψ. We note that since symlectic transformations are local unitary oeration, no quantum information contained in the secret state is lost. Thus, the feedforward scheme works equally well when comared with the PSA scheme in terms of quantum information transfer. In order to reconstruct the quantum state of the secret, however, a single PSA is required on the outut beam. Even so, the feedforward scheme is still technically less demanding than the PSA scheme introduced in the earlier section. In the next section, we will introduce exerimental measures to characterize both QSS schemes. V. CHARACTERIZATION In teleortation exeriments fidelity, F = hψ in jρ out jψ in i, is conventionally used to quantify the efficacy of a teleorter [4]. Fidelity can also be adoted to characterize QSS as it is a rotocol that reconstructs inut quantum states at a distance. If we assume that all inut noise sources are Gaussian and that the secret is a coherent state, the fidelity of a QSS scheme is givenby[5] v u F =e (k+ +k u ) t V + ψ V ψ (4) (V + ψ + V + out )(V ψ + V out ) where k ± = hx ± ψ i ( hx ± ψ i=hx± outi) =(4V ± ψ +4V ± out ).Assuming an ideal detector ( =), we obtain fromthe analysis of Section IV the theoretical limits of fidelity for the PSA scheme as a function of squeezing F f;g = (4) F f;g = F f;g = (4) +e r where the subscrits i and j in F fi;jg denote the collaborating layers. We note that F f;g is always unity since the re-

6 6 construction of secret only requires a simle Mach-Zehnder. In the limit of erfect entanglement, r!, the fidelity of Eq. (4) also aroaches unity. In the case of the feedforward QSS scheme, however, we obtain F f;g = (44) s F f;g = F f;g = e (45) ( + e r )(+e r ) where is deendent on the quadratures of the secret, hx ± ψ i, and the squeezing of the inutstates r, and is given by» = hx + 9 ψ i (+e r ) +hx ψ i (46) (+e r ) Equation (45) does not tend to unity even in the limit of infinite inut squeezing. In fact, it quickly degrades to zero for finite squeezing and large secret sideband modulations. The reason for this is due to the symlectically transformed secret outut state ^a out. We oint out, however, that no information is lost. Indeed f,g can locally transform the outut to get back the original secret state via a single arametric rocess. The fidelity given in Eq. (45) after the arametric correction then becomes equal to that of Eq. (4). An alternative measure that is invariant to symlectic transformations is the T-V grah roosed by Ralh and Lam [6], and used to characterize quantum teleortation [5]. This grah lots the roduct of the conditional variances of both conjugate observables V q = V cv + :V cv against the sum of the signal transfer coefficients T q = T + + T. Here the conditional variances are given by V ± cv = V ± out + jhffix ± ψ ffix± outij V ± ψ and the signal transfer coefficients are defined as T ± = SNR± out SNR ± ψ (47) (48) In contrast to fidelity which measures the quality of the state reconstruction, the T-V grah emhasizes the transfer of quantum information [5]. In an ideal QSS scheme, collaborating layers would obtain T q =and V q =0. Using these measures, the collaborating layers using the PSA scheme can obtain T q = +e r (49) V q = e r (50) Whilst for the feedforward scheme the collaborating layers, which we will now denote as (CP), can obtain T CP q = +e r +» Vq CP = e r 9G e r + e r (G 8 + G G + e r G + ) +e s (G ( + G ) e r + G ) +G e s + G ( ) (5) (5) 5 4 (a) (b) (c) G= (0.00,550) (0.00,556) (0.040,65) (0.0,565) V q G= G= T q T q T q FIG. 4: T-V grahs for the feedforward scheme with (a) no squeezing, (b) 40% of squeezing, and (c) 99% of squeezing. The lines reresent the information retrieved by f,g with varying feedforward gain, and the oints reresent the information retrieved by fg or fg alone. The dashed lines and stars corresond to the absence of added modulations, whilst the solid lines and circles corresond to 0dB above the quantum noise of added modulations. We have assumed erfect detector efficiency for the feedforward loo. The coordinates of the oints which are not outside of the lotted region are dislayed in the inset of each grah. where e s is the ower of the added classical noise. Before analysing these results, we first determine the amount of in-

7 7 formation the single layers (SP), i.e. the adversary structures, can learn about the secret if they were to measure their shares directly. In this situation, Tq SP and Vq SP for the single layers are found to be T SP q = + cosh r + e s (5) V SP q = (cosh r + es ) 4 (54) Figure 4 shows the results of the feedforward QSS scheme for three different amounts of inut squeezing. The dotted lines reresent the results obtained by f,g in the absence of added classical noise when feedforward gain is varied. The star oints reresent the maximum information retrievable by fg or fg alone in the corresonding situations. Results for the addition of classical noise, 0 db above the quantum noise limit, are deicted by solid lines for the collaborating layers and by circles for the single layers. In the limit of infinite inutsqueezing, the collaborating layers can reconstruct the secret erfectly, with Tq CP! and Vq CP achieved with an otimum, feedforward gain of G =! 0. This is where the influence of both the anti-squeezing quadratures (and the added classical noise) are comletely cancelled as discussed in Section IV B. Whilst single layers in the same q limit obtain no information about the secret, with Tq SP! 0 and V SP!, due to the dominant effect of the antisqueezing quadratures (and the added classical noise). These results are shown in the lots of Fig. 4(c). In the case of finite squeezing and no added classical noise, however, the otimum feedforward gain for the collaborating layers is always less than as shown in both Fig. 4(a) and (b). Further, single layers forming the adversary structures can obtain some quantum information about the secret. When the amount of inut squeezing less than 4%, single layers obtain more quantum information than the access structures using the feedforward rotocol. In this situation, the collaborating layers should directly measure their shares containing the secret. The classical limit obtained when there is no inut squeezing and no added classical noise is then Tq SP = Tq CP = and Vq SP = Vq CP ==4, as shown by the star oint of Fig. 4(a). In order to revent the single layers from obtaining information about the secret, the dealer can introduce hase quadrature noise on both inut amlitude squeezed beams. The hase noise translates to added noise in both the amlitude and hase quadratures of the entangled beams, ffix m.for ± large modulations, say 0 db above the quantum noise limit, the single layers obtain virtually no information about the secret, thus making Tq SP! 0 and Vq SP!even in the absence of inut squeezing. Collaborating layers on the other hand, obtain a zero squeezing classical limit of Tq CP! = and Vq CP! 4. Another consequence of the added classical noise for the collaborating layers is that the otimum gain for maximum information transfer again aroaches. This results in the collaborating layers obtaining less information about the secret with increasing classical noise. Nonetheless, the collaborating layers can now obtain much more information than the singlelayersforall levels ofinutsqueezing. Any amount of inut squeezing will now differentially increase the amount of information the access structure has over the adversary structure. These results are illustrated by the solid lines and the circles of Fig. 4. VI. CONCLUSION (T q,v q) clas,μn clas,n quan,μn quan,n Adversary (,/4) (0,) (0,) (0,) Structure (,/4) (0,) (0,) (0,) (0,) (0,) (0,) (0,) Access f,g (,0) (,0) (,0) (,0) Structure f,g (,/4) (/,4) (,0) (,0) f,g (,/4) (/,4) (,0) (,0) TABLE I: Summary of the erformances of the feedforward QSS schemes with (quan) and without (clas) otical entanglement; and with (n) and without added noise (μn). Parameters listed are the best achievable (T q;v q) values. In this aer, we resented two exerimental (,) threshold QSS schemes. The first one requires a air of otically entangled beams and two hase sensitive amlifiers for the reconstruction of the secret state. Whilst the second utilizes a air of otically entangled beams and an additional electrootic feedforward loo. We have shown that although the latter does not exactly reroduce the original secret state, all quantum information is retained in the reconstructed outut state in the limit of erfect entanglement. We show that by introducing controlled classical modulations on the entangled beams, it is ossible to insure security against attacks from individual layers. Table I summarizes the erformances of our roosed feedforward QSS scheme for both classical (without entanglement), and quantum (with erfect entanglement) regimes. They are also calculated for situations with and without added classical noise. This research is suorted by the Australian Research Council. We thank Ben Buchler and Stehen Bartlett for useful discussions. This work is a art of EU QIPC Project, No. IST (QUICOV). [] M. Hillery et al, Phys. Rev. A 59, 89 (999). [] A. Shamir, Comm. of the ACM, 6 (979). [] R.Cleveetal,Phys.Rev.Lett.8, 648 (999). [4] T. Tyc, and B. C. Sanders, Phys. Rev. A 65, 40 (00). [5] L. Vaidman, Phys. Rev. A 49, 47 (994); S. L. Braunstein and H. J. Kimble, Phys. Rev. Lett. 80, 869 (998); A. Furusawa et al, Science 8, 706 (998). [6] J. A. Levenson, I. Abram, T. Rivera and P. Grangier, JOSAB

8 8 0, (99). [7] P. K. Lam, T. C. Ralh, B. C. Buchler, D. E. McClelland, H- A. Bachor, and J. Gao., J. Ot. B, 469 (999). [8] M. Reid, Phys. Rev. A 40, 9 (989). [9] K. Bencheikh, T. Symul, A. Jankovic, and J. A. Levenson, J. of Mod. Ot. 48, 90 (00). [0] Z.Y.Ou,S.F.Pereira,H.J.Kimble,andK.C.Peng,Phys.Rev. Lett. 68, 66 (99). [] L-M. Duan et al.,phys.rev.lett.84, 7 (000). [] P. K. Lam, T. C. Ralh, E. H. Huntington and H-A. Bachor, Phys. Rev. Lett. 79, 47 (997); T. C. Ralh, Phys. Rev. A 56, 487 (997); E. H. Huntington, P. K. Lam, T. C. Ralh, D. E. McClelland and H-A. Bachor, Ot. Lett., 540 (998). [] B. C. Buchler, P. K. Lam, and T. C. Ralh, Phys. Rev. A 60, 494 (999). [4] A. Furusawa et al., Science 8, 706 (998). [5] W. P. Bowen, N. Tres, B. C. Buchler, R. Schnabel, T. C. Ralh, H-A. Bachor, T. Symul and P. K. Lam, quant-h/ [6] T. C. Ralh, P. K. Lam and R. E. S. Polkinghorne, J. Ot. B, 48 (999). [7] In this aer, a : beam slitter ratio is adoted for the analysis ofthesecretreconstructionbetweenf,g for all situations. We note that in general, both the beam slitter ratio and the feedforward gain can be otimised deending on the amount of inut entanglement.