Introduction

A quantum memory, namely a device that records a non-classical state, is an indispensable resource for advanced quantum information processing. Many quantum memory studies have already been reported that use various schemes and hardware1,2,3,4,5,6,7,8. In these studies, an atomic ensemble has been extensively investigated because of its good accessibility with photonic flying qubits and its relatively long coherence time thanks to its isolation from the environment. For example, the single spin excitation of an atomic ensemble is used as a photonic state memory for a quantum network9, and a Rabi flop and a Ramsey interferometer can be regarded as a quantum bit or quantum memory for quantum superposition1, 2. With a Ramsey interferometer, a coherence time of several seconds has been demonstrated with an atom chip technique10, 11, and the application of a long coherence time has been possible with state-of-the-art technology.

Quantum information is intrinsically secure because of the measurement back-action and the no-cloning theorem. However, the quantum information preserved in a quantum memory with a single key lock is in peril of leaking as a result of key theft and direct access to the memory. To increase the security, the encryption of a quantum bit or quantum memory has been proposed theoretically12. However, no experiment has yet been carried out. Here we report the experimental demonstration of a double-key-lock quantum memory by encrypting the quantum phase recorded on an atomic ensemble trapped below a persistent supercurrent atom chip.

Results

Ramsey interferometry as a single-key-lock quantum memory

The encryption process requires unitary operations for reliable decryption, and the Ramsey interferometry technique is available for this purpose. Ramsey interferometry was originally designed for measuring the resonant frequency of a molecular beam with two interacting fields that are applied at geometrically separated points to resolve small frequency splitting13, 14. After the invention of a laser cooling and trapping technique for atoms, the molecular beam was replaced by a trapped atomic cloud, and the geometrically separated fields were replaced by temporally separated field pulses. Here we assume a two-level atom with a ground state |g〉 and an excited state |e〉 separated by an energy difference E = ħω a . The interaction field with frequency ω j resonantly couples the transition with a small frequency detuning δ j  = ω j  − ω a . The field amplitude is represented with the Rabi frequency Ω j , and the practical Rabi frequency is described as \({\tilde{{\rm{\Omega }}}}_{j}=\sqrt{{{\rm{\Omega }}}_{j}^{2}+{\delta }_{j}^{2}}\). The interaction of the field with atoms causes Rabi oscillation between the ground |g〉 and the excited |e〉 states. The field interaction time τ j is set to meet the π/2 pulse condition, i.e. Ω j τ j  = π/2, so as to transfer half of the population in each ground or excited state. The two π/2 pulse interactions are temporally separated with a time interval T. After using a rotating wave approximation (ω j  ~ ω a ) and the assumption of a short pulse duration τ j relative to the time interval T (τ j /T 1), the time evolution of the wave function |Ψ(t)〉 is described with the following equation,

$$|{\rm{\Psi }}(T)\rangle ={U}_{j}({\omega }_{j}T+{\varphi }_{0}\mathrm{)\ }E(T\mathrm{)\ }{U}_{j}({\varphi }_{0}\mathrm{)\ }|{\rm{\Psi }}\mathrm{(0)}\rangle ,$$
(1)

where ϕ 0 represents an initial phase, which we can set at zero without loss of generality, and U j (ϕ) and E(t) represent the following field interaction and time evolution in the base {|g〉, |e〉};

$$\begin{array}{ccc}{U}_{j}(\varphi ) & = & [\begin{array}{cc}{e}^{i\frac{{\delta }_{j}}{2}{\tau }_{j}}\{\cos \,(\frac{{\mathop{{\rm{\Omega }}}\limits^{ \sim }}_{j}}{2}{\tau }_{j})-i\frac{{\delta }_{j}}{{\mathop{{\rm{\Omega }}}\limits^{ \sim }}_{j}}\,\sin \,(\frac{{\mathop{{\rm{\Omega }}}\limits^{ \sim }}_{j}}{2}{\tau }_{j})\} & -i{e}^{i(\frac{{\delta }_{j}}{2}{\tau }_{j}+\varphi )}\frac{{{\rm{\Omega }}}_{j}}{{\mathop{{\rm{\Omega }}}\limits^{ \sim }}_{j}}\,\sin \,(\frac{{\mathop{{\rm{\Omega }}}\limits^{ \sim }}_{j}}{2}{\tau }_{j})\\ -i{e}^{-i(\frac{{\delta }_{j}}{2}{\tau }_{j}+\varphi )}\frac{{{\rm{\Omega }}}_{j}}{{\mathop{{\rm{\Omega }}}\limits^{ \sim }}_{j}}\,\sin \,(\frac{{\mathop{{\rm{\Omega }}}\limits^{ \sim }}_{j}}{2}{\tau }_{j}) & {e}^{-i\frac{{\delta }_{j}}{2}{\tau }_{j}}\{\cos \,(\frac{{\mathop{{\rm{\Omega }}}\limits^{ \sim }}_{j}}{2}{\tau }_{j})+i\frac{{\delta }_{j}}{{\mathop{{\rm{\Omega }}}\limits^{ \sim }}_{j}}\,\sin \,(\frac{{\mathop{{\rm{\Omega }}}\limits^{ \sim }}_{j}}{2}{\tau }_{j})\}\end{array}]\\ E(t) & = & [\begin{array}{cc}{e}^{i{\omega }_{a}t/2} & 0\\ 0 & {e}^{-i{\omega }_{a}t/2}\end{array}].\end{array}$$

Starting with the atomic ground state, i.e. |g〉 = 1 and |e〉 = 0, the excitation probability P e (t) can be approximately written as follows,

$${P}_{e}(T)=4\frac{{{\rm{\Omega }}}_{j}^{2}}{{\mathop{{\rm{\Omega }}}\limits^{ \sim }}_{j}^{2}}{\sin }^{2}(\frac{{\mathop{{\rm{\Omega }}}\limits^{ \sim }}_{j}{\tau }_{j}}{2}){[\cos (\frac{{\delta }_{j}T}{2})\cos (\frac{{\mathop{{\rm{\Omega }}}\limits^{ \sim }}_{j}{\tau }_{j}}{2})-\frac{{\delta }_{j}}{{\mathop{{\rm{\Omega }}}\limits^{ \sim }}_{j}}\sin (\frac{{\delta }_{j}T}{2})\sin (\frac{{\mathop{{\rm{\Omega }}}\limits^{ \sim }}_{j}{\tau }_{j}}{2})]}^{2}.$$
(2)

When the Rabi frequency Ω j and the pulse duration time τ j are fixed, the excitation probability exhibits a cosine curve as a function of the time interval T with a frequency equal to the detuning δ j /2π as shown in Fig. 1a.

Figure 1
figure 1

Security enhanced quantum memory. The horizontal axis T of the plot in (a), (b) and (c) is normalized with 2π/δ j . (a) Pulse sequence of the Ramsey interferometry and the calculated excitation probability of the Ramsey flop. (b) Scrambling pulse sequence and the calculated excitation probability. The excitation probability includes several curves calculated with a phase difference ϕ S  [0, 2π]. (c) Scramble-retrieve pulse sequence and the calculated excitation probability. The excitation probability includes several curves with a phase difference ϕ S  [0, 2π]. (d) Relevant energy level for the stimulated Raman transition using D1-line / MW-RF fields. (e) Illustration of the experimental setup for security enhanced quantum memory. D1-line, MW, and RF fields are applied when atoms are trapped in a magnetic potential below the atom chip. Excitation probability is measured after a 16 ms TOF with state selective absorption measurements.

A Ramsey interferometer can be regarded as a single-key-lock quantum memory that records quantum superposition. For recording arbitrary superposition of |g〉 and |e〉 states, the first pulse area should be changed from π/2 to a suitable one. In the readout process, the second pulse with the same pulse area as the first one should be shined at the time when the interferometer phase evolves to be (2k + 1)π, where k is an integer. If we can measure 100% distribution in |g〉 state, we can confirm that we have recorded the superposition of |g〉 and |e〉 states defined by the first pulse area. The phase, frequency, and application time of the first pulse constitute crucial information for reading out the recorded quantum superposition, and from this point of view, the information of the first pulse is a “key” as regards the quantum memory for readout. To simplify the following description of encryption technique, we employ the standard Ramsey interferometer setting with π/2 pulse as the first and second pulses in this article.

Double-key-locking scheme

To enhance the security of the above mentioned single-key-lock quantum memory, we propose encrypting the stored quantum phase information. For this purpose, we introduce another independent Ramsey interferometer that is operated with a field that has a random phase difference with respect to the field of the first Ramsey interferometer. To avoid confusion, we call the first and second Ramsey interferometers a write-read interferometer (WRI) and a scramble-retrieve interferometer (SRI), respectively. In addition, we call the first and second pulses of the WRI (SRI) write and read (scramble and retrieve) pulses, respectively.

The operation sequence of the phase encryption is constituted with the following pulse applications. First, a write pulse is used to initialize and record the quantum phase. Then, a scramble pulse is applied after a time interval T 1 from the write pulse. Finally, a read pulse is applied with a time interval T from the application of the scramble pulse to prepare for the excitation probability readout. The time evolution of the wave function |Ψ s (t)〉 of this phase scramble sequence can be calculated with the following equation,

$$|{{\rm{\Psi }}}_{s}(T)\rangle ={U}_{W}({\omega }_{W}(T+{T}_{1}\mathrm{))\ }E(T\mathrm{)\ }{U}_{S}({\omega }_{S}{T}_{1}+{\varphi }_{S}\mathrm{)\ }E({T}_{1}\mathrm{)\ }{U}_{W}\mathrm{(0)\ }|{\rm{\Psi }}\mathrm{(0)}\rangle ,$$
(3)

where ϕ S shows the relative phase difference between the field of the SRI with respect to the field of the WRI. The field interaction U j (ϕ) and frequency ω j with j = W or S represent the interaction matrix and the pulse-field frequency of WRI (j = W) and SRI (j = S), respectively. The excitation probability after this sequence is plotted in Fig. 1b. After the application of a scramble pulse, the recorded quantum phase depends on the phase difference ϕ S . By setting a completely random relative phase difference ϕ S , we can introduce π phase ambiguity into the recorded quantum phase, and the readout after the application of the read pulse fails to reconstruct a clear Ramsey flop.

To retrieve the quantum phase, a retrieve pulse is employed after the application of a scramble pulse with a time interval T 2 that has a value equal to (2n + 1)π/δ S , where n is an integer and δ S represents the Raman detuning of the SRI. With this time interval the state flipped by the scramble pulse is flipped back by the retrieve pulse after a π phase evolution. The time evolution of the wavefunction |Ψ r (t)〉 after this sequence can be calculated as follows,

$$|{{\rm{\Psi }}}_{r}(T)\rangle ={U}_{W}({\omega }_{W}(T+{T}_{1}+{T}_{2}\mathrm{))\ }E(T\mathrm{)\ }{U}_{S}({\omega }_{S}({T}_{1}+{T}_{2})+{\varphi }_{S}\mathrm{)\ }E({T}_{2}\mathrm{)\ }{U}_{S}({\omega }_{S}{T}_{1}+{\varphi }_{S}\mathrm{)\ }E({T}_{1}\mathrm{)\ }{U}_{W}\mathrm{(0)}|{\rm{\Psi }}\mathrm{(0)}\rangle .$$
(4)

The calculated excitation probability is plotted in Fig. 1c. As expected, the Ramsey flop is recovered by employing the retrieve pulse.

The scramble-retrieve sequence can be regarded as a double-key-lock quantum memory operation. The first key is the write pulse information and the second key is the scramble pulse information. Without information about the phase, frequency, and application time of the two pulses, the recorded quantum phase is difficult to recover with high accuracy.

Experimental setup and scrambling-retrieving measurements

The experiment was performed with 87Rb atoms as follows. We defined the spin states |F, m F〉 = |1, −1〉 and |2, 1〉 of the ground state 52S1/2 as |g〉 and |e〉, and the |1, 0〉 and |2, 0〉 of the excited state 52P1/2 as |ex 1〉 and |ex 2〉, respectively. The atomic cloud, initially trapped in a magneto-optical trap (MOT), was optically pumped to the spin state |g〉, and transferred to the magnetic potential of a persistent supercurrent atom chip15. After cooling by radio frequency (RF) forced evaporation, a Bose-Einstein condensate (BEC) was obtained 100 μm below the chip surface (see Methods)16.

The WRI was constituted with the D1-line stimulated Raman transition that coupled the |g〉 and |e〉 spin states via an intermediate state as illustrated in Fig. 1d (see Methods). In our experiment a 565 Hz (=Ω W /2π) Rabi flop was observed (Fig. 2a), and the 1/e amplitude coherence time of the Ramsey flop reached more than 30 times larger than a cycle of the Rabi flop (Fig. 2b).

Figure 2
figure 2

Rabi and Ramsey flops driven by D1-line/MW-RF fields. The lines are damped sinusoidal fit to the data. (a) D1-line Rabi flop. (b) D1-line Ramsey flop. (c) MW-RF Rabi flop. (d) MW-RF Ramsey flop. (e) Relative phase difference between the D1-line and MW-RF fields obtained with a Ramsey interferometry using the MW-RF and D1-line fields as the first and second π/2 pulses, respectively. The error bars reflect 1 σ statistical uncertainty.

The SRI was constituted with a microwave (MW) and a radio-frequency (RF) field that coupled the |g〉 and |e〉 spin states via two photon transition (see Methods). The MW field was irradiated from a dipole antenna located below the atomic cloud, and the RF field was applied from a loop antenna attached beside the atom chip (Fig. 1e). With this setup a 169 Hz (=Ω S /2π) Rabi flop was observed (Fig. 2c), and the 1/e amplitude coherence time of the Ramsey flop was more than 100 times larger than a Rabi flop cycle (Fig. 2d).

The excitation probability of the atomic cloud was estimated by measuring the number of atoms in the |g〉 and |e〉 states with absorption images of atomic density taken after a time-of-flight (TOF) of 16 ms (see Methods).

Figure 3 shows an excitation probability obtained with the quantum phase scramble-retrieve experiments. The parameters used in the measurement are summarized in Table 1. In Fig. 3a the excitation probability fluctuated significantly after the application of a scramble pulse. Although the maximum phase modulation was limited to π, a large ambiguity was introduced and it is not practically possible to identify the quantum phase. On the other hand, in Fig. 3b, a clear Rabi flop was restored by the application of a retrieve pulse.

Figure 3
figure 3

Experimentally obtained scrambled and retrieved Ramsey flops. (a) Encrypted state: excitation probability after the application of a scramble pulse in between the write and read pulses. The large error bars indicate the fluctuation of the excitation probability caused by the random phase modulation of the scramble pulse. (b) Decrypted state: excitation probability after the application of scramble and retrieve pulses in between the write and read pulses. After the application of a retrieve pulse, the Ramsey flop is restored. The line is a damped sinusoidal fit to the data, and the error bars reflect 1σ statistical uncertainty.

Table 1 Parameters used in the experiment.

Discussion

The crux of the scramble-retrieve scheme is the random phase difference between the WRI and SRI fields. In our experiment, the random phase difference was obtained by employing D1-line and MW-RF fields, which have five orders of difference in frequency (see Methods). On the other hand, given the fact that the utilization of two fields with many orders of difference in frequency is not essential for generating a random phase difference, the scramble-retrieve scheme must be possible with only D1-line or MW-RF fields when the phase difference is randomized. However, the demonstration of coherent control using both D1-line and MW-RF fields promises a wide range of applications. One of the practical applications increases the scalability by taking advantage of the difference in spatial resolution. By trapping more than two atomic clouds on a chip, individual and global control is possible with D1-line and MW-RF fields, respectively.

To increase the ambiguity of the scrambled quantum phase, a double scramble scheme, i.e., triple Ramsey interferometers, works as a straightforward extension of the double Ramsey interferometers scheme (see Methods). Figure 4 shows the excitation probability calculation for the double scramble scheme. With this sequence, the quantum phase is sufficiently scrambled and it is completely impossible to determine the quantum phase.

Figure 4
figure 4

Double scrambling encryption and decryption. The horizontal axis T of the plot in (a) and (b) is normalized with 2π/δ j . The excitation probability includes several curves calculated with a phase difference ϕ S1 [0, 2π] and ϕ S2 = π/15. (a) Double scrambling pulse sequence and calculated excitation probability. The phase ambiguity of excitation probability is expanded to ~2π with the double scrambling and it is completely impossible to determine the quantum phase. (b) Retrieve sequence for the double scrambling encryption and the excitation probability. The retrieve-1 pulse for the scramble-1 pulse comes after the retrieve-2 pulse for the scramble-2 pulse. The pulse application time should satisfy T 2 + T 3 + T 4 + 2τ S2 = (2m + 1)π/δ S1 and T 3 = (2n + 1)π/δ S2, where m and n are integers. The δ j , ϕ j , and τ j with j = S1 or S2 represents the detuning, phase difference, and pulse duration of the SRI-1 (j = S1) and SRI-2 (j = S2), respectively, and the T k with k = 1, 2, 3, and 4 represents the time interval between the write and scramble-1 pulses (k = 1), the scramble-1 and scramble-2 pulses (k = 2), the scramble-2 and retrieve-2 pulses (k = 3), and the retrieve-2 and retrieve-1 pulses (k = 4), respectively.

The other interesting application of this scheme is secret sharing with the double-key-lock quantum memory. When Alice records data in a quantum memory with her write pulse and Bob encrypts it with his scramble pulse, then Alice and Bob cannot read out the recorded data without their cooperation.

In summary, we have achieved a security enhanced quantum memory with a double Ramsey interferometry technique. The demonstration of coherent phase control using both a D1-line laser and MW-RF fields reveals the potential for a wide range of applications connecting a photonic network and microwave devices. In addition, the multiple-key-lock quantum memory is applicable as a secret sharing protocol for enhancing information security.

Methods

Preparation of a BEC below a persistent supercurrent atom chip

The preparation of an atomic cloud or a Bose-Einstein condensate below a persistent supercurrent atom chip is detailed in our previous reports15, 16. Although we were able to obtain more than 2 × 105 atoms in a pure condensate, to avoid the loss of coherence for the collisional interactions, the number of atoms in a condensate was reduced to 5 × 104 (atomic density = 1 × 1013 cm−3) by reducing the MOT loading time. The magnetic field of the potential bottom was adjusted to B min  = 0.32 mT to meet the magic B field condition. In a magic B field, the spin states |g〉 and |e〉, which were employed as the |g〉 and |e〉 states of the Ramsey interferometer, have the same magnetic field dependence up to the second order of the Zeeman shift1.

D1-line stimulated Raman transition

The WRI was constituted with the D1-line stimulated Raman transition that coupled the |g〉 and |e〉 spin states via an intermediate state, which was detuned by Δ from the excited state |ex 1〉 as illustrated in Fig. 1d. By setting the detuning Δ close to half the value of the energy difference of the |ex 1〉 and |ex 2〉 states, the energy shift of the Rabi flop reached close to zero, which made the Raman detuning less sensitive to the interacting field intensity. The pump and the Stokes field were generated from a diode laser and an electro-optic modulator driven with a frequency detuned from the energy difference between |g〉 and |e〉 by δ W /2π. The frequency of the diode laser was stabilized to give it a linewidth of less than 1 kHz with an ultra low expansion (ULE) cavity. The pump and the Stokes fields were linearly polarized perpendicular to the principal axis of the trapped condensate to excite σ + and σ transitions.

MW-RF Raman transition

The SRI consisted of a microwave (MW) and a radio frequency (RF) field that coupled the |g〉 and |e〉 spin states via a two-photon transition. The MW field at frequency f MW = 6.833378 GHz and the RF field at frequency f RF = 1.3 MHz were generated by commercial synthesizers phase locked to a highly stable 10 MHz quartz oscillator. The sum of the MW and RF frequency was detuned from the energy difference between |g〉 and |e〉 by δ S /2π.

Measurement of excitation probability

The excitation probability was estimated by measuring the number of atoms in the |g〉 and |e〉 states with an absorption image of atomic density taken after a 16 ms time-of-flight (TOF). To image the combined number of atoms in the |g〉 and |e〉 states, a short repumping pulse, which was resonant with the D2-line (F = 1 to F′ = 2) transition, pumped the |g〉 state into the F = 2 manifold. About 100 μs later, a σ + polarized probe beam, which was resonant with the D2-line (F = 2 to F′ = 3) transition, was illuminated to obtain an image of the shadow of the atomic cloud with a charge-coupled device (CCD) camera. The image of the |e〉 state was obtained with the probe beam without applying the repumping pulse. We performed five measurements with the same setting parameters, and averaged the results to obtain a single data point with a standard deviation.

Random phase difference

The random phase difference between the D1-line and MW-RF fields was caused by the spontaneous emission of the D1-line laser. The phase variance 〈Δϕ 2〉 is related to the laser linewidth Δω with an equation d〈Δϕ 2〉/dt = Δω 17. In our experiment the phase variance was sufficiently large by employing the laser linewidth of 1 kHz and the measurement time interval of 47 seconds for taking one absorption image of an atomic cloud. Figure 2e shows the excitation probability obtained with a Ramsey interferometry using the MW-RF and D1-line fields as the first and second π/2 pulses, respectively. The relative phase difference is sufficiently large, and we recognized that the D1-line and MW-RF fields have a random phase difference.

Double scramble scheme: triple Ramsey interferometers

A double scramble scheme is a straightforward extension of the scramble-retrieve scheme described above. To distinguish two scramble-retrieve interferometers, we name them SRI-1 and SRI-2, and scramble-i and retrieve-i with i = 1 or 2, the scramble and retrieve pulses of SRI-1 (i = 1) and SRI-2 (i = 2), respectively. After the write and scramble-1 pulses application, the scramble-2 pulse is applied. The retrieve-1 pulse comes after the retrieve-2 pulse. The pulse application time should satisfy T 2 + T 3 + T 4 + 2τ S2 = (2m + 1)π/δ S1 and T 3 = (2n + 1)π/δ S2, where m and n are integers. The δ j , ϕ j , and τ j with j = S1 or S2 represents the detuning, phase difference, and pulse duration of SRI-1 (j = S1) and SRI-2 (j = S2), respectively. The T k with k = 1, 2, 3, or 4 represents the time interval between the write and scramble-1 pulses (k = 1), the scramble-1 and scramble-2 pulses (k = 2), the scramble-2 and retrieve-2 pulses (k = 3), and the retrieve-2 and retrieve-1 pulses (k = 4), respectively.