Introduction

Quantum internet1—the quantum version of the current Internet—holds promise for accomplishing quantum teleportation2, quantum key distribution (QKD)3,4 and precise synchronisation of atomic clocks5 among arbitrary clients all over the globe, as well as longer-baseline telescopes6 and possibly even simulation of quantum many-body systems1. To realise it in a global scale for arbitrary users, it is reasonable to utilise not only recently developed satellites7,8,9,10 but also existing optical networks that have already been installed in the world. An indispensable building block11,12 for implementing such a quantum internet against photon loss of optical fibres is to use quantum repeaters over an optical network, irrespective of its topology13,14,15,16. For 17 years after the first proposal for quantum repeaters17, it had widely been believed that their realisation needs demanding matter quantum memories18,19 or matter qubits20. However, in 2015, this belief was disproved by a proposal of all-photonic quantum repeaters21, which work without any matter quantum memories or matter qubits, that is, only with optical devices. Thanks to its all-optical nature, this scheme has advantages that cannot be seen in conventional quantum repeaters necessitating matter quantum memories. For instance, first, the repetition rate of the protocol could be as high as one wants, similarly to a memory-function-less scheme20, as it is determined only by the repetition rate of the optical devices, independently of the communication distance. This would lead to a future higher-bandwidth quantum internet. Second, in principle, the scheme could work at room temperature and does not need any quantum interfaces among photons with different wavelengths, let alone between matter quantum memories and photons. Third, the scheme is an ultimate version of the all-optical network approach22—which has already been identified as a promising infrastructure for fast and energy-efficient communication in the field of conventional communication. Thus, the scheme is an important target of the development of photonic networks23,24, and in particular their implementations using integrated quantum circuits25,26,27,28,29,30 or frequency multiplexing31,32. The scheme would also represent a step towards a future all-photonic quantum computer33,34,35,36,37.

In this Article, we report a proof-of-principle experiment for a key component of all-photonic quantum repeaters, which we will call all-photonic time-reversed adaptive (TRA) Bell measurement. In particular, the experiment has been implemented, based on our proposal of a scheme which requires an initial state composed of far fewer single photons than what needed21,38 before. Besides, it does not need large-scale optical switches and quantum non-demolition measurement, let alone matter quantum memories and quantum error correcting codes. Our scheme is obtained by invoking the concept of the ‘time-reversal’ in the proposal of all-photonic quantum repeaters and by combining a local delayed preparation of a multipartite Greenberger–Horne–Zeilinger (GHZ) state with utilisation of a special feature of the type-II fusion gate36. Our experiment shows that, as the theory predicts, only the survived single-photon state is faithfully teleported without the disturbance from the other lost photons. In principle, once the GHZ state is treated in a lossless manner, our scheme could double the achievable distance of QKD, that is, it could have the same impact as the all-photonic intercity QKD38.

Results

Basics of quantum repeaters

Before introducing our scheme, we start by reviewing the efficiency enhancement of quantum repeaters brought by the adaptive Bell measurement—which performs the Bell measurement only on qubits that have successfully shared entanglement with distant nodes. To see this, it is instructive to begin by considering the simplest quantum repeater scheme which uses only a single repeater node C in the middle of Alice (A) and Bob (B) separated over a distance L. Here, the node C is connected to Alice and Bob by optical fibres with length L/2, whose transmittance is described by \(\eta _{L/2}: = e^{ - L/\left( {2L_{{\mathrm{att}}}} \right)}\) for an attenuation length Latt. Note that, if Alice and Bob do not utilise the node C as a quantum repeater node like the Ekert scheme4 or if they just run a direct quantum communication scheme between them like the Bennett–Brassard protocol3, the communication efficiency inevitably scales as ηL11,12. In this case, about 400 km for the use of the standard optical fibres is a practical distance limitation.

Let us first consider the mechanism of the simplest quantum repeater scheme using matter quantum memories (Fig. 1a), as a representative of conventional quantum repeater protocols. This protocol starts with l entanglement generation processes between nodes AC and between nodes CB. In particular, in each entanglement generation process, say in the ith process (i = 1, 2, …, l), the node A (B) locally prepares an entangled state between a single-photon αi (βi) and her qubit ai (his qubit bi), where the qubit ai (bi) can be regarded as virtual for the case of application to QKD21, and then tries to supply the qubit ai (bi) with entanglement with a matter quantum memory ci (ci+l) at the node C by exchanging the single photon through the optical fibre. In practice, this trial succeeds only probabilistically, because of imperfection of local operations and the photon loss in the optical fibres. This success probability pg is normally described as pg(L/2) = cgηL/2 with an overall success probability cg of the local operations. This means that, if the nodes AC (CB) run the entanglement generation processes more than about \(p_{\mathrm{g}}^{ - 1}(L{\mathrm{/}}2)\) simultaneously in parallel, they can share, at least, an entangled pair almost deterministically. Then, the node C pairs its own matter quantum memories that are entangled with adjacent nodes A and B, respectively, and it performs Bell measurement on these pairs to convert the entangled pairs between AC and CB into entangled pairs between AB. This Bell measurement—applied only to halves of successfully entangled pairs—can be called adaptive Bell measurement. By including general cases (such as the Duan–Lukin–Cirac–Zoller protocol18) where the Bell measurement may succeed only probabilistically, say with a probability ps, we can conclude that Alice and Bob can obtain an entangled pair when nodes AC and CB run about \(p_{\mathrm{g}}^{ - 1}(L{\mathrm{/}}2)p_{\mathrm{s}}^{ - 1}\) entanglement generation processes on average (that is, when \(\simeq p_{\mathrm{g}}^{ - 1}(L{\mathrm{/}}2)p_{\mathrm{s}}^{ - 1}\)).

Fig. 1
figure 1

Adaptive Bell measurement for quantum repeaters. a Conventional quantum repeaters based on matter quantum memories are described, where Alice (A) or Bob (B) and the node C perform l entanglement generation processes (l = 3 in the figure as an example). The essential of the quantum schemes is to perform the Bell measurement at the node C adaptively only on the pairs of matter quantum memories that have successfully shared entanglement with Alice and Bob through the entanglement generation processes. This adaptive Bell measurement is made possible thanks to the functionality of matter quantum memories. In contrast, our scheme described in b performs this adaptive Bell measurement without matter quantum memories, by invoking the conception of the ‘time-reversal’. In particular, our scheme begins by entangling all the polarisation qubits {ci}i=1,2,…,2l at the node C initially, followed by connecting/disentangling the qubits dependently on the success/failure of the entanglement generation processes. This switching between connecting and disentangling is passively performed by adopting the type-II fusion gates as the implementation for the Bell measurement between optical pulses αici and between βici+l, as depicted in c. The type-II fusion gate is composed of the polarising beam splitter (PBS), the half-wave plates and single-photon detectors

On the other hand, if Alice and Bob perform the entanglement generation processes between them directly (without using the repeater node C), they need to run the processes about \(p_{\mathrm{g}}^{ - 1}(L)\) times to obtain an entangled pair between AB. Since \(p_{\mathrm{g}}^{ - 1}(L) > p_{\mathrm{g}}^{ - 1}(L{\mathrm{/}}2)p_{\mathrm{s}}^{ - 1}\) holds for large L, even the simplest quantum repeater scheme utilising only the single node C could be more efficient than the direct entanglement generation between Alice and Bob. More precisely, compared with the direct entanglement generation, the simplest quantum repeater scheme enables Alice and Bob to double their communication distance without decreasing the communication efficiency. Hence, it already enables us to extend the achievable distance of fibre-based quantum communication up to about 800 km, which is useful for intercity backbone quantum links38. A more general quantum repeater scheme with 2s − 1 repeater nodes (s = 1, 2, …)18,19 for accomplishing further scaling improvement can be regarded as one obtained by concatenating this simplest quantum repeater scheme with the help of quantum error correction or quantum memories with long coherence time.

The essence of the scaling improvement of the simplest quantum repeater scheme is the adaptive Bell measurement at the node C. In the above simplest quantum repeater scheme, this adaptive Bell measurement can be performed thanks to three functions of the matter quantum memories {ci}i=1,2,…,2l at the node C: (i) They can establish entanglement with a distant node A or B if the entanglement generation process succeeds. (ii) Their memory function enables the node C to keep entanglement until it is informed of the success/failure of the entanglement generation processes between AC and between CB. (iii) The independent accessibility to them enables the node C to selectively apply the Bell measurement only to halves of successfully entangled pairs, in order to avoid the error propagation from the other failed entanglement generation processes. Therefore, conventional schemes require the node C to be equipped with matter quantum memories. However, our all-photonic scheme shows that the adaptive Bell measurement is possible without using matter quantum memories.

All-photonic time-reversed adaptive Bell measurement

Our scheme—called TRA Bell measurement—is brought by invoking the concept of the ‘time-reversal’ in the proposal of all-photonic quantum repeaters21. In fact, this concept enables our scheme to work without matter quantum memories associated with three functions (i)–(iii). The conception of the time-reversal stems from the observation of the essential role of the adaptive Bell measurement at the node C, which is—among its own matter quantum memories {ci}i=1,2,…,2l—to entangle only local quantum memories that have successfully shared entanglement with distant nodes A and B. Unfortunately, this selective local supply of entanglement after the entanglement generation processes is impossible for our all-photonic scheme, because all the memories at the node C are replaced with single-photon qubits {ci}i = 1,2,…,2l without the function (ii) in our scheme. Instead, as shown in Fig. 1b, our scheme entangles all the single-photon qubits {ci}i=1,2,…,2l at the node C before the completion of entanglement generation processes. This means that our scheme essentially begins with entanglement swapping, rather than entanglement generation processes. In particular, the node C starts by locally preparing the single-photon qubits {ci}i=1,2,…,2l in a 2l-partite GHZ state39. Note that, up to the freedom of local unitary operators, this GHZ state is the same as the complete cluster state, corresponding to the state of the first-leaf qubits in the original proposal21.

The next question for the node C in our scheme is how to perform the entanglement generation processes with the nodes A and B. This is possible by utilising a connection process for GHZ states: If we perform the Bell measurement between a qubit composing an m-partite GHZ state and a qubit composing another n-partite GHZ state, we obtain an (m + n − 2)-partite GHZ state. To see how this works, we first note that the ith entanglement generation process between nodes AC (BC) starts with a local preparation of a bipartite GHZ state—equivalent to a Bell state—between the qubit ai (bi) and a single-photon αi (βi). Hence, if the single-photon αi from Alice (βi from Bob) successfully arrives at the node C and if the Bell measurement at the node C on these photons αici (βici+l) succeeds, an initial m-partite GHZ state (m = 1, 2, …, 2l) having included the qubit ci (ci+l) is transformed into an m-partite GHZ state which newly includes Alice’s qubit ai (Bob’s qubit bi) instead of the qubit ci (ci+l). This mechanism works as the function (i), that is, it works as the entanglement generation processes between nodes AC (BC). On the other hand, if the single-photon αi (βi) does not arrive at the node C—corresponding to the failure of the entanglement generation, we would like to disentangle the qubit ci (ci+l) from the GHZ state, in order to satisfy function (iii) (or because such a qubit is associated with a matter quantum memory that is not subjected to Bell measurement in the original simplest quantum repeater scheme). But, fortunately, we can disentangle the qubit ci (ci+l) just by performing the X-basis measurement on it. Therefore, if the node C can switch between the Bell measurement and the X-basis measurement dependently on the arrival of single photons from Alice and Bob, we can perform the adaptive Bell measurement in a time-reversed manner, as well as the entanglement generation.

The final question for the node C is how to implement this switching between the Bell measurement and the X-basis measurement, by using only optical devices. For instance, such switching can be performed actively by combining quantum non-demolition (QND) measurement (based on an entangled photon source) and optical switches as in the all-photonic intercity QKD38, or by using loss-tolerant encoding for qubits {ci}i=1,2,…,2l as in the all-photonic quantum repeaters21. However, here we present the node C with another mechanism to perform the switching passively, rather than actively, in order to make it possible to start from far fewer single-photon resources. That is, in our case, the node C uses a delayed preparation of the 2l-partite GHZ-state and the type-II fusion gate36 (Fig. 1c) with photon-number-resolving detectors as the implementation of the Bell measurement on αici (βici+l). The delayed preparation means that the node C prepares the 2l-partite GHZ state just before the arrival of optical pulses from Alice and Bob. This could enable us to assume that the GHZ state is lossless compared with the optical pulses sent from distant nodes AB (see Discussion for the precise requirement here). We also utilise a property of the type-II fusion gate as follows (see Supplementary Note 1): (a) If it is performed on the single-photon qubit ci (ci+l) and the optical pulse αi (βi) in the vacuum state, it works as X-basis measurement on the qubit ci (ci+l). (b) If it is performed on the single-photon qubit ci (ci+l) and the optical pulse αi (βi) including a single photon, it works as either (b1) the X-basis measurement on the single photons or (b2) the Bell measurement. Therefore, in principle, our TRA Bell measurement scheme can be performed just by using the type-II fusion gates, without invoking techniques such as the QND measurement and the loss-tolerant encoding.

In this way, we have arrived at the following protocol: (1) For the entanglement generation processes, Alice and Bob locally prepare l pairs of an optical pulse and a qubit in a Bell state (equivalent to a bipartite GHZ state). (2) Then, they send the l optical pulses to the node C through the optical fibres simultaneously. (3) At the timing of the arrival of all the 2l optical pulses sent by Alice and Bob, the node C prepares 2l single-photon qubits in a 2l-partite GHZ state locally and applies the type-II fusion gates to 2l pairs between the 2l-partite GHZ state and the 2l arriving optical pulses. (4) Then, the node C announces the measurement outcomes. (5) If the measurement outcomes inform Alice and Bob of the existence of the successful entanglement generation processes between nodes AC and between nodes CB and every measurement outcome corresponds to the case (a), (b1) or (b2), the qubits of Alice and Bob should be in a GHZ state. Except for these events, the protocol is considered to fail. The size of the final GHZ state shared by Alice and Bob depends on how many successful entanglement generation processes have existed. Depending on this, individual bit-flip errors can be compensated thanks to the robustness of the GHZ state against such errors.

Proof-of-principle experiment

Let us now discuss about the experimental demonstration of our all-photonic TRA Bell measurement with a three-partite photonic GHZ state \(\left| {{\mathrm{GHZ}}} \right\rangle _{c_1c_2c_5}\) as described in Fig. 1c. In particular, we suppose a situation where Alice sends two optical pulses α1 and α2 in single-photon states to the node C but only one of them survives the travel from the node A to the node C. Here, the node C does not know, in advance, which single photon is lost during the travel. Nevertheless, according to the theory above and described in Fig. 1c, just by performing the type-II fusion gates on α1c1 and on α2c2, the node C should share a Bell state between its remaining qubit c5 and Alice’s qubit ai which has been in a Bell state with the only survived single-photon αi (i = 1, 2). In other words, arbitrary quantum states of only the survived single photon αi should be teleported into the qubit c5 without the disturbance from the other lost photon, because the state of the photon αi can be chosen arbitrary by performing measurement on its partner ai. Here, we experimentally demonstrate this quantum teleporation as the most primitive function of our TRA Bell measurement.

Our experimental setup is shown in Fig. 2. Pump light at 395 nm with a power of 600 mW for spontaneous parametric down-conversion (SPDC) is prepared by the frequency doubler with the light at 790 nm from a mode-locked Ti:sapphire (Ti:S) laser with a pulse width of 100 fs and a repetition rate of 80 MHz. The vertically (V-) polarised pump light is injected to a pair of type-I phase-matched and 1.5-mm-thick β-barium borate (BBO) crystals40,41 to have a horizontally polarised photon pair \(\left| {HH} \right\rangle _{\alpha \gamma _2}\). The subscripts indicate modes of photons. After passing through a quarter wave plate (QWP) with its axis oriented at 22.5° to H polarisation, the pump light is reflected back to the QWP and the BBO crystals by a dichroic mirror to prepare a polarisation entangled photon pair \(\left| {\phi ^ + } \right\rangle _{c_5\gamma _1} = ( {\left| {HH} \right\rangle _{c_5\gamma _1} + \left| {VV} \right\rangle _{c_5\gamma _1}} ){\mathrm{/}}\sqrt 2\). By postselecting events where a single photon appears in mode α, we obtain an H-polarised single photon in mode γ2. The polarisation of photon γ2 is rotated to diagonal polarisation by a half-wave plate (HWP), and then photons γ1 and γ2 are mixed at a polarising beam splitter (PBS12). When two photons appear in output modes c1 and c2, the three-photon GHZ state \(\left| {{\mathrm{GHZ}}} \right\rangle _{c_1c_2c_5} = ( {\left| {HHH} \right\rangle _{c_1c_2c_5} + \left| {VVV} \right\rangle _{c_1c_2c_5}} ){\mathrm{/}}\sqrt 2\) is obtained42,43,44.

Fig. 2
figure 2

Experimental setup for our all-photonic TRA Bell measurement. This setup corresponds to the measurement in Fig. 1c. Two input modes α1 and α2 are prepared by a 50:50 beam splitter (BS) with the incoming mode α that comes from one output mode of the SPDC at BBO. The single photon in mode α travels into α1 or α2, which simulates the lossy quantum channel from Alice to Bob. The rest of the photons in modes c1, c2 and c5 generated by the SPDC at BBO forms the tripartite GHZ state necessary for TRA Bell measurement at node C. The lower and the upper type-II fusion gates tell the success/failure of the arrival of the photon from α1 or α2 and of the teleportation of its state to the photon in mode c5. The teleported state is estimated by controlling the quater wave plate (QWP), the half wave plate (HWP) and the polarising beam splitter (PBS). Quartz plates are used for adjusting additional phase shifts. All silicon photon detectors are coupled to single-mode optical fibres

For demonstrating the TRA Bell measurement, we use photon α not only as the heralding photon but also as Alice’s signal photon, whose quantum state is encoded into \(\left| \psi \right\rangle = \xi \left| H \right\rangle + \zeta \left| V \right\rangle\). As we have mentioned, in this experiment, we simulate a case where Alice sends two optical pulses in single-photon states to the node C but only one photon of them survives the lossy travel from the node A to the node C (Fig. 1b). For this, the signal photon in mode α is divided into two modes α1 and α2 by a 50:50 beam splitter (BS), corresponding to 50% loss of the transmission. If the signal photon is transmitted to mode α1 at the BS, photons α1 and c1 interfere at PBS11 for a type-II fusion gate (the lower side in Fig. 2), while photon c2 alone goes to the other fusion gate (the upper side in Fig. 2). In this case, if detector D21 is clicked, photon c2 is projected onto \(\left| D \right\rangle = \left( {\left| H \right\rangle + \left| V \right\rangle } \right){\mathrm{/}}\sqrt 2\). Then, the GHZ state \(\left| {{\mathrm{GHZ}}} \right\rangle _{c_1c_2c_5}\) is projected onto a Bell state as \(\left\langle D \right|_{c_2}\left| {{\mathrm{GHZ}}} \right\rangle _{c_1c_2c_5} \propto \left| {\phi ^ + } \right\rangle _{c_1c_5}\). As a result, by the type-II fusion gate on photons α1 and c1, the state of photon α1 is teleported to the state of photon c5 as \(\left\langle {\phi ^ + } \right|_{\alpha _1c_1}\left| \psi \right\rangle _{\alpha _1}\left| {\phi ^ + } \right\rangle _{c_1c_5} \propto \left| \psi \right\rangle _{c_5}\). On the other hand, when detector D22 is clicked, photon c5 is projected onto \(\left| A \right\rangle = \left( {\left| H \right\rangle - \left| V \right\rangle } \right){\mathrm{/}}\sqrt 2\). Then, the GHZ state is projected onto \(\left\langle A \right|_{c_2}\left| {{\mathrm{GHZ}}} \right\rangle _{c_1c_2c_5} \propto \left| {\phi ^ - } \right\rangle _{c_1c_5}\), where \(\left| {\phi ^ - } \right\rangle _{c_1c_5} \equiv ( {\left| {HH} \right\rangle _{c_1c_5} - \left| {VV} \right\rangle _{c_1c_5}} ){\mathrm{/}}\sqrt 2\). After the fusion operation on photons α1 and c1, the state of photon c5 becomes \(\left\langle {\phi ^ + } \right|_{\alpha _1c_1}\left| \psi \right\rangle _{\alpha _1}\left| {\phi ^ - } \right\rangle _{c_1c_5} \propto \xi \left| H \right\rangle _{c_5} - \zeta \left| V \right\rangle _{c_5}\). The phase shift here can be compensated by applying the phase-flip operation, and thus we can obtain \(\left| \psi \right\rangle _{c_5}\). In our proof-of-principle experiment, we skip this feed-forward phase-flip operation for simplicity.

Similarly, when the signal photon α is reflected to mode α2 at the BS, photon α2 and photon c2 interfere at the fusion gate in the upper side and only photon c1 goes to the fusion gate in the lower side. As a result, if detector D11 is clicked, the final state in mode c5 becomes \(\left| \psi \right\rangle _{c_5}\). If detector D12 is clicked, the state in mode c5 becomes \(\xi \left| H \right\rangle _{c_5} - \zeta \left| V \right\rangle _{c_5}\).

In our experiment, photon α is mixed with a photon either in mode c1 or c2, and, at the same time, photon α is used for heralding the successful generation of the GHZ state among modes c1, c2 and c5 at the fusion gate. Here we explain how it works properly in our experiment. When the perfectly mode-matched two photons in modes γ1 and γ2 interfere at the PBS12 for generating the GHZ state, they come out from modes c1 and c2 with probability 1/2, or both of the two photons come out together from the same mode c1 or c2 with probability 1/4. The former case is a desired event as we described before. Apparently, the latter case may cause the degradation of the quality of the experiment. However, when the two photons are bunched in mode c1 or c2 after PBS12, the two-photon state always becomes the NOON state of diagonal and anti-diagonal polarisation which are rotated to H and V polarisation at the fusion gate. As a result, both of the two photons are transmitted or reflected at the PBS in the fusion gate, and thus such events never contaminate the successful coincidence events among three of detectors D11, D12, D21 and D22. In order to obtain well mode matching of photons γ1 and γ2, we adjust the temporal mode by mirrors on the motorised stage, select the frequency mode of the photons by an interference filter with a bandwidth of 2.7 nm, and use the single-mode fibre connected to the avalanche photon detectors (quantum efficiency is about 60%). Furthermore, for suppressing the multiple photon emission by the SPDC, we set the photon pair generation probability per pulse at the BBO crystals to ~5 × 10−3. We also notice that BS, PBS11 and PBS22 add π phase shift between |H〉 and |V〉, resulting in the π phase shift of the teleported state in some coincidence patterns. Again, although this can be compensated by the feed-forward phase-flip operation, in the following experiment, we read the measurement basis state as one subjected to a proper phase-flip unitary, instead of the feed-forward operation, for simplicity.

In the experiment, we first performed quantum state tomography45 of the photon pair in modes c5 and γ1 prepared by the SPDC. The photons were detected at D3 and D11. We reconstructed the density operator \(\rho _{c_5\gamma _1}\) of the two-photon state by using the iterative maximum likelihood method46. The observed fidelity \(\left\langle {\phi ^ + } \right|\rho _{c_5\gamma _1}\left| {\phi ^ + } \right\rangle\) was 0.95(02), where digits in parentheses represent the standard deviation, for example, 0.95 ± 0.02. Matrix representation of \(\rho _{c_5\gamma _1}\) and the observed coincidence counts are shown in Fig. 3. The count rate was about 2500 Hz.

Fig. 3
figure 3

Estimated quantum states expected to be a Bell state. The upper graphs show the real and imaginary part of the reconstructed density matrix \(\rho _{c_5\gamma _1}\). The lower graph shows the measured coincidence counts in 16 basis states necessary for the reconstruction of the density matrix

Next we performed the quantum state tomography of the three-photon state in modes c5, c2 and c1 prepared by using \(\rho _{c_5\gamma _1}\) and the photon in mode 2 heralded by the detection of photon α by detector D22. For this measurement, we did not rotate the HWPs just before and after the PBSs at the fusion gates. The tomography was performed by using detectors D11, D21 and D3. The reconstructed density operator \(\rho _{c_5c_2c_1}\) is shown in Fig. 4. The observed fidelity \(F_{{\mathrm{GHZ}}} = \left\langle {{\mathrm{GHZ}}} \right|\rho _{c_5c_2c_1}\left| {{\mathrm{GHZ}}} \right\rangle\) was 0.84(05) with a count rate of about 0.06 Hz. With the witness operator defined by \({\cal W} = 3I{\mathrm{/}}4 - \left| {{\mathrm{GHZ}}} \right\rangle \left\langle {{\mathrm{GHZ}}} \right|\)47, \({\mathrm{Tr}}( {\rho _{c_5c_2c_1}{\cal W}} ) = - 0.09(05) < 0\) was confirmed, which clearly shows that the obtained state was in the genuine GHZ class.

Fig. 4
figure 4

Estimated quantum states expected to be a tripartite GHZ state. The upper graphs show the real and imaginary part of the reconstructed density matrix \(\rho _{c_5c_2c_1}\). The lower graph shows the measured coincidence counts in 64 basis states necessary for the reconstruction of the density matrix

Finally, we demonstrated the TRA Bell measurement. We prepared four states |H〉, |V〉, \(\left| D \right\rangle = \left( {\left| H \right\rangle + \left| V \right\rangle } \right){\mathrm{/}}\sqrt 2\) and \(\left| L \right\rangle = \left( {\left| H \right\rangle - i\left| V \right\rangle {\mathrm{/}}\sqrt 2 } \right)\) for |ψ〉 in mode α. We performed the quantum state tomography of the teleported state in mode c5 and reconstructed its density operator for the four input states conditioned by the successful events of the two fusion gates. We list the experimental results in Table 1. From Table 1, we see that the teleportation succeeded with high fidelities for the four input states and for any detection events. Although the fidelities relatively deviate from each other due to the statistical fluctuations caused by the low-count events, we can confirm that the teleportation succeeded with high fidelities for most of the four input states and for any detection events.

Table 1 Fidelities of the output states to the ideal states and the process fidelities to the ideal teleportation process

By using the above observed counts, we reconstructed the process matrices χ of the teleportation channels from input photon α to output photon c5 by the technique of the process tomography48. The process matrix is calculated by the input–output relation \(\rho _{{\mathrm{out}}} = \mathop {\sum}\nolimits_{m,n = 0}^3 {\kern 1pt} \sigma _m\rho _{{\mathrm{in}}}\sigma _n\chi _{mn}\), where ρin (ρout), σi and σ0 represent the input (output) density matrix, the Pauli matrices and the identical matrix, respectively. The ideal process matrix χideal of the teleportation has only one non-zero element \(\chi _{{\mathrm{00}}}^{{\mathrm{ideal}}} = 1\). The result of the reconstruction is shown in Fig. 5. The obtained process fidelity \(F_{\mathrm{p}} \equiv {\mathrm{Tr}}\left( {\chi \chi ^{{\mathrm{ideal}}}} \right)\) is given in Table 1. From these results, we conclude that our scheme works as quantum teleportation with two standard deviations apart from the classical limit 0.5 of the process fidelity49, irrespectively of whether Alice’s signal photon α passes through either α1 or α2. The degradation of the process fidelity is mainly caused by the mode mismatch between relevant photons. Especially, it seems that our complex interferometer with GHZ state generation and type-II fusion gates further increases the mode mismatch due to the misalignments. For example, the visibility of 0.82 for two-photon interference at GHZ state generation is relatively lower than typical value 0.90 obtained in a simpler experimental setup50. Integrated photonic circuits and indistinguishable photon sources, which have been actively studied recently25,26,27,28,29,30,51, could give a solution to this issue in the near future.

Fig. 5
figure 5

The reconstructed process matrices. From the left, the matrices are estimated in the cases of the coincidence detections among D21 and D22 and D11, D21 and D22 and D12, D21 and D11 and D12, and D22 and D11 and D12 from the left. Upper and lower graphs show the real and imaginary part of the process matrixes. All process matrices have a large element corresponds to the identity operation, showing high fidelities of the performed quantum teleportation, as listed in Table 1

Discussion

We have proposed an all-photonic TRA Bell measurement and experimentally confirmed the working principle of the adaptive Bell measurement necessitated by all-photonic intercity QKD and all-photonic quantum repeaters. Although our scheme is designed mainly to experimentally demonstrate this proof-of-principle experiment, one might be interested in the potential of our current scheme. Here, we discuss this.

To check the potential of our protocol, among various types of error and imperfection, we consider the effect of non-unit quantum efficiency \(1 - \epsilon _0\) of photon-number-resolving detectors as dominant21,52 and inevitable noise for our protocol. Assuming the use of these imperfect detectors, we plot the asymptotic final secret key rate \(G: = {\mathrm{max}}_lG_l\) of our protocol in Fig. 6, where Gl represents average secret bits per the number l of multiplexing (see the derivation in Supplementary Note 2 and optimal choices of l in Supplementary Table 1 for several cases). From the figure, we can confirm that our protocol has a scaling of ηL/2 in the ideal case of \(\epsilon _0 = 0\) as the theory suggests. This is good in the sense that our protocol has no scaling gap with the private capacity14,15,16 (the upper dashed curve in the figure) for the optical network of Alice, Bob and the middle node C—that is, the ultimate performance which can be achieved when Alice, Bob and the node C are allowed to use ideal universal quantum computers freely. However, the figure also suggests that the performance is very sensitive to the quantum efficiency. This is because, in the case of \(\epsilon _0 \hskip 2pt > \hskip 2pt 0\), even if a type-II fusion gate at the node C finds the arrival of a single photon, there might be the case where the found single photon has come from Alice or Bob, rather than the locally prepared 2l-partite GHZ state, leading to the phase error of the final GHZ state of Alice and Bob. In short, in principle, our protocol could achieve almost best performance allowed by quantum mechanics, but, in practice, it necessitates very high quantum efficiency.

Fig. 6
figure 6

Performance of our protocol. We assume photon-number-resolving detectors with quantum efficiency \(1 - \epsilon _0\). We assume Latt = 22 km. Solid curves represent the asymptotic final secret key rate G (per pulse) for \(\epsilon _0\) = 0, 10−5, 10−4, 10,−3, 10−2, 10−1 from the above in order, while the upper and lower dashed curves represent the private capacities of the optical network14,15,16 of Alice, Bob and the middle node C and of point-to-point communication12 between Alice and Bob, respectively. Solid curves with dots are obtained by fitting a smaller number of dots, compared with other curves. From this figure, we can confirm that our protocol has a scaling of ηL/2 in the ideal case of \(\epsilon _0 = 0\), with no scaling gap with the private capacity. We also see that our protocol is quite sensitive to local loss and requires very high detection efficiency. However, as explained in the main text, our protocol could be further improved via loss-tolerant encoding

Note that our protocol can be combined with loss-tolerant encoding. Indeed, even if a good photon detector with high quantum efficiency is unavailable, our ‘delayed preparation’ idea is still important to perform the time-reversed adaptive Bell measurement, with far fewer photons than the original all-photonic quantum repeater protocol21, via loss-tolerant encoding. In particular, even if the type-II fusion gates do not work properly to disentangle unnecessary qubits of the 2l-partite GHZ state due to \(\epsilon _0 \hskip 2pt > \hskip 2pt 0\), the best scaling of ηL/2 can still be obtained by modifying our protocol such that it uses an encoded complete-like cluster state \(\left| {\bar G_{\mathrm{c}}^l} \right\rangle\) appearing in the original protocol21, rather than the 2l-partite GHZ state. This is because, in this case, if necessary, the first-leaf qubits of the state \(\left| {\bar G_{\mathrm{c}}^l} \right\rangle\)—associated with qubits in the 2l-partite GHZ state conceptually—are encoded to be able to be disentangled faithfully and almost deterministically even if photons receive not only loss corresponding to the effect of \(\epsilon _0 \hskip 2pt > \hskip 2pt 0\) but also depolarisation errors21. Nevertheless, the required number of photons to compose the first-leaf qubits here is far fewer than the original protocol. This is because our delayed preparation merely requires the first-leaf qubits to be robust against only local loss and only local depolarisation errors, rather than those occurring in their long travel to the adjacent repeater nodes, in contrast to the original protocol21. Therefore, even in the case of \(\epsilon _0 \hskip 2pt > \hskip 2pt 0\), our delayed preparation idea enables our protocol to be modified so as to achieve the best scaling of ηL/2.

As have been shown here, depending on the efficiency of photon detectors and the size of the multipartite entangled states that one can prepare at node C, our scheme will gradually expand the achievable distance of the QKD up to 800 km, like all-photonic intercity QKD38. Subsequently, TRA Bell measurement with matured loss-tolerant encoding53,54 and a good single/entangled photon source or a cluster-state machine gun51,55,56 contributes the realisation of all-photonic quantum repeaters or internet. The concept of TRA Bell measurement can also be applied to matter systems such as trapped ions57,58 and superconducting qubits59 in order to achieve a distributed quantum information processing architecture, including quantum repeaters.