# Spooky action at a global distance: analysis of space-based entanglement distribution for the quantum internet

## Abstract

Recent experimental breakthroughs in satellite quantum communications have opened up the possibility of creating a global quantum internet using satellite links. This approach appears to be particularly viable in the near term, due to the lower attenuation of optical signals from satellite to ground, and due to the currently short coherence times of quantum memories. The latter prevents ground-based entanglement distribution using atmospheric or optical-fiber links at high rates over long distances. In this work, we propose a global-scale quantum internet consisting of a constellation of orbiting satellites that provides a continuous, on-demand entanglement distribution service to ground stations. The satellites can also function as untrusted nodes for the purpose of long-distance quantum-key distribution. We develop a technique for determining optimal satellite configurations with continuous coverage that balances both the total number of satellites and entanglement-distribution rates. Using this technique, we determine various optimal satellite configurations for a polar-orbit constellation, and we analyze the resulting satellite-to-ground loss and achievable entanglement-distribution rates for multiple ground station configurations. We also provide a comparison between these entanglement-distribution rates and the rates of ground-based quantum repeater schemes. Overall, our work provides the theoretical tools and the experimental guidance needed to make a satellite-based global quantum internet a reality.

## Introduction

One of the most remarkable applications of quantum mechanics is the ability to perform secure communication via quantum-key distribution (QKD)1,2,3,4. While current global communication systems rely on computational security and are breakable with a quantum computer5,6,7, QKD offers, in principle, unconditional (information-theoretic) security even against adversaries with a quantum computer. With several metropolitan-scale QKD systems already in place8,9,10,11,12,13,14,15, and with the development of quantum computers proceeding at a steady pace16,17,18, the time is right to begin transitioning to a global quantum communications network before full-scale quantum computers render current communication systems defenseless19,20,21. In addition to QKD, a global quantum communications network, or quantum internet22,23,24,25,26, would allow for the execution of other quantum-information-processing tasks, such as quantum teleportation27,28, quantum clock synchronization29,30,31, distributed quantum computation32, and distributed quantum metrology and sensing33,34,35.

Building the quantum internet is a major experimental challenge. All of the aforementioned tasks make use of shared entanglement between distant locations on the earth, which is typically distributed using single-photonic qubits sent through either the atmosphere or optical fibers. These schemes require reliable single-photon sources, quantum memories with high coherence times, and quantum gate operations with low error. It is well known that optical signals transmitted through either the atmosphere or optical fibers undergo an exponential decrease in the transmission success probability with distance36,37. Quantum repeaters38,39,40 have been proposed to overcome this exponential loss by dividing the transmission line into smaller segments along which errors and loss can be corrected using entanglement swapping27,41 and entanglement purification42,43,44. Several theoretical proposals for quantum repeater schemes have been made (see refs 40,45,46 and references therein); however, many of these proposals have resource requirements that are currently unattainable. Furthermore, experimental demonstrations performed so far have been limited47,48,49 and do not scale to the distances needed to realize a global-scale quantum internet.

Satellites have been recognized as one of the best methods for achieving global-scale quantum communication with current or near-term resources23,50,51,52,53,54. Using satellites is advantageous due to the fact that the majority of the optical path traversed by an entangled photon pair is in free space, resulting in lower loss compared to ground-based entanglement distribution over atmospheric or fiber-optic links. Satellites can also be used to implement long-distance QKD with untrusted nodes, which is missing from most current implementations of long-distance QKD due to the lack of a quantum repeater. A satellite-based approach also allows for the possibility to use quantum strategies for tasks such as establishing a robust and secure international time scale via a quantum network of clocks55, extending the baseline of telescopes for improved astronomical imaging56,57,58, and exploring fundamental physics59,60.

Several proposals for satellite-based quantum networks have been made that use satellite-to-ground transmission, ground-to-satellite transmission, or both50,53,54,61,62,63,64,65,66,67,68,69. Recent experiments65,70,71,72,73,74,75,76 (see also ref. 77 for a review) between a handful of nodes opens up the possibility of building a global-scale quantum internet using satellites. As shown in Fig. 1, this means having a constellation of orbiting satellites that transmit either bipartite or multipartite entanglement to ground stations. These ground stations can act as hubs that then distribute entanglement to neighboring ground stations via short ground-based links. In order to successfully implement such a global-scale satellite-based quantum internet, many factors must be taken into account, such as economics, current technology, resource availability, and performance requirements. Ideally, the satellite network should have continuous global coverage and provide entanglement on demand at a reasonably high rate between any two distant points on earth. Given this performance requirement, important questions related to economics and resources arise, such as: How many satellites are needed for continuous global coverage? At what altitude should the satellites be placed? What entanglement-distribution rates are possible between any points on earth, and how do these rates compare to those that can be achieved using ground-based quantum repeater setups?

In this work, we address these questions by analyzing a global-scale quantum internet architecture in which satellites arranged in a constellation of polar orbits (see Fig. 2) act as entanglement sources that distribute entangled photon pairs to ground stations. The nearest-neighbor entangled links can then be extended via entanglement swapping to obtain shared entanglement over longer distances. We start by determining the required number of satellites for such a network to have continuous global coverage. Since satellites are a costly resource, continuous global coverage should be achieved with as few satellites as possible. To that end, our first contribution is to define a figure of merit that allows us to investigate the trade-off between the number of satellites, their altitude, the average loss over a 24-h period, and the average entanglement-distribution rates. By running simulations in order to optimize our figure of merit, we obtain one of our main results, which is the optimal number of satellites needed for continuous global coverage, as well as the optimal altitude at which the satellites should be placed such that the average loss is below a certain threshold. We then compare the resulting entanglement-distribution rates to those obtained via a ground-based entanglement distribution scheme assisted by quantum repeaters. This leads to another key result of our work, which is that the satellite-based scheme (without quantum repeaters) can outperform ground-based quantum repeater schemes in certain cases. We also consider entanglement distribution to major global cities over intercontinental distances. The key result here is that, with a constellation of 400 satellites, entanglement distribution at a reasonably high rate is not possible beyond approximately 7500 km.

We remark that our approach is similar to the approach taken in ref. 64, in which ground stations are placed only on the equator and there is a single ring of satellites in an equatorial orbit around the earth. Our work goes beyond this by considering a genuine network scenario in which multiple ground stations are placed arbitrarily on the earth and there is a constellation of satellites in polar rather than equatorial orbits, as shown in Fig. 2. Furthermore, while prior work has considered satellite constellations for entanglement distribution69,78, to our knowledge, the type of dynamic quantum network simulation with satellite constellations that we consider, along with optimization over different constellation configurations, has not been previously studied.

We expect the results of this work to serve as a guide for building a global-scale quantum internet, both in terms of the number of satellites needed as well as the expected performance of the network. In particular, our results comparing satellite-based entanglement distribution to ground-based repeater-assisted entanglement distribution suggest that, at least in the near term, satellites are indeed the most viable approach to obtaining a global-scale quantum internet.

## Results

### Network architecture

Our proposed satellite network architecture is illustrated in Fig. 2. We consider NR equally spaced rings of satellites in polar orbits. We allow for NS equally spaced satellites in each ring, so that there are NRNS satellites in total, all of which are at the same altitude h. This type of satellite constellation falls into the general class of Walker star constellations79, and we consider it mainly for its simplicity, but also because this constellation is similar to the Iridium communications-satellite constellation80,81. Prior works have examined various other types of satellite constellations for the purpose of continuous global coverage79,82,83,84. The recent Starlink constellation85 is also being used to provide a global satellite-based internet service. Investigations of these other satellite constellation types, and comparisons between them in the context of a global quantum internet, is an interesting direction for future work.

The satellites act as source stations that transmit pairs of entangled photons to line-of-sight ground stations for the purpose of establishing elementary entanglement links. The ground stations can act as quantum repeaters in this scheme—performing entanglement purification and entanglement swapping once the elementary links have been established. In this way, we execute long-distance entanglement distribution between ground stations. Note that we could alternatively use the satellites as quantum repeaters86,87, which would require uplinks. It has been shown in, e.g., ref. 63, that uplinks are more lossy and lead to lower key rates for QKD. For this reason, we consider downlinks only. The photon sources on the satellites produce polarization-entangled photon pairs. State-of-the-art sources of entangled photons are capable of producing polarization-entangled photons on a chip with a fidelity up to 0.9788,89,90,91.

### Overview of simulations

We obtain our results by running several entanglement distribution simulations using the satellite network architecture illustrated in Fig. 2. We consider as our baseline requirement that a satellite network should provide continuous coverage to two ground stations located on the equator. We thus start by running a 24-h simulation with two ground stations at the equator separated by distances d between 100 and 5000 km, and satellite configurations ranging from 20 to 400 satellites at altitudes between 500 and 10000 km. We choose ground distances starting from 100 km because 100 km is roughly the longest distance at which ground-based entanglement distribution can be successfully performed at a reasonable rate without quantum repeaters; see, for e.g., refs 92,93,94,95. Our choice of satellite altitudes encompasses both low earth orbits and medium earth orbits, which are the orbits currently being used for most satellite communications systems81,85.

A satellite configuration is given by the number NR of satellite rings, the number NS of satellites per ring, and the altitude h of the satellites. Our requirement of continuous coverage means that both ground stations must be simultaneously in view of a satellite at all times. We also impose an additional requirement that, even when in view of both ground stations, the total transmission loss between a satellite and the ground station pair should not exceed 90 dB, in order to keep ebit rates above 1 Hz. (See the Methods section for further simulation details.) Note that, based on the satellite constellations that we consider here, two ground stations at the equator is the worst-case scenario, in the sense that two ground stations at higher or lower latitudes will always have less satellite-to-ground loss on average (we show this in Fig. 5 below).

For all of our simulations, we take into account attenuation due to the atmosphere; see the “Methods” section for a description of our loss model. However, we assume clear skies, hence no rain, haze, or cloud coverage in any area. Including these extra elements would introduce extra attenuation factors (see, for e.g., section 2.1.1.4 of ref. 37and refs 96,97), which would increase the overall satellite-to-ground transmission loss (see refs 78,98 for an analysis of satellite-to-ground quantum key distribution in a localized area that incorporates local weather conditions). We also point out that, especially in the daytime, background photons (e.g., from the sun) can reduce the fidelity of the distributed entangled pairs, because the receiver will collect those background photons in addition to the signal photons from the entanglement source. This source of background photons is perhaps the most difficult obstacle to continuous global coverage. Timing information, as well as information about the spectral and spatial profile of the signal, can help reduce the noise via filtering, but only to a certain extent (see, for e.g., refs 70,99). Furthermore, because the probability to transmit single photons from satellite to ground is quite low, the communicating parties must ensure that the probability to collect background photons is even lower in order to ensure a high signal-to-noise ratio (SNR), and thus a high fidelity for the received quantum state. In the Methods section we show how the fidelity of the transmitted states is affected by spurious background photons.

### Optimal network configurations for global coverage

Given two ground stations separated by a distance d and situated at the equator, along with a particular satellite constellation defined by (NR, NS, h), as described above, how do we evaluate the performance of the given satellite constellation? Since satellites are currently an expensive resource, we would like to have as few satellites as possible in the network while still maintaining complete and continuous coverage. We could therefore take as our figure of merit the total number of satellites in the network. Specifically, given an altitude h of the satellites and distance d between the two ground stations, we define Nopt(h, d) to be the minimum total number of satellites needed to have continuous 24-h coverage for the two ground stations (see the Methods section for details). We could then minimize Nopt(h, d) with respect to altitudes. On the other hand, we also want high entanglement distribution rates. We let $$\overline{R}({N}_{{\rm{R}}},{N}_{{\rm{S}}},h,d)$$ denote the average entanglement-distribution rate over 24 h for the satellite configuration given by (NR, NS, h) and two ground stations at the equator separated by a distance d (see the Methods section for the formal definition). The rate is calculated in a simple scenario without multimode transmission from the satellites and without multimode quantum memories at the ground stations. We could then take the quantity

$${\overline{R}}^{\text{opt}}(h,d):=\mathop{\max }\limits_{{N}_{{\rm{R}}},{N}_{{\rm{S}}}}\overline{R}({N}_{{\rm{R}}},{N}_{{\rm{S}}},h,d)$$
(1)

as our figure or merit, which is the average rate (in ebits/s) over a 24-h period for a given altitude h and a given distance d, where the optimization is over satellite configurations with a fixed h such that there is continuous coverage for 24 h and the loss at any time is less than 90 dB (see the Methods section for details). Now, as one might expect, with fewer satellites the average loss would increase, thus decreasing entanglement-distribution rates, while increasing the number of satellites would decrease the loss, hence increasing the average entanglement-distribution rate. In order to balance our two competing goals—minimizing the total number of satellites and also maximizing the average rate—we take as our figure of merit the ratio of the average entanglement-distribution rate to the total number of satellites:

$$c({N}_{{\rm{R}}},{N}_{{\rm{S}}},h,d):=\frac{\overline{R}({N}_{{\rm{R}}},{N}_{{\rm{S}}},h,d)}{{N}_{{\rm{R}}}{N}_{{\rm{S}}}},$$
(2)

which has units of ebits/s per satellite. Then, the goal is to take the satellite configuration that maximizes this figure of merit. In other words, our goal is to find

$$({N}_{{\rm{R}}}^{\star }(d),{N}_{{\rm{S}}}^{\star }(d),{h}^{\star }(d)):=\mathop{{\mathrm{arg}}\, {\mathrm{max}}}\limits_{{N_R},{N_S},h}c({N}_{{\rm{R}}},{N}_{{\rm{S}}},h,d)$$
(3)

for any given distance d between the two ground stations, where the optimization is constrained such that there is continuous coverage to the two ground stations for 24 h and the transmission loss at any given time is less than 90 dB (see the “Methods” section for details). We suppress the dependence of the functions $${N}_{{\rm{R}}}^{\star }$$, $${N}_{{\rm{S}}}^{\star }$$, and h on the distance d when it is understood from the context. We let

$$C(h,d):=\mathop{\max }\limits_{{N}_{{\rm{R}}},{N}_{{\rm{S}}}}c({N}_{{\rm{R}}},{N}_{{\rm{S}}},h,d)$$
(4)

be the figure of merit c optimized over NR and NS, with the constraint that both ground stations have continuous coverage over 24 h and that the transmission loss at any time is less than 90 dB.

The results of our simulations are shown in Fig. 3. The complete set of results for all ground distances and satellite configurations considered is contained in the data files accompanying the paper. We first consider the quantity Nopt(h, d) as a function of altitude h for fixed ground-station separations d (left panel of Fig. 3). In terms of the satellite configurations, we find that at higher altitudes more satellites per ring are required in general, while at lower altitudes generally more rings are required. In terms of the total number of satellites, we find that as the altitude increases the total number of satellites decreases. Interestingly, however, as we continue to increase the altitude we find that there are altitudes (between 5000 and 6000 km) at which the total number of satellites reaches a minimum. Beyond this range of altitudes, the required number of satellites increases. The presence of this minimum point gives us an indication of the altitudes at which satellites should be placed in order to minimize the total number of satellites. However, for these altitudes, the average entanglement-distribution rates are generally quite low, on the order of 10 ebits/s.

Next, we consider the figure of merit C(h, d) defined in eq. (4). We plot this quantity for various values of the altitude h and distance d in the central panel of Fig. 3. In the right panel of Fig. 3, we plot the corresponding average entanglement-distribution rate over 24 h. For all distances d, except for d = 500 km, we find that there is an altitude h at which C(h, d) is maximal. These optimal altitudes, along with the values of NR and NS achieving the value of C(h, d) and the corresponding average loss and average entanglement-distribution rate over 24 h, are shown in Table 1. Given a desired distance between the ground stations, these optimal parameters can be used to decide on the number of satellites to put in the network and the altitude at which to put them so that there is continuous coverage, which then leads to particular values for the average loss and the average entanglement-distribution rate. Conversely, given a particular performance requirement (in terms of the entanglement-distribution rate), we can use our results to determine both the required satellite configuration and the required distance between the ground stations in order to achieve the desired rate. For example, using the plot on the right panel of Fig. 3, in order to achieve a rate greater than 103 ebits/s on average in 24 h, the satellite constellation altitude should be less than 2000 km (among the constellations considered), and the distance d between the ground stations has to be roughly less than 1500 km.

In Fig. 4, we plot the entanglement-distribution rate to two ground stations at the equator separated by a distance d = 1000 km with a satellite constellation given by NR = 9 satellite rings, NS = 10 satellites per ring, and altitude h = 1500 km. We also plot the distances of the ground stations to a satellite. We find that the rate exhibits a distinct oscillatory behavior with periodic bumps. In each bump, the rate increases as a satellite gets closer to the ground stations and decreases as the satellite passes by. All of the bumps in the rate have slightly different duration and slightly different peaks due to the fact that, at each time, the ground station pair is generally in view of multiple satellite, and we pick the satellite with the lowest transmission loss to the ground station pair (see the Methods section for further details). In general, therefore, each bump corresponds to a different satellite distributing entanglement to the two ground stations.

Let us now consider optimal entanglement-distribution rates to the two ground stations, i.e., let us consider the quantity $${\overline{R}}^{\text{opt}}(h,d)$$ defined in eq. (1). The results are shown in the top panel of Fig. 5. We assume that the satellites transmit entangled photon pairs at a rate of Rsource = 109 ebits/s100. Unsurprisingly, for every pair (h, d) of altitudes h and distances d, the quantity $${\overline{R}}^{\text{opt}}(h,d)$$ is attained by the satellite configuration that we considered that has the highest number of satellites, namely NR = 20 rings and NS = 20 satellites per ring. However, despite the sharp increase in the number of satellites, the rates are not much higher than those in the right panel of Fig. 3, which are obtained by optimizing our main figure of merit C(h, d). The highest rate among all distances is around 4.6 × 104 ebits/s, which is attained for a distance of 500 km and altitude of 500 km.

In the bottom panel of Fig. 5, we display the results of our entanglement distribution simulations when both ground stations are at a different latitude, with NR = NS = 15. Due to the fact that the satellites follow polar orbits in our network architecture, meaning that they congregate at the poles, the entanglement-distribution rates are higher for latitudes closer to the north and south poles than for the equator. This result also confirms that placing two ground stations at the equator is the worst-case scenario in terms of average loss (and thus average rate).

Before continuing, let us remark that our technique for obtaining optimal satellite configurations for continuous global coverage, via optimization of the quantities defined in eqs. (2) and (4), can be straightforwardly extended to an optimization procedure that consists of more than two ground stations; see the Methods section for details.

### Multiple ground stations

We now present the results of an entanglement distribution simulation consisting of multiple ground stations. We place 42 ground stations in a grid-like arrangement, with horizontal separation (i.e., separation in longitude) of approximately 18° and vertical separation (i.e., separation in latitude) of approximately 18°. We use a satellite constellation of NR = 15 rings and NS = 15 satellites per ring, for a total of 225 satellites. In Fig. 6, we display the average loss for nearest neighbor pairs over a simulation time of 24 h.

In the top plots of Fig. 6, we consider all possible nearest-neighbor pairs in the simulation. As expected, the loss is lowest away from the equator (latitude 0°), because neighboring ground stations are closer to each other away from the equator, due to the curvature of the earth, and because of the nature of our satellite constellation (satellites congregate at the poles). We also find that diagonal nearest-neighbor pairs have higher losses compared to pairs that are horizontally or vertically separated. This can be explained by the fact that diagonally-separated ground stations are farther away from each other than horizontally- or vertically-separated ground-station pairs. Our strategy for assigning a satellite to a ground-station pair (see the Methods section) thus favors pairs that are horizontally or vertically separated. We also find that the maximum loss for a satellite altitude of h = 1000 km is around 90 dB and the minimum loss is around 50 dB. For h = 5000 km, the maximum loss is around 105 dB and the minimum loss is around 75 dB.

In the bottom plots of Fig. 6, we simulate a network such that the satellites can only distribute entanglement to diagonally-separated nearest-neighbor pairs. Now, since we do not allow entanglement distribution between horizontally- and vertically- separated pairs, we find that the maximum average loss decreases and the minimum average loss increases. We still find that ground-station pairs at latitudes farther away from the equator have lower loss.

In the central panels of Fig. 6, we plot average entanglement-distribution rates in a simple scenario without multimode transmission from the satellites and without multimode quantum memories at the ground stations. We assume that the satellites transmit entangled photon pairs at a rate of Rsource = 109 ebits/s100. In the case of entanglement distribution to all nearest-neighbor pairs (top part of the central panel of Fig. 6), the maximum average rate is around 4000 ebits/s, and this occurs for horizontally separated ground stations at latitudes of 54°N and −54°N. For entanglement distribution only to diagonally-separated nearest-neighbor pairs (bottom part of the central panel of Fig. 6), the maximum average rate is around 450 ebits/s. It is possible to compensate for the loss by having multimode signal transmission from the satellites and by including multimode quantum memories at the ground stations, which would increase the average rates.

### Entanglement distribution between major global cities

Although the ultimate goal of a satellite-based quantum internet is to have satellites distribute entanglement between any collection of nodes on the ground, an example of which we considered above, satellite-based quantum communication networks will likely have a hybrid form in the near term. In a hybrid network, the satellites distribute entanglement to major global cities, which act as hubs that then distribute entanglement to smaller nearby cities using ground-based links (see Fig. 1). With this in mind, we now consider entanglement distribution between pairs of major global cities. We run a 24-h simulation with a satellite constellation of 400 satellites, with NR = NS = 20, at altitudes of h = 500, 1000, 2000, 3000, 4000, and 5000 km. We include the following cities in the simulation: Toronto, New York City, London, Singapore, Sydney, Auckland, Rio de Janeiro, Baton Rouge, Mumbai, Johannesburg, Washington DC, Lijiang, Ngari, Delingha, Nanshan, Xinglong, and Houston. The Lijiang-Delingha pair is chosen for comparison to a recent experiment71. The simulation results are shown in Table 2.

From Table 2, we see that at around a distance of 6300 km, which is the distance between Singapore and Sydney, we can only obtain an average loss less than 90 dB for altitudes greater than 2000 km. Similarly, entanglement distribution between London and Mumbai (which are 7200 km apart) at an average loss less than 90 dB is possible only for an altitude greater than 3000 km. These results suggest that, using our constellation of 400 satellites, a distance of around 7500 km is the highest for which entanglement distribution at a loss less than 90 dB can be achieved. Indeed, for Houston and London (which are 7800 km apart), we find that the average loss is greater than 90 dB for all of the satellite altitudes that we consider.

### Comparison to ground-based entanglement distribution

Let us now compare the entanglement-distribution rates obtained with satellites to the rates that can be obtained via ground-based photon transmission through optical fiber with the assistance of quantum repeaters. In particular, we compare the rates in the top panel of Fig. 5 for two ground stations at the equator separated by a distance d between 100 and 2000 km to ground-based repeater chains with endpoints the same distance d apart. For the latter, we suppose that the distance d between the endpoints is split into M elementary links by (M − 1) equally-spaced quantum repeaters. We place a source at the center of each elementary link that transmits entangled photon pairs to the nodes at the ends of the elementary link. We assume that the probability of establishing an elementary link is $$p={{\rm{e}}}^{-\alpha \frac{d}{M}}$$, where $$\alpha =\frac{1}{22\,\text{km}\,}$$101, and we also assume that all repeater nodes are equipped with Nmem quantum memories facing each of its nearest neighbors. Under these conditions, the rate $${R}_{M,{N}_{\text{mem}}}$$ (in ebits/s) of entanglement distribution between the endpoints is

$${R}_{M,{N}_{\text{mem}}}=\frac{c{N}_{\text{mem}}}{2(d/M)}\frac{1}{{W}_{M,{N}_{\text{mem}}}},$$
(5)

where c is the speed of light and

$${W}_{M,{N}_{\text{mem}}}=\mathop{\sum }\limits_{n = 1}^{\infty }{\left(1-{\left(1-{(1-p)}^{n-1}\right)}^{M}\right)}^{{N}_{\text{mem}}}.$$
(6)

(See the Methods section for details.) Note that our assumption that $$p={{\rm{e}}}^{-\alpha \frac{d}{M}}$$ is the best-case scenario in which the sources fire perfect Bell pairs (so that no entanglement purification is required) and the Bell measurements for entanglement swapping are deterministic. Furthermore, the formula in eq. (5) holds in the case that the quantum repeaters have perfect read-write efficiency and have infinite coherence time.

In Fig. 7, we compare the rate in eq. (5) with Nmem = 50 to the rates shown in the top panel of Fig. 5. For an altitude of 500 km, we find that the quantum repeater scheme with M = 50 elementary links outperforms the satellite-based scheme for all distances up to 2000 km. However, for M = 10 and 20 elementary links, we find that there are critical distances beyond which satellites can outperform the ground-based repeater schemes. For example, for an altitude of 500 km, the satellite-based scheme outperforms the M = 20 quantum repeater scheme beyond approximately 600 km and the M = 10 scheme beyond approximately 300 km. For an altitude of 1000 km, the satellite-based scheme outperforms the M = 20 repeater scheme beyond approximately 1200 km. Similarly, for an altitude of 2000 km, the satellite-based scheme outperforms the quantum repeater scheme beyond approximately 900 km. For an altitude of 4000 km, the satellite-based rates are lower than the quantum repeater rates for all values of M considered.

Currently, satellite-based schemes are arguably are more viable, because high-coherence-time quantum memories (which are not widely available) are not required. However, the monetary cost of the satellites, along with other overhead monetary costs (e.g., launch costs) can make implementing a satellite-based entanglement-distribution network challenging. Furthermore, local weather conditions and background photons during the daytime make it difficult to achieve the continuous coverage assumed here, which ultimately results in lower entanglement-distribution rates. On the other hand, ground-based quantum repeater schemes can achieve higher rates than satellite-based schemes, but this occurs only when the number of repeater nodes is quite high, the number of quantum memories per repeater node is high, and the coherence times of the memories is high. In addition, quantum memories currently exist mostly in a laboratory environment and are not at the stage of development that they can be widely deployed in the field, and they certainly do not have high enough coherence times to achieve the rates presented here.

## Discussion

In this paper, we explored the possibility of using satellites for a global-scale quantum communications network. Our network architecture consists of a constellation of satellites in polar orbits around the earth that transmit entangled photon pairs to ground stations (see Fig. 2). By defining a figure of merit that takes into account both the number of satellites as well as satellite-to-ground entanglement-distribution rates, we provided estimates on the number of satellites needed to maintain full 24-h coverage at a high rate based on the maximum value of the figure of merit. Using our figure of merit to decide the number of satellites in the network, we estimated the transmission loss and entanglement-distribution rates that can be achieved for two ground stations placed at various latitudes, for multiple ground stations at various locations in a grid-like arrangement, and for multiple major global cities in a hybrid satellite- and ground-based network in which the cities can act as hubs that receive entanglement from satellites and disperse it to surrounding locations via ground-based links. Finally, we compared the achievable entanglement-distribution rates for two ground stations using satellites to achievable entanglement-distribution rates using ground-based links with quantum repeaters. With a large enough number of repeater nodes, along with a high enough number of high-coherence-time quantum memories at each node, it is possible to obtain entanglement-distribution rates that surpass those obtained with satellites. However, satellite-based schemes operating without quantum repeaters can, in certain cases, outperform quantum repeater schemes, with drawbacks being that a relatively high number of satellites is required and that adverse weather conditions can prevent continuous operations and thus reduce the rate. These drawbacks appear to be less prohibitive in the near term than the major drawback of ground-based, repeater-assisted entanglement distribution, which is that quantum memories with very high coherence times are simply not widely available. Therefore, it appears that a satellite-based scheme will remain the preferred option over ground-based repeater schemes into the near term, especially with the improving miniaturization and increasing fidelity of entanglement sources65,90 and the decreasing cost and miniaturization of satellites51,53,54.

Our analysis of a global, satellite-based quantum internet opens the door to plenty of further study. For example, our simulations can be refined by taking into account local weather conditions. Our optimization procedure can also be extended to include more than two ground stations (see the Methods section). It would also be interesting to compare other types of satellite constellations, much like those studied in refs 83,84. Finally, to have a genuine quantum network requires efficient routing algorithms. It would be interesting to explore entanglement routing in a satellite network along the lines of, e.g., refs 85,102,103 in the classical setting.

In summary, the broad-scope vision is to have a quantum-connected world, similar to today’s internet, where users across the globe can share quantum information for any desirable task. In our view, the backbone of such a network is built on local and global quantum entanglement, in which intercontinentally-separated ground stations located in major cities act as entanglement hubs connecting the local network users of one city to those of another (Fig. 1). Hybrid networks interfacing space-based quantum communication platforms with ground-based quantum repeaters will make this vision a real possibility.

## Methods

### Loss model

In the absence of spurious background photons, the transmission of photons from satellites to ground stations is modeled well by a bosonic pure-loss channel with transmittance ηsg104. For single-photon polarization qubits (with a dual-rail encoding), transmission through the pure-loss channel corresponds to an erasure channel105. That is, given a single-photon polarization density matrix ρ, the evolution of ρ is given as

$$\rho \,\mapsto\, {\eta }_{\text{sg}}\rho +(1-{\eta }_{\text{sg}})|\,{\text{vac}}\,\rangle\! \langle \,{\text{vac}}\,|$$
(7)

where $$|\,{\text{vac}}\,\rangle\! \langle \,{\text{vac}}\,|$$ is the vacuum state. Hence, with probability ηsg, the dual-rail qubit is successfully transmitted and with probability 1 − ηsg the qubit is lost. For the transmission of a pair of single-photon dual-rail qubits, let $${\eta }_{\,\text{sg}\,}^{(1)}$$ and $${\eta }_{\,\text{sg}\,}^{(2)}$$ be the transmittances of the two pure-loss channels. Then, with probability $${\eta }_{\,\text{sg}\,}^{(1)}{\eta }_{\,\text{sg}\,}^{(2)}$$, both qubits are successfully transmitted and with probability $$1-{\eta }_{\,\text{sg}\,}^{(1)}{\eta }_{\,\text{sg}\,}^{(2)}$$ at least one of the qubits is lost101. In the following subsection, we consider photon transmission in the presence of background photons.

The transmittance ηsg generally depends on atmospheric conditions (such as turbulence and weather conditions) and on orbital parameters (such as altitude and zenith angle)96,97,106. In general, we can decompose ηsg as

$${\eta }_{\text{sg}}={\eta }_{\text{fs}}{\eta }_{\text{atm}}$$
(8)

where ηfs is the free-space transmittance and ηatm is the atmospheric transmittance. Free-space loss occurs due to diffraction (i.e., beam broadening) over the channel and due to the use of finite-sized apertures at the receiving end. These effects cause ηfs to scale as the inverse-distance squared in the far-field regime. Atmospheric loss occurs due to absorption and scattering in the atmosphere and scales exponentially with distance as a result of the Beer-Lambert law37,107,108. However, since atmospheric absorption is relevant only in a layer of thickness 10–20 km above the earth’s surface37, free-space diffraction is the main source of loss in space-based quantum communication. In order to characterize the free-space and atmospheric transmittances with simple analytic expressions, we ignore turbulence-induced effects in the lower atmosphere, such as beam profile distortion, beam broadening (prominent for uplink communication37,63), and beam wandering (see, for e.g., ref. 106). Note that turbulence effects can be corrected using classical adaptive optics37. We also ignore the inhomogeneous density profile of the atmosphere, which can lead to path elongation effects at large zenith angles. A comprehensive analysis of loss can be found in refs 106,108.

Consider the lowest-order Gaussian spatial mode for an optical beam traveling a distance L between the sender and receiver, with a circular receiving aperture of radius r. Then, the free-space transmittance ηfs is given by36

$${\eta }_{\text{fs}}(L)=1-\exp \left(-\frac{2{r}^{2}}{w{(L)}^{2}}\right).$$
(9)

where

$$w(L):={w}_{0}\sqrt{1+{\left(\frac{L}{{L}_{{\rm{R}}}}\right)}^{2}}$$
(10)

is the beam waist at a distance L from the focal region (L = 0), $${L}_{{\rm{R}}}:=\pi {w}_{0}^{2}{\lambda }^{-1}$$ is the Rayleigh range, λ is the wavelength of the optical mode, and w0 is the initial beam-waist radius.

We model the atmosphere as a homogeneous absorptive layer of finite thickness in order to characterize ηatm. Uniformity of the atmospheric layer then implies uniform absorption (at a given wavelength), such that ηatm depends only on the optical path traversed through the atmosphere. Under these assumptions, and using the Beer-Lambert law107, for small zenith angles we have that

$${\eta }_{{\rm{atm}}}(L,h)=\left\{\begin{array}{*{20}{l}}{\left({\eta }_{\rm{atm}}^{\rm{zen}}\right)}^{{{\rm{sec}}}\,\zeta}, & {\rm{if}}\,-\frac{\pi }{2}<\zeta <\frac{\pi }{2},\\ 0, & {\rm{if}}\,| \zeta | \ge \frac{\pi }{2},\end{array}\right.$$
(11)

with $${\eta }_{\,\text{atm}}^{\text{zen}\,}$$ the transmittance at zenith (ζ = 0). For $$| \zeta |\, >\,\frac{\pi }{2}$$, we set ηatm = 0, because the satellite is over the horizon and thus out of sight. The zenith angle ζ is given by

$$\cos \zeta =\frac{h}{L}-\frac{1}{2}\frac{{L}^{2}-{h}^{2}}{{R}_{E}L}$$
(12)

for a circular orbit of altitude h, with RE ≈ 6378 km being the earth’s radius.

Note that the model of atmospheric transmittance given by eqs. (11) and (12) is quite accurate for small zenith angles37. However, for space-based quantum communication at or near the horizon (i.e., for ζ = ±π/2), more exact methods relying on the standard atmospheric model must be used106. In practice, it makes sense to set ηatm = 0 at large zenith angles, effectively severing the quantum channel, because the loss will typically be too high for the link to be practically useful.

To summarize, the following parameters characterize the total loss ηsg = ηfsηatm: the initial beam waist w0, the receiving aperture radius r, the wavelength λ of the satellite-to-ground signals, and the atmospheric transmittance $${\eta }_{\,\text{atm}}^{\text{zen}\,}$$ at zenith. See Table 3 for the values that we take for these parameters in our simulations.

Using the values in Table 3, we plot in Fig. 8 (bottom) the total transmittance as a function of the ground distance d between two ground stations with a satellite at the midpoint; see Fig. 8 (top). We observe that for larger ground separations the total transmittance $${\eta }_{\,\text{sg}\,}^{2}$$ is actually larger for a higher altitude than for a lower altitude; for example, beyond approximately d = 1600 km the transmittance for h = 1000 km is larger than for h = 500 km. We also observe that there are altitudes at which the transmittance is maximal. Intuitively, beyond the maximum point, the atmospheric contribution to the loss is less dominant, while below the maximum (i.e., for lower altitudes) the atmosphere is the dominant source of loss. This feature is unique for optical transmission from satellite to ground.

### Noise model

We now consider photon transmission in the presence of background photons. We analyze the scenario in which a source generates an entangled photon pair and distributes the individual photons to two parties, Alice (A) and Bob (B). We allow the distributed photons to mix with spurious photons (noise) from an uncorrelated thermal source, assuming a low thermal background (which can be ensured via stringent filtering). We then determine, in the high loss and low noise regime, the fidelity of the distributed entangled photon pair.

First, consider a tensor product of thermal states for the horizontal and vertical polarization modes:

$${\Theta}^{{\bar{n}}_{{\rm{H}}}}\otimes {\Theta }^{{\bar{n}}_{{\rm{V}}}}=\left(\mathop{\sum }\limits_{n = 0}^{\infty }\left(\frac{{\bar{n}}_{{\rm{H}}}^{n}}{{({\bar{n}}_{{\rm{H}}}+1)}^{n+1}}\right)\left|n\rangle\! \langle n\right|\right) \otimes \left(\mathop{\sum }\limits_{n = 0}^{\infty }\left(\frac{{\bar{n}}_{{\rm{V}}}^{n}}{{({\bar{n}}_{{\rm{V}}}+1)}^{n+1}}\right)\left|n\rangle\! \langle n\right|\right),$$
(13)

where $${\bar{n}}_{k}$$ is the average number of photons in the thermal state for the polarization mode k. We assume this state comes from an incoherent source with no polarization preference (e.g., the sun), such that $${\bar{n}}_{{\rm{H}}}={\bar{n}}_{{\rm{V}}}=:\bar{n}/2$$. Furthermore, we assume some (non-polarization) filtering procedure, which reduces the number of background thermal photons, such that $$\bar{n}\ll 1$$. We then rewrite the above state to first order in the small parameter $$\bar{n}$$:

$$\begin{array}{ll}{\Theta }^{\frac{\bar{n}}{2}}\otimes {\Theta }^{\frac{\bar{n}}{2}}\,\approx \,\left(\left(1-\frac{\bar{n}}{2}\right)\left|0\rangle\! \langle 0\right|+\frac{\bar{n}}{2}\left|1\rangle\! \langle 1\right|\right)\otimes \left(\left(1-\frac{\bar{n}}{2}\right)\left|0\rangle\! \langle 0\right|+\frac{\bar{n}}{2}\left|1\rangle\! \langle 1\right|\right)\\\approx (1-\bar{n})\left|\,\text{vac}\,\rangle\! \langle \,\text{vac}\,\right|+\frac{\bar{n}}{2}\left(\left|H\rangle\! \langle H\right|+\left|V\rangle \!\langle V\right|\right),\end{array}$$
(14)

where $$\left|\,\text{vac}\,\right\rangle =\left|0\right\rangle \otimes \left|0\right\rangle$$, and

$$\left|H\right\rangle :=\left|1\right\rangle \otimes \left|0\right\rangle ,$$
(15)
$$\left|V\right\rangle :=\left|0\right\rangle \otimes \left|1\right\rangle .$$
(16)

We thus define our approximate thermal background state as

$${\widetilde{\Theta }}^{\bar{n}}:=(1-\bar{n})\left|\,{\text{vac}}\,\rangle\! \langle \,{\text{vac}}\,\right|+\frac{\bar{n}}{2}\left(\left|H\rangle\! \langle H\right|+\left|V\rangle\! \langle V\right|\right),$$
(17)

which serves as a good approximation to a low thermal background. The transmission channel from the source to the ground is then approximately

$${{\mathcal{L}}}_{{\eta }_{\text{sg}},\bar{n}}({\rho }_{{A}_{1}{A}_{2}}):={\text{Tr}}_{{E}_{1}{E}_{2}}\left[({U}_{{A}_{1}{E}_{1}}^{{\eta }_{\text{sg}}}\otimes {U}_{{A}_{2}{E}_{2}}^{{\eta }_{\text{sg}}})({\rho }_{{A}_{1}{A}_{2}}\otimes {\widetilde{\Theta }}_{{E}_{1}{E}_{2}}^{\bar{n}}){({U}_{{A}_{1}{E}_{1}}^{{\eta }_{\text{sg}}}\otimes {U}_{{A}_{2}{E}_{2}}^{{\eta }_{\text{sg}}})}^{\dagger }\right],$$
(18)

where $${U}^{{\eta }_{\text{sg}}}$$ is the beamsplitter unitary (see, for e.g., ref. 104), and A1 and A2 refer to the horizontal and vertical polarization modes, respectively, of the dual-rail quantum system being transmitted; similarly for E1 and E2. Note that for $$\bar{n}=0$$, the transformation given by eq. (18) is equal to the transformation in (7). For a source state $${\rho }_{AB}^{S}$$, with AA1A2 and BB1B2, the quantum state shared by Alice and Bob after transmission of the state $${\rho }_{AB}^{S}$$ from the satellite to the ground stations is

$$\left({{\mathcal{L}}}_{{\eta }_{\text{sg}}^{(1)},{\bar{n}}_{1}}\otimes {{\mathcal{L}}}_{{\eta }_{\text{sg}}^{(2)},{\bar{n}}_{2}}\right)\left({\rho }_{AB}^{S}\right).$$
(19)

Let us first assume that we have an ideal two-photon source, which generates one of the four two-photon polarization-entangled Bell states, i.e., a state of the form $${\rho }^{S}={\Phi }^{\pm }:=\left|{\Phi }^{\pm }\right\rangle\!\left\langle {\Phi }^{\pm }\right|$$ or $${\rho }^{S}={\Psi }^{\pm }:=\left|{\Psi }^{\pm }\right\rangle\!\left\langle {\Psi }^{\pm }\right|$$, where

$$\left|{\Phi }^{\pm }\right\rangle :=\frac{1}{\sqrt{2}}(\left|H,H\right\rangle \pm \left|V,V\right\rangle ),$$
(20)
$$\left|{\Psi }^{\pm }\right\rangle :=\frac{1}{\sqrt{2}}(\left|H,V\right\rangle \pm \left|V,H\right\rangle ).$$
(21)

After transmission, we assume post-selection on coincident events, along with high loss and low noise ($${\eta }_{\,\text{sg}\,}^{(1)},{\eta }_{\,\text{sg}\,}^{(2)},\bar{n}\ll 1$$). The post-selection allows one to discard any occurrence in which one site registers a photon and the other does not. Furthermore, under the high-loss and low-noise assumptions, we can discard potential four-photon and three-photon occurrences, as these occur with negligible probability compared to the two-photon events. We thus focus our full attention on the two-photon state corresponding to one photon received at Alice’s site and one photon received at Bob’s site. Mathematically, this (unnormalized) state is given by

$${\Pi }_{AB}\left({{\mathcal{L}}}_{{\eta }_{\text{sg}}^{(1)},{\bar{n}}_{1}}\otimes {{\mathcal{L}}}_{{\eta }_{\text{sg}}^{(2)},{\bar{n}}_{2}}\right)\left({\rho }_{AB}^{S}\right){\Pi }_{AB},$$
(22)

where

$${\Pi }_{AB}:=(|H\rangle\!{\langle H|}_{A}+|V\rangle\! {\langle V|}_{A})\otimes (|H\rangle\!{\langle H|}_{B}+|V\rangle\!{\langle V|}_{B})$$
(23)

is the projection onto the two-photon-coincidence subspace. With $${\rho }_{AB}^{S}={\Phi }_{AB}^{\pm }$$, it is straightforward to show that

$$\begin{array}{ll}&{\Pi }_{AB}\left({{\mathcal{L}}}_{{\eta }_{\text{sg}}^{(1)},{\bar{n}}_{1}}\otimes {{\mathcal{L}}}_{{\eta }_{\text{sg}}^{(2)},{\bar{n}}_{2}}\right)\left({\Phi }_{AB}^{\pm }\right){\Pi }_{AB}\\ &\ =\frac{1}{2}({x}_{1}{x}_{2}+{y}_{1}{y}_{2}\pm {z}_{1}{z}_{2}){\Phi }_{AB}^{+}\\ &\ \ +\frac{1}{2}({x}_{1}{x}_{2}+{y}_{1}{y}_{2}\mp {z}_{1}{z}_{2}){\Phi }_{AB}^{-}\\ &\ \ +\frac{1}{2}({x}_{1}{y}_{2}+{y}_{1}{x}_{2}){\Psi }_{AB}^{+}\\ &\ \ +\frac{1}{2}({x}_{1}{y}_{2}+{y}_{1}{x}_{2}){\Psi }_{AB}^{-},\end{array}$$
(24)

where

$${x}_{1}:=(1-{\bar{n}}_{1}){\eta }_{\,\text{sg}\,}^{(1)}+\frac{{\bar{n}}_{1}}{2}({(1-2{\eta }_{\text{sg}}^{(1)})}^{2}+{({\eta }_{\text{sg}}^{(1)})}^{2}),$$
(25)
$${y}_{1}:=\frac{{\bar{n}}_{1}}{2}{(1-{\eta }_{\text{sg}}^{(1)})}^{2},$$
(26)
$${z}_{1}:=(1-{\bar{n}}_{1}){\eta }_{\,\text{sg}\,}^{(1)}-{\bar{n}}_{1}{\eta }_{\,\text{sg}\,}^{(1)}(1-2{\eta }_{\,\text{sg}\,}^{(1)}),$$
(27)

with analogous definitions for x2, y2, z2. The fidelity of this quantum state conditioned on one photon received by Alice and one photon received by Bob is therefore

$$\begin{array}{lll}\displaystyle {F}_{{\Phi }^{\pm }}\,\,:=\frac{\left\langle {\Phi }^{+}\right|{\Pi}_{AB} ({{\mathcal{L}}}_{{\eta }_{\text{sg}}^{(1)},{\bar{n}}_{1}}\otimes {{\mathcal{L}}}_{{\eta }_{\text{sg}}^{(2)},{\bar{n}}_{2}})({\Phi }_{AB}^{\pm }){\Pi}_{AB} \left|{\Phi }^{+}\right\rangle }{\,\text{Tr}\,[{\Pi}_{AB} ({{\mathcal{L}}}_{{\eta }_{\text{sg}}^{(1)},{\bar{n}}_{1}}\otimes {{\mathcal{L}}}_{{\eta }_{\text{sg}}^{(2)},{\bar{n}}_{2}})({\Phi }_{AB}^{\pm }){\Pi}_{AB} ]}\\ \displaystyle =\frac{\frac{1}{2}({x}_{1}{x}_{2}\,+\,{y}_{1}{y}_{2}\, \pm \, {z}_{1}{z}_{2})}{({x}_{1}\, + \, {y}_{1})({x}_{2}\, + \, {y}_{2})}.\end{array}$$
(28)

Assuming that $${\eta }_{\,\text{sg}\,}^{(1)}={\eta }_{\,\text{sg}\,}^{(2)}={\eta }_{\text{sg}}$$ and $${\bar{n}}_{1}={\bar{n}}_{2}=\bar{n}$$, so that x1 = x2, y1 = y2, and z1 = z2, and under the high-loss and low-noise assumption, for ρS = Φ+ this reduces to

$${F}_{{\Phi }^{+}}\approx \frac{1}{4}\left(1+\frac{3}{{\left(1+\frac{\bar{n}}{{\eta }_{\text{sg}}}\right)}^{2}}\right).$$
(29)

The ratio $$\frac{{\eta }_{\text{sg}}}{\bar{n}}$$ is just the local signal-to-noise ratio (SNR). Thus, assuming a fidelity constraint F F, we obtain the following bound on the SNR needed at each site in order to maintain a fidelity of F during operation:

$$\,\text{SNR}:=\frac{{\eta }_{\text{sg}}}{\bar{n}}\gtrsim \frac{1}{\left(\sqrt{\frac{3}{4{F}^{\star }-1}}-1\right)}\approx \frac{3}{2}{(1-{F}^{\star })}^{-1},$$
(30)

Here, we have assumed that the fidelity lies within some small range close to one (e.g., 0.95 ≤ F ≤ 1) and expanded to first order in 1 − F. As an example, consider F = 0.99. Then, we must have SNR 150 at each site. Given that ηsg ~ 10−3, this implies a constraint on the number of background photons per detection window of $$\bar{n}\,\lesssim \,7\times 1{0}^{-6}$$.

Let us now consider an initially imperfect Bell state generated by a non-ideal entangled photon-pair source. Specifically, we consider the state

$${\rho }^{S}({f}_{0}):={f}_{0}{\Phi }^{+}+\left(\frac{1-{f}_{0}}{3}\right)({\Phi }^{-}+{\Psi }^{+}+{\Psi }^{-}),$$
(31)

where f0 is the initial fidelity. Using the fact that

$$\begin{array}{ll}&{\Pi }_{AB}({{\mathcal{L}}}_{{\eta }_{\text{sg}}^{(1)},{\bar{n}}_{1}}\otimes {{\mathcal{L}}}_{{\eta }_{\text{sg}}^{(2)},{\bar{n}}_{2}})({\Psi }_{AB}^{\pm }){\Pi }_{AB}\\ &\ =\frac{1}{2}({x}_{1}{y}_{2}+{y}_{1}{x}_{2}){\Phi }_{AB}^{+}\\ &\ \ +\frac{1}{2}({x}_{1}{y}_{2}+{y}_{1}{x}_{2}){\Phi }_{AB}^{-}\\ &\ \ +\frac{1}{2}({x}_{1}{x}_{2}+{y}_{1}{y}_{2}\pm {z}_{1}{z}_{2}){\Psi }_{AB}^{+}\\ &\ \ +\frac{1}{2}({x}_{1}{x}_{2}+{y}_{1}{y}_{2}\mp {z}_{1}{z}_{2}){\Psi }_{AB}^{-},\end{array}$$
(32)

in the high-loss low-noise regime, and in the symmetric case $${\eta }_{\,\text{sg}\,}^{(1)}={\eta }_{\,\text{sg}\,}^{(2)}={\eta }_{\text{sg}}$$ and $${\bar{n}}_{1}={\bar{n}}_{2}=\bar{n}$$, we obtain

$$\begin{array}{ll} \displaystyle F({f}_{0})\,\,:=\frac{\left\langle {\Phi }^{+}\right|{\Pi}_{AB} ({{\mathcal{L}}}_{{\eta }_{\text{sg}}^{(1)},{\bar{n}}_{1}}\otimes {{\mathcal{L}}}_{{\eta }_{\text{sg}}^{(2)},{\bar{n}}_{2}})({\rho }_{AB}^{S}({f}_{0})){\Pi}_{AB} \left|{\Phi }^{+}\right\rangle }{\,\text{Tr}\,[{\Pi}_{AB} ({{\mathcal{L}}}_{{\eta }_{\text{sg}}^{(1)},{\bar{n}}_{1}}\otimes {{\mathcal{L}}}_{{\eta }_{\text{sg}}^{(2)},{\bar{n}}_{2}})({\rho }_{AB}^{S}({f}_{0})){\Pi}_{AB}]}\\ \displaystyle \approx \frac{1}{4}\left(1+\frac{4{f}_{0}-1}{{\left(1+\frac{\bar{n}}{{\eta }_{\text{sg}}}\right)}^{2}}\right).\end{array}$$
(33)

Note that 1/4 ≤ F ≤ f0. See Fig. 9 for a plot of this fidelity as a function of the signal-to-noise ratio.

The background photon number $$\bar{n}$$ can be expressed in terms of the photon flux/rate at a receiving site. Let $${\mathcal{R}}$$ be the number of background photons/s detected at a receiving site and ΔT be the coincidence time-window. Then, $$\bar{n}={\mathcal{R}}\Delta T$$. Assuming background photons collected from, e.g., moonlight or sunlight, are the dominant source of noise, we have the following expression for the background photon rate109,110:

$${\mathcal{R}}=\frac{H{\Omega }_{\text{fov}}\pi {r}^{2}\Delta \lambda }{hc/\lambda },$$
(34)

where hc/λ is the photon energy at mean wavelength λ (h is Planck’s constant and c is the speed of light), Δλ is the filter bandwidth, Ωfov is the field of view of a receiving telescope (in steradians, sr) with radius r, and H is the total spectral irradiance in units Wm−2 μm−1 sr−1. In the case of daytime operating conditions, the total spectral irradiance includes direct solar irradiance as well as diffuse sky radiation, with the latter consisting mainly of solar light scattered by atmospheric constituents.

The spectral irradiance is generally a complicated function of atmospheric conditions, the sun/moon sky position relative to the telescope pointing angle, time of day and year, etc. Thus, for simplicity, in what follows we keep H as an open parameter but consider it to fall roughly within a typical range of H [10−5, 25] (in units Wm−2 μm−1 sr−1), associated with clear-sky conditions, with the lower value corresponding to a moonless clear night and the upper value corresponding to clear daytime conditions, when the sun is in near-view of the optical receiver (see, for e.g., refs 109,110).

Using the relation $$\bar{n}={\mathcal{R}}\Delta T$$, with $${\mathcal{R}}$$ given by eq. (34), in Fig. 10 we plot the fidelity in eq. (29) as a function of the spectral irradiance H for several orbital altitudes h and ground-station separation distances d. To make the plot, we consider the situation depicted in Fig. 8, in which the satellite passes over the zenith of two ground stations and is at the midpoint between them. Note that spectral irradiance values on the order of 1 Wm−2 μm−1 sr−1 (and above) correspond to clear daytime conditions61,109,110. Thus, for our chosen filter parameters, we see that entanglement distribution across, e.g., a ground-station separation distance of more than 2000 km, only seems feasible during the night (H 10−2 Wm−2 μm−1 sr−1). We note, however, that these results are quite sensitive to the filtering parameters, owing to the steep slope of the fidelity in its mid-region.

An interesting extension of these results would be to consider a dynamic model, in which one parameterizes the satellite-to-ground transmittance and background photon rate in time. We do such a parameterization for the transmittance in this work; however, parameterizing the background photon rate requires real-time modeling of, e.g., the sun position relative to the satellite orbit, modeling diffuse sky radiation, etc. Work along these lines has already been done for satellite-to-ground quantum key distribution between a satellite and a lone ground station (see, for e.g., ref. 110). A full, dynamical analysis of the fidelity for a noisy, global-scale satellite-to-ground entanglement distribution protocol—utilizing, e.g., the asymmetric noise model derived above—is an interesting direction for future research.

### Simulation details

In order to perform our simulations and to obtain optimal satellite configurations, we used satellite constellations corresponding to the 42 pairs (NR, NS) shown in Table 4, where NR is the number of rings in the constellation and NS is the number of satellites per ring (see Fig. 2).

Let $$\{{{\boldsymbol{r}}}_{i}(t)\in {{\mathbb{R}}}^{3}:1\le i\le {N}_{R}{N}_{S}\}$$ be the positions of the satellites relative to the center of the earth at time t. If the satellites are at an altitude of h, then ri(t)2 = RE + h for all t, where RE is the radius of the earth and 2 denotes the Euclidean norm. Let $${{\boldsymbol{g}}}_{j}(t)\in {{\mathbb{R}}}^{3}$$ be the position of the jth ground station relative to the center of the earth at time t.

The distance between the ith satellite and the jth ground station at time t is given by Li,j(t) = ri(t) − gj(t)2. Then, the satellite-to-ground transmittance between the ith satellite, at altitude h, and the jth ground station is given at time t by

$${\eta }_{\,\text{sg}\,}^{(i,j)}(t;h)={\eta }_{\text{fs}}({L}_{i,j}(t)){\eta }_{\text{atm}}({L}_{i,j}(t),h),$$
(35)

with ηfs(Li,j(t)) given by eq. (9) and ηatm(Li,j(t), h) given by eq. (11). The total transmittance $${\eta }_{\,\text{tot}\,}^{(i,{j}_{1},{j}_{2})}(t;h)$$ at time t corresponding to the ith satellite, at altitude h, transmitting one of a pair of entangled photons to ground station j1 and the other photon to ground station j2, is

$${\eta }_{\,\text{tot}\,}^{(i,{j}_{1},{j}_{2})}(t;h)={\eta }_{\,\text{sg}\,}^{(i,{j}_{1})}(t;h){\eta }_{\,\text{sg}\,}^{(i,{j}_{2})}(t;h).$$
(36)

In order for a satellite to be considered within range of a given ground station pair, we require two conditions to be satisfied: (1) the satellite is visible to both ground stations; and (2) the total loss (given via eq. (36)) is less than 90 dB. If at least one of these two conditions is not satisfied, then the satellite is considered to be not within range of the ground station pair. Any interval of time in which at least one of the conditions is not satisfied is called a “time gap”. We define the function

$${\text{range}}\,(i,{j}_{1},{j}_{2},t):=\left\{\begin{array}{*{20}{l}}1&{\rm{if}}\ {j}_{1}\ {\rm{and}}\ {j}_{2}\ {\rm{visible}}\ {\rm{to}}\ i\ {\rm{and}}\\ &-10{\mathrm{log}}_{10}({\eta }_{\text{tot}}^{(i,{j}_{1},{j}_{2})}(t;h))\,<\,90\ {\rm{dB}}\\ 0&\,{\text{otherwise}}\,,\end{array}\right.$$
(37)

which tells us whether the ground station pair (j1, j2) is within range of the ith satellite, at altitude h, at time t.

When performing our simulations, we find that at some times a satellite is within range of multiple ground station pairs. In other words, it can happen that a particular ground station pair is within range of multiple satellites at the same time. We anticipate that, in the near future, satellites will only have one entanglement source on board, so we impose the requirement that at any given time a satellite can distribute entanglement to only one ground-station pair. This requirement makes it necessary to uniquely assign a satellite to a ground-station pair at all times during the simulation. We assign a satellite to the ground-station pair that has the lowest loss among all ground-station pairs within range of that satellite. This type of assignment strategy means that, depending on the total number of satellites, there are times at which ground-station pairs do not receive any entangled photon pairs even though they are within range of a satellite (perhaps several), simply because the loss would be too high. More sophisticated time-sharing assignment strategies are possible, in which higher loss assignments are taken at certain times for the purpose of distributing entanglement to as many different ground-station pairs as possible. We do not consider such an assignment strategy here (see ref. 98 for work in this direction), except for when there is a ground-station pair that has only one satellite in view, but that satellite is in range of several other ground stations. In this case, we assign that satellite to the “lone” ground-station pair even if the loss is higher than another possible assignment of that satellite. We let st(j1, j2) {1, 2, …, NRNS} denote the satellite assigned to the ground station pair (j1, j2) at time t. For brevity, we write stst(j1, j2) if the two ground stations being considered is clear from the context. If no satellite assignment exists for the pair (j1, j2) at time t, then we set st(j1, j2) = 0.

For two ground stations j1 and j2 separated by a distance d, the average loss over a time T for the satellite configuration given by (NR, NS, h) is

$${\overline{\eta }}_{\text{dB}\,,T}^{({j}_{1},{j}_{2})}({N}_{{\rm{R}}},{N}_{{\rm{S}}},h,d):=-10{\mathrm{log}\,}_{10}\left(\frac{1}{T}\mathop{\sum }\limits_{t = 1}^{T}{\eta }_{\,\text{tot}\,}^{({s}_{t},{j}_{1},{j}_{2})}(t;h)\right).$$
(38)

If no satellite assignment exists for the pair (j1, j2) at time t, then we set $${\eta }_{\,\text{tot}\,}^{({s}_{t},{j}_{1},{j}_{2})}(t;h)=0$$. We write $${\overline{\eta }}_{\text{dB}}({N}_{R},{N}_{S},h,d)$$ when the ground station pair (j1, j2) and the simulation time T are understood from the context.

We also define the average rate over time T for two ground stations j1 and j2 separated by a distance d for the satellite configuration given by (NR, NS, h) as follows:

$${\overline{R}}_{T}^{({j}_{1},{j}_{2})}({N}_{{\rm{R}}},{N}_{{\rm{S}}},h,d):=\frac{1}{T}\mathop{\sum }\limits_{t = 1}^{T}{\overline{P}}^{({s}_{t},{j}_{1},{j}_{2})}(t),$$
(39)

where

$${\overline{P}}^{({s}_{t},{j}_{1},{j}_{2})}(t):={R}_{\,\text{source}}^{{s}_{t}}{\eta }_{\text{tot}\,}^{({s}_{t},{j}_{1},{j}_{2})}(t;h)$$
(40)

is the average number of entangled pairs received by the ground stations j1 and j2 at time t, with $${R}_{\,\text{source}\,}^{{s}_{t}}$$ being the source rate of the satellite st. For the simulations, we estimate $${\overline{P}}^{({s}_{t},{j}_{1},{j}_{2})}(t)$$ in a single shot by taking a sample from the binomial distribution Bin(n, p) with $$n={R}_{\,\text{source}\,}^{{s}_{t}}$$ trials and success probability $$p={\eta }_{\,\text{tot}\,}^{({s}_{t},{j}_{1},{j}_{2})}(t;h)$$ per trial. Throughout this work, we assume that $${R}_{\,\text{source}\,}^{{s}_{t}}=1{0}^{9}$$ ebits/s for all satellites100. We write $$\overline{R}({N}_{{\rm{R}}},{N}_{{\rm{S}}},h,d)$$ when the ground station pair (j1, j2) and the simulation time T are understood from the context.

### Figures of merit

Our figures of merit are based on entanglement distribution to a particular pair (j1, j2) of ground stations. The goal is to determine the optimal satellite configuration such that there are no time gaps in a period of time T for the pair (j1, j2). The first three figures of merit separately optimize the total number of satellites, the average loss over the time T, and the average rate over the time T:

$${N}_{{\text{opt}}\,,{T}}^{({j}_{1},{j}_{2})}(h,d):=\left\{\begin{array}{ll}\,{\text{minimum}}\,&{N}_{{\rm{S}}}{N}_{{\rm{R}}}\\ \,{\text{subject}}\, {\text{to}}\,&\bullet \,{\text{range}}\,({s}_{t},{j}_{1},{j}_{2},t)=1\,\,\forall \,1\le t\le T\\ &\bullet | | {{\boldsymbol{r}}}_{i}(t)| {| }_{2}={R}_{E}+h\,\,\forall \,1\le i\le {N}_{{\rm{R}}}{N}_{{\rm{S}}},\,1\le t\le T\\ &\bullet \ {j}_{1},{j}_{2}\ {\rm{separated}}\ {\rm{by}}\ {\rm{distance}}\ d,\end{array}\right.$$
(41)
$${\overline{\eta }}_{{\text{dB}},{T}}^{{\text{opt}}\,,{({j}_{1},{j}_{2})}}(h,d):=\left\{\begin{array}{ll}\,{\text{minimum}}\,&{\overline{\eta }}_{{\text{dB}}\,,{T}}^{({j}_{1},{j}_{2})}({N}_{{\rm{R}}},{N}_{{\rm{S}}},h,d)\\ \,{\text{subject}}\, {\text{to}}\,&\bullet \,{\text{range}}\,({s}_{t},{j}_{1},{j}_{2},t)=1\,\,\forall \,1\le t\le T\\ &\bullet | | {{\boldsymbol{r}}}_{i}(t)| {| }_{2}={R}_{E}+h\,\,\forall \,1\le i\le {N}_{{\rm{R}}}{N}_{{\rm{S}}},\,1\le t\le T\\ &\bullet \ {j}_{1},{j}_{2}\ {\rm{separated}}\ {\rm{by}}\ {\rm{distance}}\ d,\end{array}\right.$$
(42)
$${\overline{R}}_{T}^{{\text{opt}}\,,({j}_{1},{j}_{2})}(h,d):=\left\{\begin{array}{ll}\,{\text{maximum}}\,&{\overline{R}}_{T}^{({j}_{1},{j}_{2})}({N}_{{\rm{R}}},{N}_{{\rm{S}}},h,d)\\ \,{\text{subject}}\, {\text{to}}\,&\bullet \,{\text{range}}\,({s}_{t},{j}_{1},{j}_{2},t)=1\,\,\forall \,1\le t\le T\\ &\bullet | | {{\boldsymbol{r}}}_{i}(t)| {| }_{2}={R}_{E}+h\,\,\forall \,1\le i\le {N}_{{\rm{R}}}{N}_{{\rm{S}}},\,1\le t\le T\\ &\bullet \ {j}_{1},{j}_{2}\ {\rm{separated}}\ {\rm{by}}\ {\rm{distance}}\ d.\end{array}\right.$$
(43)

In all three cases, we optimize over the pairs (NR, NS) shown in Table 4. We write Nopt(h, d), $${\overline{\eta }}_{\,\text{dB}}^{\text{opt}\,}(h,d)$$, and $${\overline{R}}^{\text{opt}}(h,d)$$ when both the ground station pair (j1, j2) and the simulation time T are understood from the context.

In order to obtain a satellite configuration that balances both the total number of satellites and the average rate, we define the following figure of merit:

$${c}_{T}^{({j}_{1},{j}_{2})}({N}_{{\rm{R}}},{N}_{{\rm{S}}},h,d):=\frac{{\overline{R}}_{T}^{({j}_{1},{j}_{2})}({N}_{{\rm{R}}},{N}_{{\rm{S}}},h,d)}{{N}_{{\rm{R}}}{N}_{{\rm{S}}}},$$
(44)

which has an intuitive interpretation as the average number of ebits/s per satellite in the network. From this, we define

$${C}_{T}^{({j}_{1},{j}_{2})}(h,d):=\left\{\begin{array}{ll}\,{\text{maximum}}\,&{\overline{R}}_{T}^{({j}_{1},{j}_{2})}({N}_{{\rm{R}}},{N}_{{\rm{S}}},h,d)/({N}_{{\rm{R}}}{N}_{{\rm{S}}})\\ \,{\text{subject}}\, {\text{to}}\,&\bullet \,{\text{range}}\,({s}_{t},{j}_{1},{j}_{2},t)=1\,\,\forall \,1\le t\le T\\ &\bullet | | {{\boldsymbol{r}}}_{i}(t)| {| }_{2}={R}_{E}+h\,\,\forall \,1\le i\le {N}_{{\rm{R}}}{N}_{{\rm{S}}},\,1\le t\le T\\ &\bullet \ {j}_{1},{j}_{2}\ {\rm{separated}}\ {\rm{by}}\ {\rm{distance}}\ d,\end{array}\right.$$
(45)

which is simply the figure of merit $${c}_{T}^{({j}_{1},{j}_{2})}({N}_{{\rm{R}}},{N}_{{\rm{S}}},h,d)$$ optimized over the pairs (NR, NS) in Table 4. We write C(h, d) when both the ground station pair (j1, j2) and the simulation time T are understood from the context.

All of the quantities defined above can be defined in an analogous fashion for multiple ground station pairs (instead of just one ground station pair). For example, suppose that we have a set $${\mathcal{V}}$$ of ground stations and a set $${\mathcal{E}}=\{(v,v^{\prime} ,{d}_{v,v^{\prime} }):v,v^{\prime} \in {\mathcal{V}},{d}_{v,v^{\prime} }\in {\mathbb{R}}\}$$ telling us how the ground stations are connected pairwise to each other, with $${d}_{v,v^{\prime} }$$ being the physical distance between ground stations v and $$v^{\prime}$$. (Note that $$({\mathcal{V}},{\mathcal{E}})$$ corresponds to a weighted graph, with $${\mathcal{V}}$$ being the nodes of the graph and $${\mathcal{E}}$$ being the weighed edges.) Then,

$${N}_{\,\text{opt}\,,T}^{{\mathcal{V}}}(h,{\mathcal{E}}):=\left\{\begin{array}{ll}\,\text{minimum}\,&{N}_{{\rm{R}}}{N}_{{\rm{S}}}\\ \,\text{subject to}\,&\bullet \,\text{range}\,({s}_{t},v,v^{\prime} ,t)=1\,\,\forall \,1\le t\le T,\,\,\forall \,v,v^{\prime} \in {\mathcal{V}}\\ &\bullet | | {{\boldsymbol{r}}}_{i}(t)| {| }_{2}={R}_{E}+h\,\,\forall \,1\le i\le {N}_{{\rm{R}}}{N}_{{\rm{S}}},\,1\le t\le T\\ &\bullet \ v,v^{\prime} \ {\rm{separated}}\ {\rm{by}}\ {\rm{distance}}\ {d}_{v,v^{\prime} },{\rm{and}}(v,v^{\prime} ,{d}_{v,v^{\prime} })\in {\mathcal{E}}.\end{array}\right.$$
(46)

Letting

$${\overline{\eta }}_{{\text{dB}}\,,{T}}^{{\mathcal{V}}}({N}_{{\rm{R}}},{N}_{{\rm{S}}},h,{\mathcal{E}}):=-10{\mathrm{log}}_{10}\left(\frac{1}{| {\mathcal{E}}| T} \mathop {\sum}\limits_{(v,v^{\prime} )\in {\mathcal{E}}}\mathop{\sum }\limits_{t = 1}^{T}{\eta }_{\,\text{tot}\,}^{({s}_{t},v,v^{\prime} )}(t;h)\right),$$
(47)
$${\overline{R}}_{T}^{{\mathcal{V}}}({N}_{{\rm{R}}},{N}_{{\rm{S}}},h,{\mathcal{E}}):=\frac{1}{| {\mathcal{E}}| T} \mathop {\sum}\limits_{(v,v^{\prime} )\in {\mathcal{E}}}\mathop{\sum }\limits_{t = 1}^{T}{R}_{\,\text{source}}^{{s}_{t}}{\eta }_{\text{tot}\,}^{({s}_{t},v,v^{\prime} )}(t;h),$$
(48)

we can define the following quantities:

$${\overline{\eta }}_{{\text{dB}},{T}}^{{\text{opt}}\,,{{\mathcal{V}}}}(h,{\mathcal{E}}):=\left\{\begin{array}{ll}\,{\text{minimum}}\,&{\overline{\eta }}_{{\text{dB}}\,,{T}}^{{\mathcal{V}}}({N}_{{\rm{R}}},{N}_{{\rm{S}}},h,{\mathcal{E}})\\ \,{\text{subject}}\, {\text{to}}\,&\bullet \,{\text{range}}\,({s}_{t},v,v^{\prime},t)=1\,\,\forall \,1\le t\le T,\,\,\forall \,v,v^{\prime} \in {\mathcal{V}}\\ &\bullet | | {{\boldsymbol{r}}}_{i}(t)| {| }_{2}={R}_{E}+h\,\,\forall \,1\le i\le {N}_{{\rm{R}}}{N}_{{\rm{S}}},\,1\le t\le T\\ &\bullet \ v,v^{\prime} \ {\rm{separated}}\ {\rm{by}}\ {\rm{distance}}\ \ {d}_{v,v^{\prime} },\ {\rm{and}}\ (v,v^{\prime} ,{d}_{v,v^{\prime} })\in {\mathcal{E}},\end{array}\right.$$
(49)
$${\overline{R}}_{T}^{{\text{opt}}\,,{{\mathcal{V}}}}(h,{\mathcal{E}}):=\left\{\begin{array}{ll}\,{\text{maximum}}\,&{\overline{R}}_{T}^{{\mathcal{V}}}({N}_{{\rm{R}}},{N}_{{\rm{S}}},h,{\mathcal{E}})\\ \,{\text{subject}} \,{\text{to}}\,&\bullet \,{\text{range}}\,({s}_{t},v,v^{\prime} ,t)=1\,\,\forall \,1\le t\le T,\,\,\forall \,v,v^{\prime} \in {\mathcal{V}}\\ &\bullet | | {{\boldsymbol{r}}}_{i}(t)| {| }_{2}={R}_{E}+h\,\,\forall \,1\le i\le {N}_{{\rm{R}}}{N}_{{\rm{S}}},\,1\le t\le T\\ &\bullet \ v,v^{\prime} \ {\rm{separated}}\ {\rm{by}}\ {\rm{distance}}\ \ {d}_{v,v^{\prime} },\ {\rm{and}}\ (v,v^{\prime} ,{d}_{v,v^{\prime} })\in {\mathcal{E}},\end{array}\right.$$
(50)
$${C}_{T}^{{\mathcal{V}}}(h,{\mathcal{E}}):=\left\{\begin{array}{ll}\,{\text{maximum}}\,&{\overline{R}}_{T}^{{\mathcal{V}}}({N}_{{\rm{R}}},{N}_{{\rm{S}}},h,{\mathcal{E}})/({N}_{{\rm{R}}}{N}_{{\rm{S}}})\\ \,{\text{subject}}\, {\text{to}}\,&\bullet \,{\text{range}}\,({s}_{t},v,v^{\prime} ,t)=1\,\,\forall \,1\le t\le T,\,\,\forall \,v,v^{\prime} \in {\mathcal{V}}\\ &\bullet | | {{\boldsymbol{r}}}_{i}(t)| {| }_{2}={R}_{E}+h\,\,\forall \,1\le i\le {N}_{{\rm{R}}}{N}_{{\rm{S}}},\,1\le t\le T\\ &\bullet \ v,v^{\prime} \ {\rm{separated}}\ {\rm{by}}\ {\rm{distance}}\ \ {d}_{v,v^{\prime} },\ {\rm{and}}\ (v,v^{\prime} ,{d}_{v,v^{\prime} })\in {\mathcal{E}}.\end{array}\right.$$
(51)

### Quantum repeater rates

In order to compare the satellite-based entanglement-distribution rates obtained in this work with rates that can be achieved using ground-based quantum repeater schemes, we consider a chain of quantum repeaters of total length d in which there are M elementary links and each repeater “half-node” has Nmem quantum memories; see Fig. 11 for an example. This results in Nmem parallel quantum repeater chains between the end nodes. If we allow entanglement distribution to occur independently for each of the parallel chains, and we assume that the quantum memories have infinite coherence time, then the expected number of time steps until one end-to-end pair is obtained, i.e., the expected waiting time, has been shown in [ref. 111, Appendix B] to be

$${W}_{N,{N}_{\text{mem}}}=\mathop{\sum }\limits_{n = 1}^{\infty }{\left(1-{\left(1-{(1-p)}^{n-1}\right)}^{M}\right)}^{{N}_{\text{mem}}}.$$
(52)

Now, the duration of each time step, i.e., the repetition rate, is limited by the classical communication time between neighboring nodes for heralding of the signals. (This is the best-case scenario. We do not consider other factors that affect the repetition rate, such as the memory read-write time.) The classical communication time is given by $$\frac{2(d/M)}{c}$$, resulting in a repetition rate of $$\frac{c}{2(d/M)}$$ for each of the Nmem parallel links of an elementary link. The total repetition rate is therefore $$\frac{c{N}_{\text{mem}}}{2(d/M)}$$. The formula in eq. (5) for the rate then follows.

A higher rate than the one in eq. (5) can be achieved by allowing for spatial multiplexing, i.e., by allowing cross connections between the different parallel chains112. An analytic expression for the waiting time in this scenario, in the case of M = 2 elementary links, has been derived in ref. 113. A general formula for the waiting time for an arbitrary number M of elementary links appears to be unknown.

## Data availability

The datasets generated during the current study are available in the arXiv repository, https://arxiv.org/abs/1912.06678.

## Code availability

All code used to obtain the data for the current study are available in the arXiv repository, https://arxiv.org/abs/1912.06678.

## References

1. 1.

Bennett, C. H. & Brassard, G. Quantum cryptography: Public key distribution and coin tossing. In International Conference on Computer System and Signal Processing 175–179 (IEEE, 1984).

2. 2.

Ekert, A. K. Quantum cryptography based on Bell’s theorem. Phys. Rev. Lett. 67, 661–663 (1991).

3. 3.

Gisin, N., Ribordy, G., Tittel, W. & Zbinden, H. Quantum cryptography. Rev. Modern Phys. 74, 145–195 (2002).

4. 4.

Scarani, V. et al. The security of practical quantum key distribution. Rev. Modern Phys. 81, 1301–1350 (2009).

5. 5.

Shor, P. Algorithms for quantum computation: discrete logarithms and factoring. In Proc. 35th Annual Symposium on Foundations of Computer Science 124–134 (IEEE, 1994).

6. 6.

Shor, P. Polynomial-time algorithms for prime factorization and discrete logarithms on a quantum computer. SIAM J. Comput. 26, 1484–1509 (1997).

7. 7.

Mavroeidis, V., Vishi, K., Zych, M. D., & Jøsang, A. The impact of quantum computing on present cryptography. Int. J. Adv. Comput. Sci. Appl. 9 405–414 (2018).

8. 8.

Peev, M. et al. The SECOQC quantum key distribution network in Vienna. New J. Phys. 11, 075001 (2009).

9. 9.

Chen, T.-Y. et al. Metropolitan all-pass and inter-city quantum communication network. Opt. Express 18, 27217–27225 (2010).

10. 10.

Mirza, A. & Petruccione, F. Realizing long-term quantum cryptography. J. Opt. Soc. Am. B 27, A185–A188 (2010).

11. 11.

Stucki, D. et al. Long-term performance of the SwissQuantum quantum key distribution network in a field environment. New J. Phys. 13, 123001 (2011).

12. 12.

Sasaki, M. et al. Field test of quantum key distribution in the Tokyo QKD Network. Opt. Express 19, 10387–10409 (2011).

13. 13.

Wang, S. et al. Field and long-term demonstration of a wide area quantum key distribution network. Opt. Express 22, 21739–21756 (2014).

14. 14.

Bunandar, D. et al. Metropolitan quantum key distribution with silicon photonics. Phys. Rev. X 8, 021009 (2018).

15. 15.

Zhang, Q., Xu, F., Chen, Y.-A., Peng, C.-Z. & Pan, J.-W. Large scale quantum key distribution: challenges and solutions. Opt. Express 26, 24260–24273 (2018).

16. 16.

Kjaergaard, M. et al. Superconducting qubits: Current state of play. Ann. Rev. Condens. Matter Phy. 11, 369–395 (2020).

17. 17.

Bruzewicz, C. D., Chiaverini, J., McConnell, R. & Sage, J. M. Trapped-ion quantum computing: Progress and challenges. Appli. Phy. Rev. 6, 021314 (2019).

18. 18.

Arute, F. et al. Quantum supremacy using a programmable superconducting processor. Nature 574, 505–510 (2019).

19. 19.

Mosca, M. Cybersecurity in an Era with Quantum Computers: Will We Be Ready? Cryptology ePrint Archive, Report. Report No. 2015/1075. https://eprint.iacr.org/2015/1075 (2015).

20. 20.

Vlad Gheorghiu, M. M. Benchmarking the quantum cryptanalysis of symmetric, public-key and hash-based cryptographic schemes. Preprint at https://arxiv.org/abs/1902.02332 (2018).

21. 21.

Mosca, M. & Piani, M. Quantum Threat Timeline Report. https://globalriskinstitute.org/publications/quantum-threat-timeline/ (Global Risk Institute, 2019).

22. 22.

Kimble, H. J. The quantum internet. Nature 453 https://doi.org/10.1038/nature07127 (2008).

23. 23.

Simon, C. Towards a global quantum network. Nat. Photonics 11, 678–680 (2017).

24. 24.

Castelvecchi, D. The quantum internet has arrived (and it hasn’t). Nature 554, 289–292 (2018).

25. 25.

Wehner, S., Elkouss, D. & Hanson, R. Quantum internet: A vision for the road ahead. Science 362 eaam9288 (2018).

26. 26.

Dowling, J. Schrödinger’s Web: Race to Build the Quantum Internet (Taylor, Francis, 2020).

27. 27.

Bennett, C. H. et al. Teleporting an unknown quantum state via dual classical and Einstein-Podolsky-Rosen channels. Phys. Rev. Lett. 70, 1895–1899 (1993).

28. 28.

Braunstein, S. L., Fuchs, C. A. & Kimble, H. J. Criteria for continuous-variable quantum teleportation. J. Modern Opt. 47, 267–278 (2000).

29. 29.

Jozsa, R., Abrams, D. S., Dowling, J. P. & Williams, C. P. Quantum clock synchronization based on shared prior entanglement. Phys. Rev. Lett. 85, 2010–2013 (2000).

30. 30.

Yurtsever, U. & Dowling, J. P. Lorentz-invariant look at quantum clock-synchronization protocols based on distributed entanglement. Phys. Rev. A 65, 052317 (2002).

31. 31.

Ilo-Okeke, E. O., Tessler, L., Dowling, J. P. & Byrnes, T. Remote quantum clock synchronization without synchronized clocks. npj Quant. Inf. 4, 40 (2018).

32. 32.

Cirac, J. I., Ekert, A. K., Huelga, S. F. & Macchiavello, C. Distributed quantum computation over noisy channels. Phys. Rev. A 59, 4249–4254 (1999).

33. 33.

Degen, C. L., Reinhard, F. & Cappellaro, P. Quantum sensing. Rev. Modern Phys. 89, 035002 (2017).

34. 34.

Zhuang, Q., Zhang, Z. & Shapiro, J. H. Distributed quantum sensing using continuous-variable multipartite entanglement. Phys. Rev. A 97, 032329 (2018).

35. 35.

Xia, Y., Zhuang, Q., Clark, W. & Zhang, Z. Repeater-enhanced distributed quantum sensing based on continuous-variable multipartite entanglement. Phys. Rev. A 99, 012328 (2019).

36. 36.

Svelto, O. Principles of Lasers 5th edn (Springer US, 2010).

37. 37.

Kaushal, H., Jain, V. K. & Kar, S. Free Space Optical Communication (Springer Nature, 2017).

38. 38.

Briegel, H.-J., Dür, W., Cirac, J. I. & Zoller, P. Quantum repeaters: The role of imperfect local operations in quantum communication. Phys. Rev. Lett. 81, 5932–5935 (1998).

39. 39.

Dür, W., Briegel, H.-J., Cirac, J. I. & Zoller, P. Quantum repeaters based on entanglement purification. Phys. Rev. A 59, 169–181 (1999).

40. 40.

Sangouard, N., Simon, C., de Riedmatten, H. & Gisin, N. Quantum repeaters based on atomic ensembles and linear optics. Rev. Modern Phys. 83, 33–80 (2011).

41. 41.

Żukowski, M., Zeilinger, A., Horne, M. A. & Ekert, A. K. ‘Event-ready-detectors’ Bell experiment via entanglement swapping. Phys. Rev. Lett. 71, 4287–4290 (1993).

42. 42.

Bennett, C. H. et al. Purification of noisy entanglement and faithful teleportation via noisy channels. Phys. Rev. Lett. 76, 722–725 (1996).

43. 43.

Deutsch, D. et al. Quantum privacy amplification and the security of quantum cryptography over noisy channels. Phys. Rev. Lett. 77, 2818–2821 (1996).

44. 44.

Bennett, C. H., DiVincenzo, D. P., Smolin, J. A. & Wootters, W. K. Mixed-state entanglement and quantum error correction. Phys. Rev. A 54, 3824–3851 (1996).

45. 45.

Terhal, B. M. Quantum error correction for quantum memories. Rev. Modern Phys. 87, 307–346 (2015).

46. 46.

Muralidharan, S. et al. Optimal architectures for long distance quantum communication. Sci. Rep. 6, 20463 (2016).

47. 47.

Humphreys, P. C. et al. Deterministic delivery of remote entanglement on a quantum network. Nature 558, 268 (2018).

48. 48.

Kalb, N. et al. Entanglement distillation between solid-state quantum network nodes. Science 356, 928–932 (2017).

49. 49.

Ritter, S. et al. An elementary quantum network of single atoms in optical cavities. Nature 484, 195 (2012).

50. 50.

Aspelmeyer, M., Jennewein, T., Pfennigbauer, M., Leeb, W. R. & Zeilinger, A. Long-distance quantum communication with entangled photons using satellites. IEEE J. Selected Top. Quant. Electron. 9, 1541–1551 (2003).

51. 51.

Jennewein, T. & Higgins, B. The quantum space race. Phys. World 26, 52 (2013).

52. 52.

Bedington, R., Arrazola, J. M. & Ling, A. Progress in satellite quantum key distribution. npj Quant. Inf. 3, 30 (2017).

53. 53.

Oi, D. K. L. et al. Cubesat quantum communications mission. EPJ Quant. Technol. 4, 6 (2017).

54. 54.

Kerstel, E. et al. Nanobob: a cubesat mission concept for quantum communication experiments in an uplink configuration. EPJ Quant. Technol. 5, 6 (2018).

55. 55.

Kómár, P. et al. A quantum network of clocks. Nat. Phys. 10, 582 (2014).

56. 56.

Gottesman, D., Jennewein, T. & Croke, S. Longer-baseline telescopes using quantum repeaters. Phys. Rev. Lett. 109, 070503 (2012).

57. 57.

Khabiboulline, E. T., Borregaard, J., De Greve, K. & Lukin, M. D. Optical interferometry with quantum networks. Phys. Rev. Lett. 123, 070504 (2019).

58. 58.

Khabiboulline, E. T., Borregaard, J., De Greve, K. & Lukin, M. D. Quantum-assisted telescope arrays. Phys. Rev. A 100, 022316 (2019).

59. 59.

Rideout, D. et al. Fundamental quantum optics experiments conceivable with satellites-reaching relativistic distances and velocities. Classical Quant. Gravity 29, 224011 (2012).

60. 60.

Bruschi, D. E. et al. Testing the effects of gravity and motion on quantum entanglement in space-based experiments. New J. Phys. 16, 053041 (2014).

61. 61.

Bonato, C., Tomaello, A., Deppo, V. D., Naletto, G. & Villoresi, P. Feasibility of satellite quantum key distribution. New J. Phys. 11, 045017 (2009).

62. 62.

Elser, D. et al. Network architectures for space-optical quantum cryptopgraphy services. In Proc. International Conference on Space Optical Systems and Applications (ICSOS) (ICOS, 2012).

63. 63.

Bourgoin, J.-P. et al. A comprehensive design and performance analysis of low earth orbit satellite quantum communication. New J. Phys. 15, 023006 (2013).

64. 64.

Boone, K. et al. Entanglement over global distances via quantum repeaters with satellite links. Phys. Rev. A 91, 052325 (2015).

65. 65.

Tang, Z. et al. Generation and analysis of correlated pairs of photons aboard a nanosatellite. Phys. Rev. Appl. 5, 054022 (2016).

66. 66.

Bedington, R. et al. Nanosatellite experiments to enable future space-based QKD missions. EPJ Quant. Technol. 3, 12 (2016).

67. 67.

He, M., Malaney, R. & Green, J. Quantum communications via satellite with photon subtraction. 2018 IEEE Globecom Workshops, 1–6. (Abu Dhabi, United Arab Emirates, 2018).

68. 68.

He, M., Malaney, R. & Green, J. Photonic Engineering for CV-QKD over Earth-Satellite Channels. 2019 IEEE Conference on Communications, 1–7 (Shanghai, China, 2019).

69. 69.

Vergoossen, T., Loarte, S., Bedington, R., Kuiper, H. & Ling, A. Modelling of satellite constellations for trusted node QKD networks. Acta Astronaut. 173, 164–171 (2020).

70. 70.

Liao, S.-K. et al. Long-distance free-space quantum key distribution in daylight towards inter-satellite communication. Nat. Photonics 11, 509 (2017).

71. 71.

Yin, J. et al. Satellite-based entanglement distribution over 1200 kilometers. Science 356, 1140–1144 (2017).

72. 72.

Liao, S.-K. et al. Satellite-to-ground quantum key distribution. Nature 549, 43 (2017).

73. 73.

Takenaka, H. et al. Satellite-to-ground quantum-limited communication using a 50-kg-class microsatellite. Nat. Photonics 11, 502 (2017).

74. 74.

Ren, J.-G. et al. Ground-to-satellite quantum teleportation. Nature 549, 70 (2017).

75. 75.

Liao, S.-K. et al. Satellite-relayed intercontinental quantum network. Phys. Rev. Lett. 120, 030501 (2018).

76. 76.

Calderaro, L. et al. Towards quantum communication from global navigation satellite system. Quant. Sci. Technol. 4, 015012 (2018).

77. 77.

Lee, O. & Vergoossen, T. An updated analysis of satellite quantum-key distribution missions. Preprint at https://arxiv.org/abs/1909.13061 (2019).

78. 78.

Mazzarella, L. et al. QUARC: Quantum Research Cubesat—A Constellation for Quantum Communication. Cryptography 4, 7 (2020).

79. 79.

Walker, J. G. Circular Orbit Patterns Providing Continuous Whole Earth Coverage. Royal Aircraft Establishment Technical Report. Report No. 70211 (Royal Aircraft Establishment, 1970).

80. 80.

Leopold, R. J. The Iridium Communications Systems. in Communications on the Move : Singapore ICCS/ISITA’92, 16–20 Nov 1992, 451–455 (IEEE, 1992).

81. 81.

Pratt, S. R., Raines, R. A., Fossa, C. E. & Temple, M. A. An operational and performance overview of the IRIDIUM low earth orbit satellite system. IEEE Commun. Surveys 2, 2–10 (1999).

82. 82.

Luders, R. D. Satellite networks for continuous zonal coverage. ARS J. 31, 179–184 (1961).

83. 83.

Lang, T. J. & Adams, W. S. in Mission Design & Implementation of Satellite Constellations, edited by J. C. van der Ha 51–62 (Springer Netherlands, Dordrecht, 1998).

84. 84.

Lansard, E., Frayssinhes, E. & Palmade, J.-L. Global design of satellite constellations: a multi-criteria performance comparison of classical walker patterns and new design patterns. Acta Astronautica 42, 555–564 (1998).

85. 85.

Handley, M. Delay is not an option: Low latency routing in space,” in Proceedings of the 17th ACM Workshop on Hot Topics in Networks, HotNets ’18, 85–91 (Association for Computing Machinery, New York, NY, USA, 2018).

86. 86.

Liorni, C., Kampermann H., & Bruss D. Quantum repeaters in space. Preprint at https://arxiv.org/abs/2005.10146 (2020).

87. 87.

Gündoğan, M. et al. Space-borne quantum memories for global quantum communication. Preprint at https://arxiv.org/abs/2006.10636 (2020).

88. 88.

Horn, R. T. et al. Inherent polarization entanglement generated from a monolithic semiconductor chip. Sci. Rep. 3, 2314 (2013).

89. 89.

Matsuda, N. et al. A monolithically integrated polarization entangled photon pair source on a silicon chip. Sci. Rep. 2, 817 (2012).

90. 90.

Kang, D., Anirban, A. & Helmy, A. S. Monolithic semiconductor chips as a source for broadband wavelength-multiplexed polarization entangled photons. Opt. Express 24, 15160–15170 (2016).

91. 91.

Kues, M. et al. On-chip generation of high-dimensional entangled quantum states and their coherent control. Nature 546, 622 (2017).

92. 92.

Dynes, J. F. et al. Efficient entanglement distribution over 200 kilometers. Opt. Express 17, 11440–11449 (2009).

93. 93.

Yin, J. et al. Quantum teleportation and entanglement distribution over 100-kilometre free-space channels. Nature 488, 185–188 (2012).

94. 94.

Inagaki, T., Matsuda, N., Tadanaga, O., Asobe, M. & Takesue, H. Entanglement distribution over 300 km of fiber. Opt. Express 21, 23241–23249 (2013).

95. 95.

Wengerowsky, S. et al. Entanglement distribution over a 96-km-long submarine optical fiber. Proc. Natl Acad. Sci. U.S.A. 116, 6684–6688 (2019).

96. 96.

Vasylyev, D. et al. Free-space quantum links under diverse weather conditions. Phys. Rev. A 96, 043856 (2017).

97. 97.

Liorni, C., Kampermann, H. & Bruß, D. Satellite-based links for quantum key distribution: beam effects and weather dependence. New J. Phys. 21, 093055 (2019).

98. 98.

Polnik, M. et al. Scheduling of space to ground quantum key distribution. EPJ Quant. Technol. 7, 3 (2020).

99. 99.

Ko, H. et al. Experimental filtering effect on the daylight operation of a free-space quantum key distribution. Sci. Rep. 8, 15315 (2018).

100. 100.

Cao, Y. et al. Bell Test over Extremely High-Loss Channels: Towards Distributing Entangled Photon Pairs between Earth and the Moon. Phys. Rev. Lett. 120, 140405 (2018).

101. 101.

Das, S., Khatri, S. & Dowling, J. P. Robust quantum network architectures and topologies for entanglement distribution. Phys. Rev. A 97, 012335 (2018).

102. 102.

Gounder, V. V., Prakash R., & Abu-Amara H. Routing in LEO-based satellite networks. In 1999 IEEE Emerging Technologies Symposium. Wireless Communications and Systems (IEEE Cat. No.99EX297) 22.1–22.6 (IEEE, 1999).

103. 103.

Lee, J.-W., Kim, T.-W., & Kim D.-U. Satellite over satellite (SOS) network: a novel concept of hierarchical architecture and routing in satellite network. In Proc. 25th Annual IEEE Conference on Local Computer Networks 392–399 (LCN, 2000).

104. 104.

Serafini, A. Quantum Coninuous Variables: A Primer of Theoretical Methods (Taylor, Francis, 2017).

105. 105.

Bognat, A. & Hayden, P. in Horizons of the Mind. A Tribute to Prakash Panangaden: Essays Dedicated to Prakash Panangaden on the Occasion of His 60th Birthday,= (eds van Breugel F., Kashefi E., Palamidessi C., & Rutten J.) 180–190 (Springer International Publishing: Cham, 2014).

106. 106.

Vasylyev, D., Vogel, W. & Moll, F. Satellite-mediated quantum atmospheric links. Phys. Rev. A 99, 053830 (2019).

107. 107.

Bohren, C. F. & Huffman D. R. Absorption and Scattering of Light by Small Particles (John Wiley & Sons, 2008).

108. 108.

Andrews, L. C. & Phillips R. L., Laser Beam Propagation Through Random Media Vol. 152 (SPIE press Bellingham, WA, 2005).

109. 109.

Er-long, M. et al. Background noise of satellite-to-ground quantum key distribution. New J. Phys. 7, 215 (2005).

110. 110.

Gruneisen, M. T. et al. Modeling daytime sky access for a satellite quantum key distribution downlink. Opt. Express 23, 23924–23934 (2015).

111. 111.

Khatri, S., Matyas, C. T., Siddiqui, A. U. & Dowling, J. P. Practical figures of merit and thresholds for entanglement distribution in quantum networks. Phys. Rev. Res. 1, 023032 (2019).

112. 112.

Collins, O. A., Jenkins, S. D., Kuzmich, A. & Kennedy, T. A. B. Multiplexed memory-insensitive quantum repeaters. Phys. Rev. Lett. 98, 060502 (2007).

113. 113.

Bernardes, N. K., Praxmeyer, L. & van Loock, P. Rate analysis for a hybrid quantum repeater. Phys. Rev. A 83, 012323 (2011).

114. 114.

Simon, C. et al. Quantum repeaters with photon pair sources and multimode memories. Phys. Rev. Lett. 98, 190503 (2007).

115. 115.

Sinclair, N. et al. Spectral multiplexing for scalable quantum photonics using an atomic frequency comb quantum memory and feed-forward control. Phys. Rev. Lett. 113, 053603 (2014).

116. 116.

Yang, T.-S. et al. Multiplexed storage and real-time manipulation based on a multiple degree-of-freedom quantum memory. Nat. Commun. 9, 3407 (2018).

## Acknowledgements

We dedicate this work to the memory of our mentor and guide Jonathan P. Dowling. Jon’s unflinching support, his enthusiasm for research, and his inspiring vision for the future of quantum technologies and the quantum internet, made this work possible. S.K. acknowledges support from the National Science Foundation and the Natural Sciences and Engineering Research Council of Canada Postgraduate Scholarship. A.J.B. acknowledges support from the National Science Foundation. R.A.D., M.P.B., and J.P.D. acknowledge support from the Army Research Office, Air Force Office of Scientific Research and the National Science Foundation.

## Author information

Authors

### Contributions

S.K., A.J.B., and J.P.D. developed the main ideas behind the project. S.K., R.A.D., and M.P.B. developed and ran the simulations. S.K. and A.J.B. wrote the manuscript. S.K. and A.J.B. contributed equally to this work.

### Corresponding authors

Correspondence to Sumeet Khatri or Anthony J. Brady.

## Ethics declarations

### Competing interests

The authors declare no competing interests.

Publisher’s note Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.

## Rights and permissions

Reprints and Permissions

Khatri, S., Brady, A.J., Desporte, R.A. et al. Spooky action at a global distance: analysis of space-based entanglement distribution for the quantum internet. npj Quantum Inf 7, 4 (2021). https://doi.org/10.1038/s41534-020-00327-5