Patent ID: 12255990

Common reference numerals are used throughout the figures to indicate similar features.

DETAILED DESCRIPTION

Embodiments of the present invention are described below by way of example only. These examples represent the best mode of putting the invention into practice that are currently known to the Applicant although they are not the only ways in which this could be achieved. The description sets forth the functions of the example and the sequence of steps for constructing and operating the example. However, the same or equivalent functions and sequences may be accomplished by different examples.

The present disclosure provides method(s), apparatus and system(s) for quantum-safe quantum streaming of data or data items between devices and/or users of a quantum cloud platform. The quantum streaming system is configured to provide provably QS quantum data streaming in relation to streaming of data items between two or more devices in a quantum safe manner via the quantum cloud platform. QS streaming of data via the QS cloud platform may be achieved by separating or dividing a data item such as, without limitation, data or file that is to be transferred into a set of several quantum secured ‘streams’ (or data streams), where each data stream is independently secured and transfers according to partial data streaming protocols and operations (e.g. via HTTP(S) POST and GET operations). The advantage of using QS quantum secured streams via the QS cloud platform is that it decouples the upload of data from the download of the data. Thus, in the event that both end-point devices (e.g. distributor to one or more user/recipient transfers, or user-user (or recipient-recipient) transfers) are not simultaneously online (or that the recipient is not able to receive the entirety of the data due to storage restrictions), a “central server” (e.g. QS server) of the quantum cloud platform can act as a secure, untrusted mid-point, allowing selective retrieval of information when the recipient and/or distributor and the like are online. For example, QS quantum data streaming can enable streaming of data items for the quantum cloud platform with security, user and data permissioning and quality of service options for the distributor and recipient, sender and/or receiver and the like. This may be performed in a time boxed solution or fashion. There are many applications in which QS quantum streaming may be performed, without limitation, for example, data items representative of data, offers and/or market information used over the quantum cloud platform and the like.

Conventionally, data streams must be pre-encrypted, or simply protected by channel encryption. The present disclosure ensures that every packet of data is individually quantum encrypted and parallel streamed in real time across up to a plurality of individual quantum key encrypted data channels. For example, up to N individual quantum key encrypted channels, where N may depend on, without limitation, for example hardware capabilities, software capabilities, bandwidth capacities of channels between recipients/users and the quantum cloud platform and the like (e.g. N=16).

In addition, secure streaming of data is becoming increasingly important. For example in forthcoming 5G telecommunication networks and beyond, any form of targeted user content (e.g. video, data files, applications programmes, live market data, vehicle or identity data, transaction data) does not have to be batch delivered but, instead, can be securely streamed in a QS manner and protected by quantum keys. This can be used to create unique user experiences, but with total auditing of user access and security control of the information being streamed in a QS manner. Quantum cloud services operating on the quantum cloud platform may have the added ability to securely communicate and authenticate, without limitation, for example data and/or media information providing protection from deep fakes for customers/users of the quantum cloud platform and the like.

Moreover, mobile communication devices may sometimes require the download of large data items or files (for example video content) from network servers or peers, but such mobile devices may suffer from relatively limited local storage capacity and variable network connectivity. With these limitations, downloading large data or video files can be problematic. Streaming may carry the following advantages over downloading such as, without limitation, for example instant viewing, no download time, no need for memory space on the mobile device, instant playback, quality of service options for the distributor and recipient. However, it is important to protect the streaming content, thus streaming technologies may be married/combined with quantum key distribution (QKD) and a unique quantum key multiplexed data transfer mechanism to form the QS quantum streaming system and process(es). The QS quantum streaming protocol may be based on a method or process of separating a file transfer into a set of several quantum secured ‘streams’, where each stream is independently secured and transfers partial data via HTTP(S) POST and GET operations or future TLS/SSL HTTP(S) operations. Every packet of data is individually quantum encrypted and parallel streamed in real time across a plurality of individual and unique quantum key encrypted data channels. This may be achieved by using the quantum cloud platform as an intermediary, in which a distributor or sender (e.g. sender device) may distribute and/or transfer data to the quantum cloud platform and then, from the quantum cloud platform to one or more recipient or receivers (e.g. receiving devices). In particular, the data may be streamed to one or many registered quantum cloud users, with individual access and security controls applied for each recipient.

FIG.1ais a schematic diagram illustrating a quantum cloud system100for use in performing quantum-safe (QS) quantum streaming of data items according to some embodiments of the invention. In this example, the quantum cloud platform102includes a quantum cloud network formed by a plurality of QS server(s)104a-104n, in which one or more of the QS server(s) include components that are configured to perform and/or control the registration of users, storage, retrieval, access and/or use or application of data items, and/or QS communications between, without limitation, for example devices, servers, or end-points of the users and/or customers and the like. Users of end-point devices106aor106b, servers, and/or communication devices may connect and/or register with the QS cloud platform102via one or more of the QS server(s)104a-104nfor registering, transferring, storing, retrieving, accessing, and/or using applications and/or services associated with data being transferred across the QS network of the QS cloud platform102and the like in a QS manner. This may include user device(s) or end-point(s) establishing QS communications channels with the QS network and/or other devices of users registered in the QS network and the like and/or as the application demands.

A user or customer end-point device or device may comprise or represent any device, computing device and/or communications device capable of communicating over a communication network, where the device/computing device and/or communication device is associated with the user or customer. Examples of end-point devices and/or devices may include, without limitation, for example a laptop, desktop computer, personal computer, mobile phone, smart-phone, or Internet of Things (IoT) device and the like, user server, customer server(s), and/or any other computing or communication device. Users and/or customer end-point devices and/or communications devices may establish a quantum-safe communication channel with the QS cloud platform, within the QS system and/or end-to-end quantum-safe communication channel with other user and/or customer end-point devices. This may be achieved through the end-point device connecting to a QS server and/or a corporate network hosting a QS server that includes, without limitation, for example a satellite quantum key distribution (SKQD) system and so has a set of Quantum Distributed (QD) keys, one or more of which may be assigned to the end-point device106aor106bof a user and stored in a secure enclave or secure memory on the end-point device106aor106b. The end-point device106aand106bmay use the one or more assigned QD keys to establish a quantum safe channel with the QS system, and hence, may establish a quantum safe channel to other one or more similarly configured end-point device(s) and the like.

A quantum channel or quantum communication channel may comprise or represent a communication channel capable of transmitting and/or receiving at least quantum information. Examples of a quantum channel or quantum communication channel or quantum channel that may be used according to the invention may include or be based on, without limitation, for example one or more types of quantum communication channels associated with the group of: optical quantum communications; free-space optical quantum communications; optical fibre quantum communications; optical laser quantum communications; communications using electromagnetic waves such as, without limitation, for example radio, microwave, infra-red, gigahertz, terahertz and/or any other type of electromagnetic wave communications; communications based on electron spin and the like; any other type of quantum communications for transmitting and receiving data over a quantum communication channel between devices. It is noted that one or more types of quantum communication channel may be capable of transmitting and/or receiving non-quantum, or classical, information.

A communication channel or standard, classical or non-quantum communication channel may comprise or represent any communication channel between two devices that at least is capable of transmitting and/or receiving non-quantum information. Examples of a communication channel, and/or standard, classical and/or non-quantum communication channel according to the invention may include or be based on, without limitation, for example on one or more types of communication channel from the group of: any one or more physical communication channels; optical communication channels; free-space optical communication channels; wireless communication channels; wired communication channels; radio communication channels; microwave communication channels; satellite communication channels; terrestrial communication channels; optical fibre communication channels; optical laser communication channels; telecommunications channels; 2G to 6G and beyond telecommunications channels; logical channels such as, without limitation, for example Internet Protocol (IP) channels; any other type of logical channel being provided over any standard, classical or non-quantum physical communication channel; one or more other physical communications or carriers of data such as, without limitation, for example avian carriers, paper, sealed briefcases, courier or other delivery service and the like; any other type of one or more optical, wireless and/or wired communication channels for transmitting data between devices; and/or two or more optical, wireless and/or wired communication channels that form a composite communication channel for transmitting data between devices; and/or any combination of two or more standard, classical or non-quantum communication channels that form a composite communication channel for transmitting and/or carrying data between devices; combinations thereof, modifications thereto, and/or as described herein and the like and/or as the application demands. It is noted that one or more types of communication channels, standard, classical or non-quantum communication channels may be capable of transmitting and/or receiving quantum information. As described, a quantum-safe (QS) communication channel comprises or represents a communication channel that is encrypted using a quantum safe key or a quantum-distributed (QD) cryptographic key or QD key.

The quantum cloud platform102may form a quantum safe network including one or more QS servers and a repository (e.g. distributed ledger technology (DLT)) for storing and accessing one or more data items. Each QS server may include a hardware security module (HSM) for storing an identical set of quantum distributed (QD) keys. The identical set of QD keys having been distributed to each of said one or more QS servers in a quantum-safe manner. The one or more QS servers are configured to communicate securely with each other and the repository using one or more available QD keys from the identical set of QD keys. The one or more QS servers may also distribute, in a quantum safe manner, one or more available QD keys from the set of QD keys to one or more endpoint devices106aand106band/or as the application demands.

In this example, the quantum cloud system100comprises a pair of end-points106aand106b, which may be a first communication device106a(e.g. Alice) and a second communication device106b(e.g. Bob), respectively. These endpoints106aand106bare configured to form communication channels108aand108bwith the quantum cloud platform102. This pair of endpoints106aand106bmay share a first cryptographic key known only to the endpoints (e.g. USER KEY—AES256). The first cryptographic key may be a QS key that has been exchanged between the endpoint devices106aand106busing a quantum key distribution protocol (QKD) and the like. Furthermore, a central server104a(also known as a QS server of the plurality of QS servers104a-104n) of the quantum cloud platform102may also share a cryptographic key with each of the endpoints106aand106b, which are known only to the corresponding endpoint106a(or106b) and the central server104a. That is, the central server104amay share a second cryptographic key with the first communication device/endpoint106aand the central server may share a third cryptographic key with the second communication device/endpoint106b. The second and third cryptographic keys may be different, thus these cryptographic keys are known only to the corresponding endpoint106a(or106b) and the central server104a. The second and third cryptographic keys may also be QS keys that have been exchanged and/or securely retrieved, in a quantum-safe manner, from the central server104aand the endpoint devices106aand106b. This may also involve using, without limitation, a quantum key distribution protocol (QKD) and the like.

Once these cryptographic keys have been shared, in order to send a data item or file from the first endpoint106a(e.g. Alice) to the second endpoint106b(e.g. Bob), at the first end-point106athe quantum streaming process is configured to split the data item or file to be transferred into a plurality of data shards (e.g. an organised set of data item portions of the data item) that are configured to enable reconstruction of the data item or file from a partial subset of the plurality of data shards. Each data shard is separately encrypted using the first cryptographic key known only to the first and second endpoint devices106aand106b. The first endpoint device106acommunicates with the central server104aof the cloud platform102(or a QS server of the quantum cloud platform102) to establish a series of secure communication channels, or a plurality of secure communication channels110ausing the second cryptographic key (e.g. Streaming Key—AES256+CBC MAC) or equivalent cipher, shared between the first endpoint device106aand the central server104a. The plurality of encrypted data shards are uploaded to the central server104avia the plurality of secure channels110a. This may involve using, without limitation, for example HTTP POST operations for uploading the encrypted data shards of the data item/file to the central server104a. The central server104aof the quantum cloud platform102may combine the encrypted data items from the plurality of encrypted data shards. The central server104acannot decrypt each of the plurality of data shards. The central server104amay then store the encrypted data item by dividing it into a further plurality of encrypted data shards (e.g. 6 encrypted data shards) each encrypted with its own cryptographic key and stores these encrypted data shards on the distributors (e.g. user of the first endpoint106a) chosen storage medium within the quantum cloud platform102. For example, the distributor may specify that the central server104amay store at least three copies of each data shard, each with its own unique infrastructure generated quantum key, along with metadata for reassembling the shards of data. This metadata may involve reassembling the shards of data into an equivalent plurality of encrypted data shards that the first endpoint device106asent to the central server104a. The encrypted data shards and metadata may be stored by the central server104ain, without limitation, for example a distributed ledger technology (DLT) server or repository of the quantum cloud platform102for retrieval by the second endpoint device106b. The data item may now be transferred to the second endpoint106b.

Transferring the data item to the second endpoint device106bmay occur by requiring the second endpoint106bsecurely logging on to the quantum cloud platform102, where it is informed of the details and/or requirements of the transfer of the DLT stored data item. The second endpoint device106b(e.g. Bob) may then establish another plurality of secure channels110busing the third cryptographic key established between the central server104aand the second endpoint device106b. The encrypted shards of the data item stored in the DLT of the quantum cloud platform102may be retrieved and combined by the central server104ato form the encrypted data item, where it is further divided into a further plurality of encrypted data shards. The further plurality of encrypted data shards may be based on the metadata associated with the data item and the data shards. This may include the original division or plurality of encrypted data shards that the first endpoint device106asent over to the central server104a. Each of the plurality of data shards is encrypted with the third cryptographic key and transmitted over the plurality of secure channels110bto endpoint device106b. The transfer of the encrypted data shards from the central server104ato the second endpoint device106bmay be based on using a series of HTTP GET operations. The second endpoint device106bis able to decrypt each of the received data shards using the third cryptographic key, and then reconstruct the data item using the first cryptographic key used to encrypt the original set of shards when transmitted from the first endpoint device106ato the central server104a. The second endpoint device106athus reconstructs and decrypts the data item.

FIG.1bis a flow diagram illustrating an example of a quantum streaming process120performed by the first endpoint device106afor streaming a data item from the first endpoint to the second endpoint via the cloud server of the quantum cloud system100ofFIG.1aaccording to some embodiments of the invention. The quantum streaming process120may include the following steps, performed at the first endpoint device. In step122, the file is split into a plurality of ‘data shards’ that allow reconstruction of the file from a partial subset of the data shards. In step124, each of the data shards is separately encrypted using the first cryptographic key shared between the endpoints106aand106b. In step126, a series or a first plurality of secure channels is established with a central server of the quantum cloud platform102using the second cryptographic key shared between the first endpoint106aand the central server104a. In step128, the plurality of encrypted shards are transmitted to the central server104aover the series or plurality of secure channels. This may include using HTTP POST operations for uploading the encrypted shards to the central server104a.

FIG.1cis a flow diagram illustrating an example a quantum streaming process130performed by the central server104afor streaming a data item from the first endpoint106ato the second endpoint106bvia the cloud server104aof the quantum cloud system100ofFIG.1aaccording to some embodiments of the invention. The quantum streaming process130may include the following steps, performed at the cloud server104a. In step132, receiving a plurality of encrypted shards from the first endpoint device106a, each shard encrypted using the first cryptographic key known only to the first endpoint device106aand the second endpoint device106b. In step134, securely storing the encrypted data shards in a secure storage (e.g. DLT) of the quantum cloud platform102. This may include the central server104aof the quantum cloud platform102storing the encrypted data item by dividing it into data shards, for example six data shards, each with its own cryptographic key and storing the encrypted data shards on the distributors chosen storage (e.g. minimum of 3 copies of each data shard, each with its own unique infrastructure generated quantum key, that is each shard is on its own unique infrastructure with its own generated quantum key). The metadata to reassemble the shards of encrypted data is stored on the secure storage (e.g. quantum cloud platform DLT server(s)). In step136, the central server104adetermines when the second endpoint106blogs onto the quantum cloud platform. When the second endpoint106b(e.g. Bob) logs on to quantum cloud platform102, the central server may inform the second endpoint106bof the details of the transfer of the encrypted data item from the first endpoint device106aso that it can proceed to download the encrypted data item. In step138, the central server104aand the second endpoint device106bestablish a plurality of secure channels therebetween using the third cryptographic key. In step140, the encrypted data item is retrieved from secure storage (e.g. DLT) and the encrypted data shards of the data item are securely transmitted via the secure data channels to the second endpoint device106b. This may include the central server/endpoint106busing a series of HTTP GET operations.

FIG.1dis a flow diagram illustrating an example of a quantum streaming process150performed by the second endpoint device106bfor streaming a data item from the first endpoint106ato the second endpoint106bvia the cloud server104aof the quantum cloud system100ofFIG.1aaccording to some embodiments of the invention. The quantum streaming process150may include the following steps, performed at the second endpoint device106b. In step152, the endpoint device106bmay log on to the quantum cloud platform102. As an option, the second endpoint device106bmay be notified by the quantum cloud platform102that a data transfer is waiting and so the second endpoint device106bmay log onto the quantum cloud platform. In step154, the second endpoint device106bmay be notified of a transfer of a data item from first endpoint device106a. If endpoint device106bis notified of such a transfer (e.g. ‘Y’), then the process150proceed to step158. Otherwise, if it is not notified (e.g. ‘N’) the process proceeds to step156, where the endpoint device106bmay perform other operations, transfers and the like whilst securely logged on to quantum cloud platform102. In step158, when the second endpoint device106bis notified of a transfer of an encrypted data item from first endpoint device106a, the second endpoint device106bestablishes a series/plurality of secure channels with the central server104aof quantum cloud platform102using a third cryptographic key, which is known only to the endpoint device106band the central server104a. In step160, the endpoint106breceives a plurality of encrypted data shards of the encrypted data item from the central server104aover the plurality of secure channels between quantum cloud platform102and the endpoint device106b. In step162, the endpoint device106bis configured to decrypt the encrypted data shards using the first cryptographic key known only to the first and second endpoint devices106aand106b. This enables endpoint device106bto decrypt the encrypted data shards of the data item or file and reconstruct the data item or file.

Further modifications and/or advantages of the quantum streaming process120,130and150may include, without limitation, for example the separate streams of encrypted data shards to be routed over multiple channels, enhancing reliability and throughput. Use of authenticated encryption for end-to-end encryption of the data item or file data shards enables secure communication via an untrusted intermediary device (e.g. central server). The streamed data item that is in motion may be sent over a plurality of uniquely encrypted quantum safe channels (e.g. 16 quantum safe channels). That is the endpoint devices106aand106bmay perform quantum key distribution in order to exchange a quantum safe key as the first cryptographic key. Similarly, the first endpoint device106amay perform a quantum key distribution in order to exchange a quantum safe key with the central server104aand/or the quantum cloud platform102, thus the second cryptographic key may be a second quantum safe key known only by the first device106aand the central server104aor the quantum cloud platform102. As well, in a similar fashion, the second endpoint device106bmay perform a quantum key distribution in order to exchange another quantum safe key with the central server104aand/or the quantum cloud platform102, thus the third cryptographic key may be a third quantum safe key known only by the second device106aand the central server104aor the quantum cloud platform102. Thus, the first, second and third quantum safe keys may be used in QS quantum streaming processes120,130and150by replacing the first, second and third cryptographic keys and ensuring quantum-safe end-to-end security for transferring the data item from the first endpoint device106ato the second endpoint device106b. During the time the encrypted data item is stored in the quantum cloud platform, the data at rest may be stored in a plurality of pieces with multiple copies of each piece of data (e.g. six separate pieces with three copies of each piece of data) stored on separate resilient enterprise storage devices, which may form a DLT in the quantum cloud platform102and the like. As an option, transport layer security (TLS) 1.3 or future versions may be used between endpoint devices106aand106band the central server104a.

FIG.2is a schematic diagram of an example computing system200for quantum safe streaming of data items according to aspects of the invention. Computing system200may be used to implement one or more aspects of the methods, systems, platforms, process(es), quantum safe quantum streaming process(es) as described with reference toFIGS.1a-1d. Computing system200includes a computing device202that includes one or more processor units204, memory unit206and communication interface208in which the one or more processor units204are connected to the memory unit206and the communication interface208. The communication interface208may be configured for communicating over network210with one or more endpoint devices (not shown), one or more central servers (not shown), one or more QS servers (not shown) and/or one or more quantum cloud platforms (not shown) and the like. The memory unit206may store one or more program instructions, code or components such as, by way of example only but not limited to, an operating system206afor operating computing device202and a data store206bfor storing program instructions, code and/or components associated with implementing the functionality and/or one or more functions or functionality associated with one or more endpoint devices and/or central servers for performing quantum safe quantum streaming of data items between endpoint devices via the one or more central servers and the like, one or more methods and/or processes of transferring, storing and/or streaming data items and/or files and the like, combinations thereof, modifications thereto, and/or as described herein with reference to at least any one ofFIGS.1ato1d.

In the embodiment described above the server may comprise a single server or network of servers. In some examples the functionality of the server may be provided by a network of servers distributed across a geographical area, such as a worldwide distributed network of servers, and a user may be connected to an appropriate one of the network of servers based upon a user location.

The above description discusses embodiments of the invention with reference to a single user for clarity. It will be understood that in practice the system may be shared by a plurality of users, and possibly by a very large number of users simultaneously.

The embodiments described above are fully automatic. In some examples a user or operator of the system may manually instruct some steps of the method to be carried out.

In the described embodiments of the invention the system may be implemented as any form of a computing and/or electronic device. Such a device may comprise one or more processors which may be microprocessors, controllers or any other suitable type of processors for processing computer executable instructions to control the operation of the device in order to gather and record routing information. In some examples, for example where a system on a chip architecture is used, the processors may include one or more fixed function blocks (also referred to as accelerators) which implement a part of the method in hardware (rather than software or firmware). Platform software comprising an operating system or any other suitable platform software may be provided at the computing-based device to enable application software to be executed on the device.

Various functions described herein can be implemented in hardware, software, or any combination thereof. If implemented in software, the functions can be stored on or transmitted over as one or more instructions or code on a computer-readable medium. Computer-readable media may include, for example, computer-readable storage media. Computer-readable storage media may include volatile or non-volatile, removable or non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. A computer-readable storage media can be any available storage media that may be accessed by a computer. By way of example, and not limitation, such computer-readable storage media may comprise RAM, ROM, EEPROM, flash memory or other memory devices, CD-ROM or other optical disc storage, magnetic disc storage or other magnetic storage devices, or any other medium that can be used to carry or store desired program code in the form of instructions or data structures and that can be accessed by a computer. Disc and disk, as used herein, include compact disc (CD), laser disc, optical disc, digital versatile disc (DVD), floppy disk, and blu-ray disc (BD). Further, a propagated signal is not included within the scope of computer-readable storage media. Computer-readable media also includes communication media including any medium that facilitates transfer of a computer program from one place to another. A connection, for instance, can be a communication medium. For example, if the software is transmitted from a website, server, or other remote source using a coaxial cable, fiber optic cable, twisted pair, DSL, or wireless technologies such as infrared, radio, and microwave are included in the definition of communication medium. Combinations of the above should also be included within the scope of computer-readable media.

Alternatively, or in addition, the functionality described herein can be performed, at least in part, by one or more hardware logic components. For example, and without limitation, hardware logic components that can be used may include Field-programmable Gate Arrays (FPGAs), Program-specific Integrated Circuits (ASICs), Program-specific Standard Products (ASSPs), System-on-a-chip systems (SOCs), Complex Programmable Logic Devices (CPLDs), Graphics Processing Units (GPUs), System-on-Chip (SOC) circuits, etc.

Although illustrated as a single system, it is to be understood that the computing device may be a distributed system. Thus, for instance, several devices may be in communication by way of a network connection and may collectively perform tasks described as being performed by the computing device.

Although illustrated as a local device it will be appreciated that the computing device may be located remotely and accessed via a network or other communication link (for example using a communication interface).

The term ‘computer’ is used herein to refer to any device with processing capability such that it can execute instructions. Those skilled in the art will realise that such processing capabilities are incorporated into many different devices and therefore the term ‘computer’ includes PCs, servers, mobile telephones, personal digital assistants and many other devices.

Those skilled in the art will realise that storage devices utilised to store program instructions can be distributed across a network. For example, a remote computer may store an example of the process described as software. A local or terminal computer may access the remote computer and download a part or all of the software to run the program. Alternatively, the local computer may download pieces of the software as needed, or execute some software instructions at the local terminal and some at the remote computer (or computer network). Those skilled in the art will also realise that by utilising conventional techniques known to those skilled in the art that all, or a portion of the software instructions may be carried out by a dedicated circuit, such as a DSP, programmable logic array, or the like.

It will be understood that the benefits and advantages described above may relate to one embodiment or may relate to several embodiments. The embodiments are not limited to those that solve any or all of the stated problems or those that have any or all of the stated benefits and advantages. Variants should be considered to be included into the scope of the invention.

Any reference to ‘an’ item refers to one or more of those items. The term ‘comprising’ is used herein to mean including the method steps or elements identified, but that such steps or elements do not comprise an exclusive list and a method or apparatus may contain additional steps or elements.

As used herein, the terms “component” and “system” are intended to encompass computer-readable data storage that is configured with computer-executable instructions that cause certain functionality to be performed when executed by a processor. The computer-executable instructions may include a routine, a function, or the like. It is also to be understood that a component or system may be localized on a single device or distributed across several devices.

Further, as used herein, the term “exemplary” is intended to mean “serving as an illustration or example of something”.

Further, to the extent that the term “includes” is used in either the detailed description or the claims, such term is intended to be inclusive in a manner similar to the term “comprising” as “comprising” is interpreted when employed as a transitional word in a claim.

The figures illustrate exemplary methods. While the methods are shown and described as being a series of acts that are performed in a particular sequence, it is to be understood and appreciated that the methods are not limited by the order of the sequence. For example, some acts can occur in a different order than what is described herein. In addition, an act can occur concurrently with another act. Further, in some instances, not all acts may be required to implement a method described herein.

Moreover, the acts described herein may comprise computer-executable instructions that can be implemented by one or more processors and/or stored on a computer-readable medium or media. The computer-executable instructions can include routines, sub-routines, programs, threads of execution, and/or the like. Still further, results of acts of the methods can be stored in a computer-readable medium, displayed on a display device, and/or the like.

The order of the steps of the methods described herein is exemplary, but the steps may be carried out in any suitable order, or simultaneously where appropriate. Additionally, steps may be added or substituted in, or individual steps may be deleted from any of the methods without departing from the scope of the subject matter described herein. Aspects of any of the examples described above may be combined with aspects of any of the other examples described to form further examples without losing the effect sought.

It will be understood that the above description of a preferred embodiment is given by way of example only and that various modifications may be made by those skilled in the art. What has been described above includes examples of one or more embodiments. It is, of course, not possible to describe every conceivable modification and alteration of the above devices or methods for purposes of describing the aforementioned aspects, but one of ordinary skill in the art can recognize that many further modifications and permutations of various aspects are possible. Accordingly, the described aspects are intended to embrace all such alterations, modifications, and variations that fall within the scope of the appended claims.

Embodiments of the present invention are further set out in the following clauses:1. A system as herein described with reference to the accompanying drawings.2. A quantum cloud platform as herein described with reference to the accompanying drawings.3. An apparatus as herein described with reference to the accompanying drawings.4. A computer program product as herein described with reference to the accompanying drawings.5. A computer program product as herein described with reference to the accompanying drawings.6. A quantum safe streaming method as herein described with reference to the accompanying drawings.