1 Introduction↩︎

The development of scalable quantum communication infrastructures is one of the central objectives of modern quantum technologies. The long-term vision of a quantum internet involves distributed entanglement generation among geographically separated nodes connected through optical fibre and satellite infrastructures [1]–[3].

Recent experimental deployments have demonstrated significant progress toward this objective. Metropolitan-scale infrastructures such as MadQCI and EuroQCI illustrate the feasibility of heterogeneous quantum-secured communication systems operating over realistic production environments[4]. In parallel, recent entanglement-swapping demonstrations over urban fibre networks further support the practical viability of distributed Bell-state transport across realistic telecommunication infrastructures.

Entanglement-based QKD protocols, particularly the E91 protocol, provide device-independent security guarantees rooted in Bell inequality violations [5]. However, the scalability of authentication in large multi-user quantum networks remains poorly understood. Conventional analyses frequently assume that authentication resources scale quadratically with the number of users because every pair of communicating nodes potentially requires independent authentication resources [6].

This perspective implicitly treats network topology as externally imposed and assumes that every pair of nodes remains equally accessible from an operational viewpoint. Realistic quantum networks, however, are fundamentally constrained by physical transport phenomena. Photon loss, imperfect Bell-state measurements, finite quantum-memory coherence times, probabilistic entanglement swapping, purification overheads, and measurement-conditioned LOCC protocols strongly constrain the spatial propagation of usable entanglement [7].

Consequently, the operational connectivity of a quantum network differs substantially from its underlying physical topology. While a metropolitan fibre infrastructure may exhibit global small-world connectivity, the subset of Bell correlations that remain operationally useful for E91 authentication can become dramatically sparse due to finite correlation transport lengths [8].

The central thesis of the present work is that authentication complexity in realistic E91 quantum networks is not governed by combinatorial pair counting but instead emerges dynamically from the physics of entanglement transport under realistic operational constraints.

Unlike conventional graph-theoretic approaches, the present work treats operational Bell connectivity as an emergent physical property determined by correlation transport under realistic network conditions. In practical quantum communication infrastructures, Bell correlations propagate through lossy entanglement-swapping chains subject to decoherence, finite quantum-memory coherence times, imperfect Bell-state measurements, and measurement-conditioned LOCC operations. These mechanisms dynamically constrain the spatial extent of operationally usable Bell correlations, generating finite operational correlation lengths analogous to screening phenomena in many-body systems.

Within this framework, the effective operational entanglement graph differs fundamentally from the underlying physical fibre topology. Although metropolitan quantum networks may exhibit global small-world connectivity, the subset of Bell pairs that remains operationally usable for E91 authentication becomes intrinsically sparse. As a consequence, authentication complexity is governed primarily by the transport physics of entanglement rather than by naive combinatorial pair counting. This emergent perspective establishes a direct connection between quantum-network topology, Bell-correlation transport, entanglement percolation, and scalable authentication architectures in realistic quantum communication infrastructures.

Our approach differs conceptually from most existing work on quantum networking. Previous studies typically optimize entanglement distribution over a predefined network graph. Here we instead derive the effective operational graph from the physical propagation of Bell correlations themselves [9]–[11].

We show that finite operational correlation lengths induce sparse emergent operational entanglement graphs whose number of CHSH-usable Bell pairs scales linearly with network size despite logarithmic global network connectivity. This naturally produces sub-quadratic authentication scaling laws.

More broadly, the results support an interpretation in which realistic quantum communication infrastructures behave as distributed many-body systems whose effective topology emerges dynamically from correlation transport under loss and decoherence [12], [13].

The present work develops a complementary physical framework in which authentication complexity emerges directly from the transport properties of entanglement itself. Rather than treating Bell connectivity as an externally imposed graph-theoretic resource, we derive the effective operational entanglement structure from the propagation of Bell correlations under realistic lossy quantum-network dynamics. In particular, we show that Pauli-transfer-matrix (PTM) transport naturally generates finite operational correlation lengths due to loss, decoherence, imperfect Bell measurements, and LOCC-conditioned entanglement swapping. This mechanism dynamically restricts the set of operationally usable Bell pairs to sparse local neighbourhoods, even when the underlying physical infrastructure possesses global small-world connectivity [8].

From this perspective, realistic E91 quantum communication networks exhibit an emergent operational geometry fundamentally different from their physical fibre topology. The resulting CHSH-usable Bell graph becomes intrinsically sparse, with each node maintaining only a finite number of operational Bell partners independent of total network size. This physical sparsification mechanism immediately modifies authentication scaling laws. Under physically motivated sparse-mixing assumptions, we show that the total authentication overhead scales as \[\Theta(N\log N),\] rather than quadratically. More generally, the present work establishes a direct connection between entanglement transport physics, operational network topology, and scalable authentication in realistic quantum communication infrastructures.

Beyond the scaling analysis itself, the work also introduces a physically motivated operational interpretation of quantum metropolitan networks as distributed entanglement-transport systems. In this interpretation, operational Bell connectivity emerges dynamically from correlation propagation under realistic constraints in close analogy with finite-correlation and screening phenomena in many-body physics. The framework therefore connects quantum-network theory, open quantum systems, entanglement transport, and operational QKD architectures within a unified description.

The remainder of this article is organised as follows. In Sec. II we introduce the physically constrained quantum-network model and define operational Bell connectivity. Section III develops the PTM description of multi-hop entanglement transport and derives the emergence of finite operational correlation lengths. Section IV analyses the resulting sparse operational entanglement graph and proves the linear scaling of CHSH-usable Bell pairs. In Sec. V we derive the corresponding authentication complexity under sparse-mixing assumptions. Section VI presents the ancilla-assisted distributed Bell-state verification framework and discusses its operational role in realistic E91 infrastructures. Finally, Sec. VII discusses the broader physical interpretation of emergent operational network geometry and Sec. VIII summarizes the main conclusions and implications for scalable quantum communication architectures.

2 Physically Constrained Quantum Communication Networks↩︎

We model a metropolitan quantum communication infrastructure as a sparse graph \[G=(V,E),\] where the vertices \(V\) represent quantum nodes and the edges \(E\) correspond to elementary optical-fibre links capable of distributing entangled photonic states. The total number of network nodes is denoted by \[N=|V|.\]

Our analysis focuses on realistic metropolitan-scale quantum networks operating in the sparse-connectivity regime, where the average number of physical neighbours per node remains bounded independently of network size, \[\langle k\rangle=\mathcal{O}(1).\] At the same time, the network retains small-world characteristics, so that the average shortest-path distance between arbitrary nodes grows only logarithmically with the total number of nodes, \[\langle d\rangle=\mathcal{O}(\log N).\]

This class of topologies provides a realistic abstraction of optical metropolitan infrastructures and quantum communication backbones, where most nodes possess only local fibre connectivity while a smaller number of longer-range links or routing shortcuts significantly reduce global communication distances. Sparse small-world architectures are particularly relevant in practical quantum networks because they combine scalability, moderate physical deployment cost, and efficient long-range entanglement distribution.

2.1 Operational Bell Connectivity↩︎

The key distinction introduced in this work is the separation between:

1. the underlying physical network graph,

2. the operational Bell-connectivity graph.

Operational connectivity therefore depends not only on graph topology but also on:

• channel transmissivity,

• memory decoherence,

• Bell-state measurement fidelity,

• LOCC success probability,

• entanglement purification overhead,

• swapping depth.

Consequently, operational Bell connectivity becomes a dynamical physical observable rather than a purely combinatorial property of the graph.

3 PTM Correlation Transport↩︎

To describe the transport of Bell correlations through realistic swapping chains we employ the Pauli transfer matrix (PTM) representation [7].

Let: \[\mathcal{E}:\mathcal{B}(\mathcal{H})\rightarrow\mathcal{B}(\mathcal{H})\] denote a completely positive map acting on density operators.

In the PTM representation: \[\mathrm{vec}(\rho') = T^{(\mathcal{E})} \mathrm{vec}(\rho),\] where: \[T^{(\mathcal{E})}\] is the Pauli transfer matrix associated with the channel.

3.1 Multi-Hop Entanglement Propagation↩︎

Consider a multi-hop entanglement-distribution process connecting two distant nodes through a sequence of entanglement-swapping operations along a network path of length \(L\). Each elementary step of the propagation process involves a combination of Bell-state measurements, local unitary corrections, noisy quantum channels, and measurement-conditioned local operations and classical communication (LOCC). As entanglement propagates through the network, these operations collectively modify the transported quantum correlations and progressively reduce their operational visibility.

To describe this transport process, we employ the Pauli transfer matrix (PTM) representation of quantum channels. Let \[T^{(\Phi_i)}\] denote the PTM associated with the \(i\)-th elementary propagation step. The effective transport channel associated with a complete entanglement-swapping path \[P=(\Phi_1,\Phi_2,\ldots,\Phi_L)\] is then obtained through the sequential composition \[T^{(\mathcal{N}_P)} = T^{(\Phi_L)} \cdots T^{(\Phi_1)}. \label{eq:ptmchain}\tag{1}\]

Under realistic physical conditions, including optical loss, imperfect Bell measurements, memory decoherence, and probabilistic heralding, the spectral norm of each elementary transport channel remains strictly contractive, \[\|T^{(\Phi_i)}\|_2\le\lambda_{\max}<1.\] Consequently, the norm of the effective multi-hop transport channel decays exponentially with propagation depth, \[\|T^{(\mathcal{N}_P)}\|_2 \le \lambda_{\max}^{L}. \label{eq:ptmdecay}\tag{2}\]

Equation (2 ) expresses the central physical mechanism underlying the present work: Bell correlations are progressively attenuated as entanglement propagates through successive swapping operations. This behaviour is closely analogous to finite-correlation and screening phenomena in many-body systems, where long-range correlations decay exponentially beyond a characteristic transport scale [12].

To quantify the operational strength of the transported Bell correlations, we introduce the Bell-correlation visibility \[C_{\mathrm{Bell}}(L) = C_0\,\lambda_{\max}^{L}, \label{eq:bellcorr}\tag{3}\] where \(C_0\) denotes the initial Bell-correlation visibility of the elementary links.

For realistic metropolitan fibre links, the distributed states are well approximated by Werner-like Bell-diagonal states of the form \[\rho_w = w\ket{\Phi^+}\bra{\Phi^+} + (1-w)\frac{\mathbb{I}}{4},\] where \(w\) characterizes the Bell-state visibility. For this class of states, violation of the CHSH Bell inequality occurs when [14] \[w>\frac{1}{\sqrt2}.\]

Operational Bell correlations therefore remain usable only up to a finite maximum swapping depth. Combining the exponential PTM decay with the CHSH threshold condition yields the maximum operational propagation depth \[L_{\max} = \left\lfloor \frac{ \log(1/\sqrt2 C_0^{-1}) }{ \log(\lambda_{\max}) } \right\rfloor. \label{eq:lmax}\tag{4}\]

Because the effective transport channels remain contractive, \[\lambda_{\max}<1,\] the operational correlation length remains finite even in globally connected networks, \[L_{\max}=\mathcal{O}(1).\]

This finite operational correlation length plays a central role throughout the remainder of the paper, since it dynamically constrains the subset of Bell pairs that remain physically usable for E91 authentication in realistic quantum communication infrastructures.

This finite-correlation mechanism plays a role analogous to screening phenomena in condensed-matter systems: correlations may propagate globally through the network topology, yet operational Bell nonlocality becomes spatially localized [12].

4 Emergent Operational Entanglement Graphs↩︎

For a node: \[A\in V,\] define the operational Bell neighbourhood: \[\mathcal{S}_A = \{B\in V:d(A,B)\le L_{\max}\}.\]

In sparse small-world graphs, the number of nodes accessible within distance \(L\) scales asymptotically as [8], [10]: \[|\mathcal{B}_L(A)| = \mathcal{O}((k-1)^L).\]

Since: \[k=\mathcal{O}(1), \qquad L_{\max}=\mathcal{O}(1),\] we obtain: \[|\mathcal{S}_A|=\Theta(1).\]

Therefore, every node possesses only a finite number of operational Bell partners independent of total network size.

This leads directly to the following result.

The operational entanglement graph therefore remains sparse even when the underlying physical network exhibits logarithmic global connectivity.

This emergent sparsification constitutes the key mechanism responsible for sub-quadratic authentication complexity [9], [11].

5 Authentication Complexity↩︎

Authentication requires discovering operational Bell partners within physically accessible neighbourhoods.

Unlike classical fully connected communication graphs, realistic E91 quantum networks cannot operationally exploit arbitrary node pairs because Bell correlations become exponentially suppressed beyond finite correlation depth [3], [15].

5.1 Sparse-Mixing Authentication Model↩︎

Our analysis assumes a physically realistic sparse-connectivity regime in which operational Bell links remain locally distributed throughout the network. In particular, we consider metropolitan quantum infrastructures where the number of operationally usable Bell partners associated with each node remains finite, while neighbourhood exploration retains logarithmic small-world scaling. We additionally assume that local Bell-verification attempts are approximately statistically independent over the relevant operational neighbourhood scale.

Under these conditions, each node explores a logarithmic neighbourhood of size \[n=\Theta(\log N),\] corresponding to the characteristic small-world exploration depth of the network. Because the number of operational Bell partners remains bounded independently of total network size, \[|\mathcal{S}_A|=\Theta(1),\] the probability of successfully identifying a CHSH-usable Bell partner remains asymptotically finite, \[P_{\mathrm{succ}}=\Theta(1).\]

This regime captures the physically relevant situation in which operational Bell connectivity remains sparse despite the existence of global network reachability through small-world transport paths.

5.2 Sub-Quadratic Authentication Scaling↩︎

The logarithmic overhead originates from probabilistic Bell-partner discovery in sparse operational neighbourhoods. Importantly, this scaling law emerges directly from finite-correlation transport physics rather than from externally imposed graph-theoretic assumptions.

6 Distributed Bell-State Verification↩︎

We now discuss the physical verification of distributed Bell correlations.

Consider two remote nodes sharing an unknown bipartite state \[\rho_{AB},\] together with a trusted Bell reference pair \[\ket{\Phi^+}_{A'B'}.\]

Ancilla-assisted distributed SWAP measurements allow Bell-state certification without directly measuring the primary distributed qubits. The protocol combines local Hadamard operations, controlled-SWAP interactions, and computational-basis measurements performed on ancillary qubits located at the remote network nodes.

Defining the Bell fidelity \[F = \bra{\Phi^+} \rho_{AB} \ket{\Phi^+},\] the probability of obtaining the ancilla outcome \((0,0)\) is \[P_{00} = \frac{1+F}{2}. \label{eq:p00}\tag{5}\]

Since separable two-qubit states satisfy \[F\le\frac{1}{2},\] the condition \[P_{00}>\frac{3}{4}\] constitutes a sufficient witness of entanglement.

The full derivation of the distributed SWAP-based verification protocol, including the evaluation of the SWAP expectation values and the separability bounds, is provided in the Supplemental Material.

6.1 Remarks on Clifford Structure↩︎

The verification protocol employs controlled-SWAP operations.

Because the controlled-SWAP (Fredkin) gate is non-Clifford, a full Gottesman–Knill stabilizer simulation is not generally applicable. Nevertheless, Bell-diagonal inputs admit an effective reduced correlator description compatible with stabilizer propagation techniques [7].

The protocol should therefore be interpreted as a physically motivated Bell-certification primitive rather than as a purely stabilizer-based Clifford circuit.

7 Physical Interpretation↩︎

The results obtained here support a broader physical interpretation of realistic quantum communication infrastructures.

In conventional communication theory, topology is externally designed while communication resources propagate over fixed graphs. In realistic quantum networks, however, operational connectivity itself becomes dynamically generated by the transport properties of entanglement.

Loss, decoherence, imperfect Bell-state measurements [3], and finite quantum-memory coherence times induce finite operational correlation lengths analogous to screening lengths in many-body physics [12], [13]. As a consequence, the effective operational behaviour of the network differs fundamentally from its underlying physical topology. Although the physical fibre infrastructure may remain globally connected and retain small-world communication properties, the subset of Bell correlations that remains operationally usable for E91 authentication becomes intrinsically sparse. Authentication resources therefore scale sub-quadratically with network size, while the effective operational topology itself emerges dynamically from the transport and attenuation of Bell correlations across the network.

From this perspective, scalable quantum communication infrastructures may be interpreted as distributed nonequilibrium many-body systems whose effective geometry is not statically imposed by the physical graph, but instead emerges from the collective propagation of entanglement under realistic transport constraints.

8 Conclusions↩︎

In this work we have shown that authentication complexity in realistic E91 quantum communication networks is fundamentally governed by the physics of entanglement transport rather than by naive combinatorial pair counting. Using a PTM-based description of multi-hop Bell-correlation propagation, we demonstrated that loss, decoherence, imperfect swapping operations, and LOCC-conditioned transport induce finite operational correlation lengths that dynamically constrain the set of physically usable Bell pairs. As a consequence, realistic quantum metropolitan infrastructures generate sparse emergent operational entanglement graphs even when the underlying fibre topology exhibits global small-world connectivity.

The central contribution of the paper is the demonstration that this physical sparsification mechanism naturally leads to sub-quadratic authentication scaling laws. In sparse metropolitan quantum networks with bounded operational degree, the number of CHSH-usable Bell pairs scales linearly with network size, while authentication overhead acquires only a logarithmic correction associated with probabilistic Bell-partner discovery. Under sparse-mixing assumptions, the resulting authentication complexity scales as \[\Theta(N\log N).\]

More broadly, the present framework suggests a new physical interpretation of scalable quantum communication infrastructures as distributed entanglement-transport systems whose effective operational geometry emerges dynamically from correlation propagation under realistic constraints. This perspective establishes a direct conceptual bridge between quantum-network theory, open-system correlation transport, entanglement percolation, and scalable E91 authentication architectures, providing a physically grounded route toward realistic large-scale quantum-secured communication networks [9]–[11].

Acknowledgments↩︎

This work has been supported by the “Hub Nacional de Excelencia en Comunicaciones Cuánticas” project, funded by the Ministerio para la Transformación Digital y de la Función Pública within the framework of the Plan de Recuperación, Transformación y Resiliencia and the Mecanismo de Recuperación y Resiliencia. Funded by the European Union – NextGenerationEU.

9 Distributed SWAP-Based Bell-State Verification↩︎

In this Appendix we derive the distributed ancilla-assisted SWAP verification protocol used in the main text and establish the corresponding separability bound.

9.1 Protocol Definition↩︎

Consider two remote nodes, Alice and Bob, sharing an unknown two-qubit state \[\rho_{AB},\] together with a trusted Bell reference pair \[\ket{\Phi^+}_{A'B'} = \frac{1}{\sqrt2} \left( |00\rangle+|11\rangle \right).\]

Ancillary qubits \[a_A,\qquad a_B\] are initialized in the computational state \[|0\rangle_{a_A}\otimes |0\rangle_{a_B}.\]

The global initial state is therefore \[\rho_0 = |00\rangle\langle00|_{a_A a_B} \otimes \rho_{AB} \otimes |\Phi^+\rangle\langle\Phi^+|_{A'B'}.\]

Hadamard gates are first applied to both ancillas, preparing \[|+\rangle = \frac{|0\rangle+|1\rangle}{\sqrt2}.\]

The ancilla subsystem becomes \[|+\rangle_{a_A}\otimes |+\rangle_{a_B}.\]

Controlled-SWAP operations are then applied locally: \[\begin{align} U_A &= |0\rangle\langle0|_{a_A}\otimes I + |1\rangle\langle1|_{a_A}\otimes S_A, \\ U_B &= |0\rangle\langle0|_{a_B}\otimes I + |1\rangle\langle1|_{a_B}\otimes S_B, \end{align}\] where: \[S_A\equiv S_{AA'}, \qquad S_B\equiv S_{BB'}\] denote the SWAP operators acting on the corresponding subsystems.

Finally, Hadamard gates are again applied to both ancillas and the ancillas are measured in the computational basis.

9.2 Joint Ancilla Probabilities↩︎

Define \[\sigma = \rho_{AB} \otimes |\Phi^+\rangle\langle\Phi^+|_{A'B'}.\]

After the controlled-SWAP operations and the second Hadamard layer, the joint ancilla measurement probabilities satisfy

where expectation values are evaluated with respect to \(\sigma\) ¹.

9.3 Evaluation of the SWAP Expectation Values↩︎

Define the Bell fidelity \[F = \bra{\Phi^+} \rho_{AB} \ket{\Phi^+}.\]

Using the SWAP identity \[S_{AA'} (|i\rangle_A|k\rangle_{A'}) = |k\rangle_A|i\rangle_{A'},\] one obtains \[\langle S_A\rangle = \mathrm{Tr}[S_A\sigma] = F.\]

By symmetry, \[\langle S_B\rangle = F.\]

Similarly, since the Bell reference state is invariant under subsystem exchange, \[\langle S_A S_B\rangle = 1.\]

Substituting these results into Eq. (6 ) yields \[P_{m_A,m_B} = \frac{1}{4} \Big[ 1 + (-1)^{m_A}F + (-1)^{m_B}F + (-1)^{m_A+m_B} \Big].\]

Selecting the outcome \[m_A=m_B=0\] gives \[P_{00} = \frac{1}{4}(1+F+F+1) = \frac{1+F}{2}. \label{eq:p0095appendix}\tag{7}\]

9.4 Separability Bound↩︎

We now prove that any separable two-qubit state satisfies \[F\le\frac{1}{2}.\]

Consider first a pure product state \[|\psi\rangle_A\otimes |\varphi\rangle_B,\] with \[|\psi\rangle = \alpha|0\rangle+\beta|1\rangle, \qquad |\varphi\rangle = \gamma|0\rangle+\delta|1\rangle,\] and normalization conditions \[|\alpha|^2+|\beta|^2=1, \qquad |\gamma|^2+|\delta|^2=1.\]

The overlap with the Bell state is \[\langle\Phi^+|\psi\varphi\rangle = \frac{1}{\sqrt2} (\alpha\gamma+\beta\delta).\]

The corresponding Bell fidelity becomes \[F_{\mathrm{prod}} = \frac{1}{2} |\alpha\gamma+\beta\delta|^2.\]

Applying the Cauchy–Schwarz inequality, \[|\alpha\gamma+\beta\delta|^2 \le (|\alpha|^2+|\beta|^2) (|\gamma|^2+|\delta|^2) = 1,\] one obtains \[F_{\mathrm{prod}} \le \frac{1}{2}.\]

Now consider a general separable mixed state \[\rho_{AB} = \sum_k p_k \rho_A^{(k)} \otimes \rho_B^{(k)}, \qquad p_k\ge0, \qquad \sum_k p_k=1.\]

Since the Bell fidelity is linear in \(\rho_{AB}\), \[F = \sum_k p_k \bra{\Phi^+} \rho_A^{(k)} \otimes \rho_B^{(k)} \ket{\Phi^+}.\]

Each term individually satisfies \[F_k\le\frac{1}{2},\] and therefore \[F \le \sum_k p_k \frac{1}{2} = \frac{1}{2}.\]

Consequently, \[F>\frac{1}{2}\] constitutes a sufficient witness of bipartite entanglement.

Combining this result with Eq. (7 ) immediately yields the operational certification condition \[P_{00}>\frac{3}{4},\] used throughout the main text.

References↩︎

---

1. The joint ancilla probability distribution is obtained by explicitly propagating the ancilla density operator through the two Hadamard layers and the controlled-SWAP operations, followed by a partial trace over the data registers. Writing \[\sigma=\rho_{AB}\otimes |\Phi^+\rangle\langle\Phi^+|_{A'B'},\] the controlled-SWAP operations imprint the expectation values of the SWAP operators onto the ancilla coherences. After the second Hadamard transformation, the resulting interference terms generate the parity structure appearing in Eq. (6 ). The full derivation follows from explicit expansion of the computational-basis amplitudes and repeated application of the identities \[S_A^2=S_B^2=I\] together with cyclicity of the trace.↩︎