---
title: Quantum-enhanced HE Resource Allocation (QuHE)
url: https://www.emergentmind.com/topics/quantum-enhanced-homomorphic-encryption-resource-allocation-quhe
type: topic
---

# Quantum-enhanced HE Resource Allocation (QuHE)

Searching arXiv for the QuHE paper and closely related QHE resource-allocation literature.
Attempting arXiv query: "QuHE: Optimizing Utility-Cost in Quantum Key Distribution and Homomorphic Encryption Enabled Secure Edge Computing Networks".
Quantum-enhanced Homomorphic Encryption Resource Allocation (QuHE) denotes a resource-allocation framework for secure mobile edge computing (MEC) that jointly combines quantum key distribution (QKD), transciphering, and homomorphic encryption (HE). In the formulation of the original work, QKD distributes symmetric keys, transciphering bridges symmetric encryption, and HE processes encrypted data at the server; the associated optimization balances QKD utility, HE security, processing cost, and wireless transmission cost under a mixed-integer non-linear program described as non-convex and NP-hard [2507.06086]. In this sense, QuHE is an optimization layer over a secure edge-computing stack rather than a standalone quantum homomorphic encryption protocol.

## 1. System architecture and problem scope

The QuHE framework is organized around four components. A **Central Key Center** generates QKD keys over a mesh of $L$ optical links. **Edge Clients** indexed by $n=1,\dots,N$ receive symmetric keys via QKD, encrypt data, and upload to a nearby server. A **Transciphering Gateway at Server** homomorphically transciphers symmetrically encrypted client data into HE ciphertexts. A **Mobile Edge Server** then performs fully homomorphic evaluation on encrypted data and returns encrypted results [2507.06086].

The optimization variables span communication, cryptographic, and compute layers. The model includes route-link incidence indicators $a_{ln}\in\{0,1\}$, entanglement or key-generation rates $\phi_n$, link Werner parameters $w_l\in(0,1]$, CKKS polynomial degrees $\lambda_n\in\{\lambda^{\rm set}_1,\dots,\lambda^{\rm set}_M\}$, client uplink powers $p_n\le p_n^{\max}$, bandwidth allocations $b_n\ge 0$ with $\sum_n b_n\le B_{\rm tot}$, client CPU cycle-rates $f_n^{(c)}\le f_n^{(c),\max}$, and server CPU cycle-rates $f_n^{(s)}\ge 0$ with $\sum_n f_n^{(s)}\le f_{\rm tot}$. The model also tracks encrypted traffic size $d_n^{(\mathrm{tr})}$, server-side workload $d_n^{(\mathrm{cmp})}$, switched-capacitance coefficients $\kappa_n^{(c)}$ and $\kappa^{(s)}$, and client-specific security weights $\varsigma_n$ [2507.06086].

A central feature of the framework is that cryptographic quality and system cost are treated as jointly allocable resources. This distinguishes QuHE from work that studies QKD performance, HE parameterization, communication scheduling, or edge-computing delay in isolation. A plausible implication is that QuHE is best understood as a cross-layer design methodology in which cryptographic knobs such as route quality and CKKS polynomial degree are optimized together with radio and compute budgets.

## 2. Utility, security, and cost functionals

QuHE quantifies QKD performance through an end-to-end Werner parameter on route $n$, written as $\varpi_n$, and a secret-key fraction $F_{\rm skf}(w)$ for a Werner state of fidelity $w$. The overall QKD utility is defined multiplicatively as
$$
U_{\rm QKD}=\prod_{n=1}^N \left[\phi_n\,F_{\rm skf}(\varpi_n)\right],
$$
with $\phi_n\ge \phi_n^{\min}$ [2507.06086]. Because the utility is a product across routes, low performance on one route can directly suppress the joint objective.

HE security is modeled separately from QKD utility. Let $f^{(\rm msl)}(\lambda_n)$ denote the minimal-bit security predicted by an LWE-estimator for polynomial degree $\lambda_n$. Then the weighted sum security is
$$
S_{\rm HE}=U_{\rm msl}=\sum_{n=1}^N \varsigma_n\,f^{(\rm msl)}(\lambda_n).
$$
This design gives QuHE an explicit security-allocation mechanism: clients with larger $\varsigma_n$ can be driven toward larger $\lambda_n$ when the optimization favors HE hardness [2507.06086].

Delay and energy are decomposed into encryption, transmission, and server-computation terms. The client-side encryption delay is expressed through CPU cycles required for symmetric or HE key encryption and the allocated client CPU cycle-rate. The uplink rate is
$$
r_n=b_n\log_2\!\left(1+\frac{p_n g_n}{N_0 b_n}\right),
$$
from which transmission delay and transmission energy follow as functions of $d_n^{(\rm tr)}$ and $r_n$. Server computation delay and energy depend on transciphering and HE evaluation costs, the number of processed tokens or samples, and the assigned server CPU cycle-rate [2507.06086].

The aggregate latency and energy objectives are
$$
T_{\rm tot}=\max_n\left\{T_n^{(\rm enc)}+T_n^{(\rm tr)}+T_n^{(\rm cmp)}\right\},
\qquad
E_{\rm tot}=\sum_{n=1}^N \left(E_n^{(\rm enc)}+E_n^{(\rm tr)}+E_n^{(\rm cmp)}\right).
$$
These definitions make the delay term bottleneck-driven and the energy term system-wide. This suggests that the optimizer simultaneously controls tail latency and total energy expenditure rather than average per-client delay.

## 3. Joint optimization and algorithmic decomposition

The joint objective introduces positive weights $\alpha,\beta,\gamma_T,\gamma_E$ and maximizes
$$
\alpha U_{\rm QKD}+\beta S_{\rm HE}-\gamma_T T_{\rm tot}-\gamma_E E_{\rm tot}
$$
subject to capacity, fidelity, bandwidth, power, computation, and delay constraints [2507.06086]. The paper identifies three sources of hardness: multiplicative terms of the form $\phi_nF_{\rm skf}(\varpi_n)$, pseudoconvex transmission ratios involving $d_n^{(\rm tr)}/r_n$, and discrete choices of $\lambda_n$. Together with cross-client and cross-link coupling, these yield a mixed-integer non-linear program that is explicitly characterized as non-convex and NP-hard [2507.06086].

QuHE addresses this with a three-stage alternating optimization. **Stage 1** optimizes $\{\phi_n,w_l\}$. Since $U_{\rm QKD}$ is increasing in both $\phi$ and $w$, the formulation sets
$$
w_l=1-\frac{\sum_n a_{ln}\phi_n}{\beta_l},
$$
then log-transforms the product objective by introducing $\varphi_n=\ln \phi_n$, producing a convex problem solved with off-the-shelf convex solvers such as CVX [2507.06086].

**Stage 2** optimizes $\{\lambda_n,T\}$. For fixed remaining variables, the latency variable $T$ is set by the longest per-client pipeline, i.e., the envelope of $T_n^{(\rm enc)}+T_n^{(\rm tr)}+T_n^{(\rm cmp)}$. The resulting discrete optimization over $\lambda_n$ is handled by branch-and-bound to global optimality [2507.06086].

**Stage 3** optimizes $\{p_n,b_n,f_n^{(c)},f_n^{(s)},T\}$. The energy terms are convex quadratics except the transmission-energy factor involving $d_n^{(\rm tr)}/r_n$, which the paper treats as pseudoconvex. An auxiliary variable $z_n$ is introduced to rewrite the problematic term into a form that yields a jointly concave problem in $(p,b,f^{(c)},f^{(s)},T)$ for fixed $z$, after which QuHE alternates between closed-form updates of $z_n$ and solution of the convex subproblem via CVX [2507.06086].

The resulting iterate structure is a block-coordinate ascent procedure over cryptographic, communication, and compute subblocks. A plausible implication is that QuHE inherits the interpretability of modular resource-allocation pipelines while preserving strong coupling across layers through the outer loop.

## 4. Computational complexity and theoretical guarantees

The computational burden of QuHE is decomposed stage-wise. Stage 1 solves a convex program in $N+L$ variables and $\mathcal O(N+L)$ constraints with complexity
$$
\mathcal O\!\left((N+L)^{3.5}\log\frac1\epsilon\right).
$$
Stage 2 has branch-and-bound worst-case complexity $\mathcal O(M^N)$ when each client chooses from $M$ discrete CKKS parameter options. Stage 3 solves a convex subproblem in approximately $4N$ variables with per-inner-loop complexity
$$
\mathcal O\!\left(N^{3.5}\log\frac1\epsilon\right),
$$
multiplied by a small number of alternating updates. Over $\mathcal I$ outer iterations, the total complexity is
$$
\mathcal I\!\left[\mathcal O\!\left((N+L)^{3.5}\log\tfrac1\epsilon\right)+\mathcal O(M^N)+\mathcal O\!\left(N^{3.5}\log\tfrac1\epsilon\right)\right]
$$
[2507.06086].

The paper states two formal guarantees. **Theorem 1 (Stationarity)** asserts: “Under mild regularity, every limit point of the QuHE iterate sequence is a stationary solution of the original mixed-integer program.” **Proposition 2 (Global opt. in subblocks)** asserts: “Stages 1 and 2 produce the global optimum over their blocks; Stage 3 obtains a global optimum due to pseudoconvexity of the transformed problem” [2507.06086].

The convergence proof sketch invokes standard block-coordinate ascent arguments and specifically cites Chen et al. 2012, *SIAM Journal on Optimization*. Within the internal logic of the framework, the theoretical role of the three-stage split is therefore not merely heuristic: it is the mechanism used to recover stationarity for the full mixed discrete-continuous objective while retaining global optimality on two blocks and transformed global optimality on the third.

## 5. Empirical evaluation and observed operating regimes

The simulation environment uses the SURFnet backbone with $L=18$ links and $N=6$ routes, specifically Hilversum to destinations including Delft and Zwolle. The CKKS parameter set is $\{2^{15},2^{16},2^{17}\}$. Client and server compute budgets are set to $f_n^{(c),\max}=3\,\mathrm{GHz}$ and $f_{\rm tot}=20\,\mathrm{GHz}$, while bandwidth and power budgets are $B_{\rm tot}=10\,\mathrm{MHz}$ and $p_n^{\max}=0.2\,\mathrm{W}$. Traffic sizes are fixed at $d_n^{(\mathrm{tr})}=3\times 10^9$ bits and $d_n^{(\mathrm{cmp})}=160$ tokens. The channel model uses path-loss $128.1+37.6\log_{10}d$ with Rayleigh small-scale fading, and the objective weights are $(\alpha_{\rm QKD},\alpha_{\rm HE},\alpha_T,\alpha_E)=(1,0.01,10^{-4},10^{-4})$ [2507.06086].

Three baselines are used. **AA (Average Allocation)** fixes the minimum $\lambda$ and equalizes $b,p,f^{(c)},f^{(s)}$. **OLAA** optimizes only $\lambda$ through Stage 2 while averaging the remaining variables. **OCCR** optimizes only $(p,b,f^{(c)},f^{(s)})$ through Stage 3 while fixing $\lambda$ [2507.06086]. The evaluated metrics are objective value, total energy $E_{\rm tot}$, delay $T_{\rm tot}$, and security $S_{\rm HE}$.

The reported outcomes are specific. QuHE converges within approximately $30$ outer iterations, and the Stage 3 duality gap is at most $10^{-5}$. Over $100$ random starts, $56\%$ of runs reach within $5\%$ of the global best and $88\%$ within $10\%$. For the Stage 1 subproblem, the convex log-method matches the gradient-descent optimum in $0.02\,\mathrm{s}$ versus $0.25\,\mathrm{s}$ for gradient descent and $1.8\,\mathrm{s}$ for simulated annealing. In the full-system comparison, QuHE improves the joint objective over AA, OLAA, and OCCR by $15$–$30\%$ [2507.06086].

The sensitivity analysis attributes distinct gains to different resource regimes. Increasing $p_n^{\max}$ yields diminishing returns in AA and OLAA but is more fully exploited by QuHE. Increasing $B_{\rm tot}$ benefits QuHE and OCCR strongly, whereas AA and OLAA saturate early. Larger $f_n^{(c),\max}$ or $f_{\rm tot}$ improves QuHE steadily, with corresponding QoS and security gains [2507.06086]. The design guidance derived in the paper is explicit: if $\alpha_{\rm QKD}\approx\alpha_{\rm HE}\gg\alpha_T,\alpha_E$, security is prioritized over cost; in bandwidth-scarce regimes, higher $\lambda_n$ should be preferred over more $b_n$; and in power-rich but compute-poor regimes, raising $f_n^{(c)}$ first reduces delay [2507.06086].

## 6. Position within homomorphic-encryption and QHE resource literature

QuHE belongs to a broader literature in which homomorphic evaluation is feasible only under carefully profiled resource budgets, but its immediate cryptographic substrate is classical HE integrated with QKD-enabled key distribution rather than quantum homomorphic evaluation of quantum states. This suggests that the “quantum-enhanced” qualifier refers to the QKD layer and the secure-network architecture, not to a universal QHE evaluator in the sense used in delegated quantum-computation protocols.

The contrast becomes clearer against quantum homomorphic encryption results. Broadbent and Jeffery’s EPR-based QHE scheme has decryption complexity approximately $O(t^2)$ in the number of $T$ gates, whereas the AUX-based construction restores compactness for fixed $T$-depth at the price of an evaluation key of size $O\!\left(n^{2^{L-1}+1}\right)$, exponential in $T$-depth [1412.8766]. Liang-style perfectly secure non-interactive QHE, when instantiated on the $k=2$ Bernstein–Vazirani construction with linear $T$-count $T(n)=14n$, achieves quasi-compactness $O(M)$ with client decryption cost linear in the number $M$ of $T/T^\dagger$ gates and total quantum-communication bandwidth $2n+2M=O(n)$ [2303.17426]. Rebit-based and interactive QHE schemes for polynomial-sized circuits exhibit further privacy-resource trade-offs: Scheme 1 and Scheme 2 scale as $\Theta(nd)$ for restricted circuit families, while universal interactive Clifford+$T$ evaluation scales as $O(n(n+R)\kappa)$ in entanglement and classical communication, with verification adding $O(nm)$ overhead [1810.01166]. Distributed universal QHE based on $(k,n)$-threshold quantum state sharing replaces pre-shared entanglement with sequential multi-server cooperation, but classical key storage grows as $O(n^{k-1})$ and total classical rounds are $2k$ [2502.18880].

| Work | Dominant resource driver | Structural trade-off |
|---|---|---|
| QuHE | Joint optimization over $\phi,w,\lambda,p,b,f^{(c)},f^{(s)}$ | Balances QKD utility, HE security, delay, and energy [2507.06086] |
| EPR/AUX QHE | $T$-count or $T$-depth | $O(t^2)$ decryption versus exponential eval-key growth in depth [1412.8766] |
| Liang-style QHE on BV | $M=\#$ of $T/T^\dagger$ gates | Perfect security and zero Eval interaction with decryption $O(M)$ [2303.17426] |
| Polynomial-sized QHE variants | Circuit family, $R$, $\kappa$, $m$ | Perfect privacy for restricted families or interactive universality with higher cost [1810.01166] |
| $(k,n)$-threshold QHE | Threshold $k$ and server pool size $n$ | Collusion resistance versus rounds and classical-storage blowup [2502.18880] |

A common misconception is to treat all “HE with quantum ingredients” systems as instances of QHE. The literature does not support that equivalence. QuHE optimizes a networked system in which HE is classical and the quantum component is the QKD key-distribution substrate [2507.06086], whereas the QHE papers address encrypted quantum data, delegated quantum computation, and resource scaling in the presence of Clifford and non-Clifford gates [1412.8766; 2303.17426; 1810.01166; 2502.18880]. The shared theme is resource allocation under cryptographic constraints, but the operational objects being encrypted and evaluated differ fundamentally.

Source: https://www.emergentmind.com/topics/quantum-enhanced-homomorphic-encryption-resource-allocation-quhe