the advent of quantum information science has heralded the birth of two exciting new fields of research in quantum mechanics : _ quantum computation _ and _ quantum information networks _ @xcite .
quantum computation involves computation via quantum mechanical techniques , using quantum states known as qubits , to outperform conventional computers for certain computational problems  @xcite .
quantum information networks , the quantum analogy of the internet , are expected to consist of nodes , where information is processed and stored , connected by quantum channels , through which quantum information can be transmitted . both quantum computation and quantum information networks share several key similarities , as they are both concerned with the creation , processing and distribution of quantum states .
they are , however , both vulnerable to the loss or destruction of quantum states : through de - coherence , node or channel failures , or the intervention of malicious parties . for this reason protocols that allow for the secure and robust distribution of quantum states
are vital for the successful implementation of these protocols .    in computer science ,
shamir  @xcite proposed _ secret sharing _ as a protocol that enables the secure distribution of classical information in networks .
secret sharing can be used to enhance the security of communication networks such as the internet , telecommunication systems and distributed computers .
quantum resources allow the extension of secret sharing into the quantum domain in one of two ways .
the first involves using quantum resources to enhance the security of classical information in crypto - communication systems , and is known as _ quantum secret sharing _  @xcite .
the second uses quantum resources to securely encode and distribute quantum states .
this second class , which we term _ quantum state sharing _ to distinguish from the first class of protocols , is of more significance to quantum information protocols , which are primarily concerned with quantum states . in @xmath1
threshold quantum state sharing , originally proposed by cleve _
et al . _
@xcite , a secret state is encoded by the `` dealer '' into an @xmath2-party entangled state or  share " . any @xmath3 players ( the authorized group ) can collaborate to retrieve the quantum state , whereas the remaining @xmath4 players ( the adversary group ) , even when conspiring , acquire nothing . as a consequence of the no - cloning theorem , the number of players in the authorized group must consist of a majority of the players , @xmath5 . for quantum computation and quantum information networks
, quantum state sharing provides a secure framework for distributed quantum communication , protecting the quantum states from the loss up to @xmath6 shares due to destruction , failures , or malicious conspiracies .    in general , most theoretical proposals for quantum state sharing , by cleve _
et al . _
@xcite and other subsequent theoretical proposals  @xcite , are formulated for the discrete regime .
these proposals require qudits ( multi - dimensional qubits ) for the encoding and distribution of the secret quantum states .
experimentally , however , the control and coupling of qudits is extremely challenging , making an experimental demonstration of quantum state sharing in the discrete regime a difficult task . recently ,
tyc and sanders  @xcite extended quantum state sharing to the continuous variable regime .
their proposal utilizes einstein - podolsky - rosen ( epr ) entanglement , an experimentally accessible quantum resource  @xcite , which has been used in several quantum information protocols including quantum teleportation  @xcite , quantum dense coding  @xcite and entanglement swapping  @xcite .
importantly , tyc _ et al . _
@xcite , later showed that continuous variable quantum state sharing could be extended to a @xmath1 threshold scheme , without a corresponding scale up in quantum resources .
this makes quantum state sharing an important and powerful security protocol for future quantum information systems .    in this paper
we experimentally demonstrate @xmath7 threshold quantum state sharing in the continuous variable regime  @xcite . in our scheme
, a secret coherent state is encoded into a tripartite entangled state and distributed to three players .
in general , arbitrary quantum states can be shared via quantum state sharing .
experimentally we demonstrate quantum state sharing using secret coherent states with unknown coherent amplitude and phase displacements .
the coherent states form an over - complete basis , making it possible to infer performance for arbitrary input states from our results .
we demonstrate that any two of the three players can form an authorized group to reconstruct the state , and characterize this state reconstruction in terms of fidelity ( @xmath8 ) , signal transfer ( @xmath9 ) , and reconstruction noise ( @xmath10 ) .
these measures show a direct verification of our tripartite continuous variable entanglement .
the entangled state in the dealer protocol ensures that the quantum features of the secret state can be reconstructed by the authorized group , whilst simultaneously providing security against individual players .
we also demonstrate that security of our scheme can be enhanced using classical encoding techniques .
this paper is presented in the following manner , in section ii we describe the dealer protocol for encoding and distributing the secret state to the players , and we describe a set of  disentangling protocols " that can be used to reconstruct the secret state by the corresponding authorized groups . in section
iii we present techniques to characterize the state reconstruction . in sections
iv and v we describe the experimental setup and present the experimental results .
finally we conclude in section vi .
quantum state sharing scheme . @xmath11 : secret quantum state , opa : optical parametric amplifier , @xmath12 : beam splitter with reflectivity @xmath13 and transmitivity @xmath14 , @xmath15 optical phase delays , @xmath16 : additional gaussian noise , @xmath17 electronic gains.,width=302 ]    in this paper we consider quantum states that reside at a the sideband frequency , @xmath18 , of an electromagnetic field .
these quantum states include the secret and the entangled states use in the dealer protocol , and can be described using the field annihilation operator @xmath19 .
this operator is expressed in terms of the amplitude @xmath20 and phase @xmath21 quadrature operators , which are non - commuting observables , described by the commutation relation @xmath22=2i$ ] . without loss of generality
, we can express these quadrature operators in terms of a steady state component , and fluctuating component as @xmath23 , where the variance and the mean of these quadrature operators are expressed as @xmath24 and @xmath25 , respectively .      for the @xmath7 quantum state sharing scheme , we extend the original dealer protocol proposed by tyc and sanders  @xcite ( _ quantum protocol _ in fig .
[ fig : fig0 ] ) . in the original protocol
, the secret state is encoded by the dealer by interfering the secret quantum state with one of a pair of epr entangled beams on a 1:1 beam splitter .
this interference hides the secret state in the relatively larger amplitude and phase noise of the entangled beam .
the two outputs from this beam splitter , and the second entangled beam , form the three shares to be distributed to the players in the protocol . the second epr entangled beam , although not containing a component of the secret state , does share entanglement with the other two beams .
this entanglement ensures that the quantum features of the secret state can be reconstructed .
the security of the scheme is governed by the strength of the entanglement in the dealer protocol . in the case of finite entanglement
, some information of the secret state can still be retrieved by individual players .
the security can be further enhanced , however , by using additional classical encoding techniques in the dealer protocol .
this is achieved by encoding correlated gaussian noise onto each of the players shares ( _ classical protocol _ in fig .
[ fig : fig0 ] ) .
we describe the additional gaussian noise encoded onto the shares by @xmath26 , which has a mean of @xmath27 and variance of @xmath28 .
the variance of the gaussian noise encoded onto the quadratures of each of the shares can be controlled via an electronic gain @xmath29  ( fig .
[ fig : fig0 ] ) .
the resulting shares after the classical encoding can be expressed as  @xcite @xmath30 where we have assumed that the epr entangled beams are generated by interfering an phase and an amplitude squeezed beam on a 1:1 beam splitter with a relative optical phase shift of @xmath31 .
the quadratures of the epr entangled beam are given by @xmath32 where @xmath33 and @xmath34 correspond to the quadratures of the squeezed beams .
the variance of the squeezed quadratures of the squeezed beams are expressed as @xmath35 and @xmath36 .       quantum state sharing scheme .
for the players 1 and 2 as the authorized group : ( a ) mach - zehnder reconstruction protocol .
for the players 1 and 3 ( or players 2 and 3 ) as the authorized group : ( b ) phase insensitive amplifier reconstruction protocol .
( c ) two optical parametric amplifier reconstruction protocol ( d ) feed - forward reconstruction protocol ( e ) two feed - forward reconstruction protocol .
@xmath37 : reconstructed quantum state , @xmath29 : electronic gain and am : amplitude modulator .
switch symbol : represents the use of either player 1 or player 2 in the corresponding reconstruction protocols .
, width=302 ]    for @xmath7 quantum state sharing , which is the simplest non - trivial quantum state sharing scheme , there exists a class of protocols that can be used to reconstruct the secret state .
these reconstruction protocols can be thought of as _ disentangling protocols _ as the secret state is embedded within two states which are epr entangled .
this is analogous to the disentangling protocols in the discrete regime @xcite .
some of these reconstruction protocols are shown in figure  [ fig : fig1 ] .
the specific state reconstruction protocol used in the @xmath7 quantum state sharing scheme depends on the constituent players which form the authorized group .
the authorized group formed when players 1 and 2 collaborate , which we henceforth denote as the \{1,2 } , can reconstruct the secret state using the _ mach - zehnder protocol _ , as shown in figure  [ fig : fig1 ]  ( a ) .
the \{1,2 } authorized group completes a mach - zehnder interferometer by interfering the shares on a 1:1 beam splitter .
the quadratures of the reconstructed secret are given by @xmath38 since this reconstruction protocol effectively reverses the dealer encoding protocol , the \{1,2 } authorized group can reconstruct the secret state to an arbitrary precision , independent of the amount of squeezing or additional gaussian noise employed in the dealer protocol .
for the \{1,3 } and \{2,3 } authorized groups , more complicated reconstruction protocols are required .
this complexity is due to the asymmetry of the entanglement and gaussian noise in each of the shares in the authorized groups .
the \{1,3 } and \{2,3 } authorized groups can , in theory , reconstruct the secret state to an arbitrary precision using a phase insensitive amplifier .
this can be achieved by carefully controlling the inherent noise coupled into the output state as a result of the amplification process , as shown in figure  [ fig : fig1 ]  ( b ) .
the output from a phase insensitive amplifier can be expressed by the quadrature equations  @xcite @xmath39 where @xmath29 is the amplifier gain .
the amplification process has two inputs @xmath40 and @xmath41 .
the second input @xmath41 is coupled into the quadratures of the output state as a result of the amplification process . typically , this second input corresponds to the quadratures of a vacuum state . for a general phase insensitive amplifier
, however , this second input can be arbitrary .
we utilize this second input in the phase insensitive amplifier reconstruction protocol . in this protocol
, share \{1 } ( or \{2 } depending on the corresponding authorized group ) is amplified using the phase insensitive amplifier . by replacing the amplifier noise coupled into the output state with share \{3 } ,
the resulting quadratures of the reconstructed secret can be expressed as @xmath42 by setting the amplifier gain to @xmath43 , the quadratures of the reconstructed secret are given by @xmath44 where @xmath45 and @xmath46 are the squeezed quadratures of the squeezed beams used to generate the entanglement in the dealer protocol . at an amplifier gain of @xmath43 , it is seen that in the limit of infinite squeezing , the secret state is reconstructed to an arbitrary precision without degradation .
we term this point the _ unity gain _ point ( analogous to the unity gain point in quantum teleportation @xcite ) . at the unity gain point
the expectation value of the quadrature amplitudes of the reconstructed state is the same as the secret state .
furthermore , the noise contributions do not appear on the quadratures of the reconstructed state . as a result
, the security of the scheme can be arbitrarily increased by either increasing the squeezing or the additional noise in the dealer protocol , without degrading the quality of the reconstructed state .
we point out the significance of the unity gain point , as all the reconstructions protocols presented in this paper can achieve some form of unity gain .
although in theory , this reconstruction protocol can be used to reconstruct the secret to an arbitrary precision , experimentally it is extremely difficult to directly access the second input field of the phase insensitive amplifier .
we now turn our attention to examining more experimentally achievable reconstruction protocols .      in their original proposal ,
tyc and sanders suggested using a pair of optical parametric amplifiers to perform the \{1,3 } and \{2,3 } secret reconstructions  @xcite , as shown in figure  [ fig : fig1](c ) .
we term this protocol the _ two optical parametric amplifier protocol_. in this protocol , the two shares are interfered on a 1:1 beam splitter .
the two resulting beams are each noiselessly amplified using phase sensitive optical parametric amplifiers , with amplifying gains of @xmath47 and @xmath48 respectively . after the noiseless amplification , the secret state is reconstructed by interfering the two amplified beams on a second 1:1 beam splitter .
the quadrature of the reconstructed secret can be expressed by @xmath49 where @xmath29 is the amplifying gain of the optical parametric amplifiers , and the coefficients @xmath50 are given by @xmath51 at an amplifying unity gain of @xmath52 , the quadratures of the reconstructed state can be expressed as @xmath44 in the limit of infinite squeezing in the dealer protocol and at unity gain , the secret state is reconstructed to an arbitrary precision .
this scheme requires significant quantum resources , however , with two optical parametric amplifiers in the reconstruction protocol .
furthermore , in the reconstruction protocol these optical parametric amplifiers must have precisely controlled amplifying gains as well as high non - linearity .
experimentally , high non - linearity can be achieved by using high peak power pulsed light sources , either in q - switched or mode - locked setups , or by enhancing the optical intensity within an optical resonator .
however , both of these techniques cause significant coupling of vacuum fields into the output state , resulting in a significant decrease of quantum efficiency .
the pulsed systems often suffer distortion of optical wave fronts in the non - linear medium , resulting in poor optical interference and losses , whilst the resonators couple in vacuum fields via intra - resonator losses , the resonator mirrors and the second harmonic pump field .
for these reasons it is desirable to investigate reconstruction protocols that do not rely on optical parametric amplifiers , but instead utilize linear optics , which are not susceptible to these type of losses and inefficiencies .
an alternative reconstruction protocol that uses linear optics and electro - optic feed - forward to reconstruct the secret state  @xcite is shown in figure  [ fig : fig1 ]  ( d ) .
we term this protocol the _ single feed - forward reconstruction protocol_. in this protocol the shares are interfered on a beam splitter , where the two resulting output beams are denoted as @xmath53 and @xmath54 .
the proportion of entanglement and additional noise between share \{3 } and share \{1 } ( or \{2 } ) are not equal , hence , an appropriate beamsplitter ratio must be chosen so that the entanglement and additional noise contributions are proportional on one of the quadratures of the beam splitter output @xmath53 as a result of this interference . in the limit of infinite squeezing or additional noise in the dealer protocol , the optimum beam splitter ratio is 2:1 ( for convenience we will use this beam splitter ratio for the rest of this analysis unless otherwise stated ) .
this interference reconstructs the phase quadrature of the secret state on the phase quadrature of beam splitter output @xmath53 . as a result of this interference the amplitude quadrature @xmath55 obtains additional noise fluctuations .
it is possible to cancel the noise on the amplitude quadrature @xmath55 , however , by recognizing that this noise is correlated with the noise on the amplitude quadrature @xmath56 . by detecting @xmath57 and imparting these fluctuations onto @xmath55 with a well chosen electronic gain @xmath29 via an electro - optic feed - forward loop ,
it is possible to reconstruct the amplitude quadrature of the secret state . after the electro - optic feed - forward
, the quadratures of the reconstructed secret can be expressed as @xmath58 where @xmath59 denotes the optical quadrature gains of the reconstructed secret , given by @xmath60 .
the phase quadrature gain is set by the reconstruction beam splitter ratio 2:1 to be @xmath61 , whilst the amplitude quadrature gain @xmath62 has an additional contribution due to the feed - forward process , which is a function of the electronic gain @xmath29 .
we refer to the optical quadrature gain product @xmath63 as the _ unity gain _ point . at unity gain ,
the quadratures of the reconstructed secret are given by @xmath64 in the limit of infinite squeezing in the dealer protocol , the reconstructed secret is directly related to the secret state via a local unitary parametric operation .
this reconstructed state can only be achieved using quantum resources .
if required , a reverse local unitary parametric operation , can be applied to the reconstructed state to transform the reconstructed secret state into the original form of the secret state . since
this unitary parametric operation is a local operation and requires no entanglement , this shows the quantum nature of the state reconstruction is contained within the feed - forward reconstruction protocol , and not by the subsequent operations .
although the single feed - forward protocol is sufficient for demonstrating the quantum nature of quantum state sharing , it could be inconvenient in practice if the reconstructed state is a unitary transform of the secret state .
it is useful to investigate alternative feed - forward protocols where the reconstructed state is in the same form as the secret state .
such a reconstruction protocol is shown in figure  [ fig : fig1 ]  ( e ) , which we term the _
double feed - forward reconstruction protocol_. in this protocol , share \{1 } ( or \{2 } ) is interfered with a vacuum state on a beam splitter .
the reflectivity of the beam splitter has to be optimized , and in the limit of infinite squeezing or additional gaussian noise in the dealer protocol , the optimum beam splitter ratio is 1:1 ( for convenience we will use this beam splitter ratio for the rest of this analysis unless otherwise stated ) .
the resulting output beam @xmath53 is then interfered with share \{3 } on a 1:1 beam splitter .
the resulting beams are denoted by @xmath65 and @xmath66 respectively .
the noise fluctuations on the amplitude quadrature @xmath67 and phase quadrature @xmath68 are correlated with the amplitude and phase quadrature fluctuations on beam @xmath54 respectively .
the secret state can be reconstructed by measuring the @xmath67 and @xmath68 quadrature fluctuations , and displacing the corresponding quadratures of beam @xmath54 with a properly chosen electronic gain .
the resulting quadratures of the reconstructed state are given by @xmath69 where the coefficients represent the corresponding squeezing operators @xmath70 , @xmath71 , @xmath72 and @xmath73 , the optical quadrature gains are defined as @xmath74 , and where @xmath75 is the vacuum noise . at unity gain ( @xmath76 )
, the quadratures of the reconstructed secret state can be expressed as @xmath44 in the case of infinite squeezing in the dealer protocol and at unity gain , the secret state is reconstructed to an arbitrary precision .
this protocol has advantages over the previous protocols as it uses linear optics to reconstruct the secret state and the reconstructed state is in the same form as the secret state .
we characterize state reconstruction in quantum state sharing by measuring the fidelity between the secret and reconstructed states @xmath77 , which is used in the characterization quantum teleportation experiments  @xcite .
we also characterize the state reconstruction by measuring the signal transfer from the secret to the reconstructed state @xmath78 and the additional noise on the reconstructed state @xmath79 , which is used to characterize quantum teleportation  @xcite and quantum non - demolition experiments  @xcite .
fidelity measures the overlap between the secret and reconstructed states , and can be expressed in terms of the input and the output state as @xmath80  @xcite .
a fidelity of @xmath81 , implies perfect overlap between the secret and reconstructed states and corresponds to state reconstruction with arbitrary precision , whilst a fidelity of @xmath82 implies no overlap between the corresponding states .
in quantum state sharing the secret state can be any state in general .
in our experiment we use coherent states with unknown amplitude and phase coherent amplitudes . as a consequence we limit our analysis here to coherent states .
the fidelity between a secret state and the reconstructed state for a general quantum state sharing scheme , assuming that all states have gaussian statistics , can be expressed as @xmath83 where @xmath84 and @xmath85 are the quadrature variances of the reconstructed state , and where @xmath59 are the optical quadrature gains .
since fidelity is a measure of the overlap between the input and the output state , the most significant fidelity measure is at unity gain @xmath86 .
this is seen as the fidelity , averaged over an ensemble of unknown states , falls exponentially as we move away from unity gain .
we now determine the maximum fidelity achievable by the authorized group in the case when the squeezed states are replaced with coherent states in the dealer protocol , which we term the classical fidelity limit . the quadrature equations for a general reconstructed state can be expressed as @xmath87 where @xmath88 are the reconstruction noise terms on the quadratures of the reconstructed state . to measure the fidelity of this reconstructed state at unity gain ,
we assume that a phase insensitive amplification can be applied to the reconstructed state to achieve unity gain . assuming that the optical quadrature gains on both quadratures are equal @xmath89 , and for a phase insensitive amplification with an amplifying gain of @xmath90 , the resulting quadrature equations are given by @xmath91 where @xmath92 is the noise coupled into the output state as a result of the amplification process . by using the commutation relation @xmath93\!=\!2i\delta_{ij}$ ] and the heisenberg uncertainty product inequality @xmath94\rangle|^2/4 $ ]
, we can obtain heisenberg uncertainty products for the noise terms in equations ( [ aa ] ) and ( [ ab ] ) expressed as @xmath95 @xmath96 by substituting equations  ( [ ab ] ) ,  ( [ ba ] ) and  ( [ bb ] ) into fidelity equation  ( [ fidelity ] ) , the maximum classical fidelity for a general reconstructed state is given by @xmath97 using this inequality , we can determine the maximum classical fidelity achievable by the authorized groups for the @xmath7 quantum state sharing scheme . from the individual player shares , equations  ( [ dealer1 ] ) , ( [ dealer2 ] ) and ( [ dealer3 ] ) , the quadrature gains for \{1,2 } access group are @xmath76 , whilst the quadrature gains for \{1,3 } and \{2,3 } access group are @xmath98 . by substituting these gains into equation  ( [ bc ] ) , the maximum classical fidelity for the authorized groups
are given by @xmath99 the average classical fidelity limit for the quantum state sharing scheme can be determined by averaging the maximum classical fidelity achievable by all the authorized groups . for the @xmath7 quantum state sharing scheme ,
the average classical fidelity is @xmath100 .
this limit can only be exceeded using quantum resources .
the average classical fidelity achievable for a general @xmath1 quantum state sharing scheme can also be calculated .
assuming that the secret is a coherent state it is straightforward to show that the average classical fidelity is given by @xmath101 .
similarly for the individual players , the maximum achievable classical fidelity limits are given by @xmath102 for large squeezing or additional noise in the dealer protocol , the fidelity for the individual players approaches zero , corresponding to no overlap between the secret state and the individual shares .      in quantum state sharing , the state reconstruction can also be characterized in terms of the signal transfer to ( @xmath9 ) and additional noise on ( @xmath10 ) the reconstructed state .
these measures provides complementary information about the state reconstruction compared with the fidelity measure .
perfect state reconstruction corresponds to @xmath103 and @xmath104 , whilst @xmath105 and @xmath106 implies that no information has been obtained about the secret state .
the spacial difference between the @xmath9 and @xmath10 points , for the access and adversary groups , illustrates the information difference about the secret state obtained by both groups .
unlike fidelity , which requires the reconstructed state to be in the same form as the secret state , both @xmath9 and @xmath10 are state independent measures and are invariant to unitary transformations of the reconstructed state .
the signal transfer function is given by the sum of the quadrature signal transfer coefficients @xmath107 as @xmath108 where @xmath109 are the quadrature signal - to - noise ratios .
in the case of zero squeezing in the dealer protocol , using equation  ( [ ba ] ) , the signal transfer for a general reconstructed state , equation  ( [ aa ] ) , is limited by the inequality @xmath110 the additional noise on the reconstructed state ( @xmath10 ) is given by product of the quadrature conditional variances , which can be expressed as @xmath111 where the quadrature conditional variances each describe the amount of additional noise on each quadrature of the secret state and can be expressed in the standard form @xmath112 , where the gains @xmath113 are optimized , giving minimum conditional variances of @xmath114 for a general reconstructed state described by equation  ( [ aa ] ) , and assuming that the secret is a coherent state , the quadrature conditional variances can be written in an alternative form as @xmath115 .
the minimum additional noise on the reconstructed state is limited by the inequality @xmath116    for our ( 2,3 ) quantum state sharing protocol , we determine the classical limits for @xmath9 and @xmath10 for the authorized groups .
the \{1,2 } authorized group can obtain a maximum signal transfer , and a minimum additional noise of @xmath117 which corresponds to state reconstruction to an arbitrary precision .
for the \{1,3 } and \{2,3 } authorized groups , the maximum achievable signal transfer , and the minimum achievable additional noise is given by @xmath118 for no squeezing in the dealer protocol , the \{1 } and \{2 } adversary groups can reach the equality given in equation  ( [ da ] ) . as either the squeezing or additional gaussian noise is increased in the dealer protocol , however , the amount of information the adversary group obtains approaches zero . in the limit of infinite squeezing , or large amounts of additional noise , the adversary groups obtains no information about the secret state , corresponding to @xmath105 and @xmath106 .    figures  [ fig : fig2a ]  and  [ fig : fig2b ] show the accessible @xmath9 and @xmath10 regions for the \{1,3 } and \{2,3 } authorized groups using the single feed - forward reconstruction protocol , with and without squeezing in the dealer protocol .
the accessible points for the corresponding \{2 } and \{1 } adversary groups are also shown . to map out these accessible regions , the authorized group vary both the electronic feed - forward gain , and the beam splitter reflectivity in the reconstruction protocol . in figure
[ fig : fig2a ] , for no squeezing in the dealer protocol , the authorized group can achieve the classical limits set in equation  ( [ da ] ) . figure  [ fig : fig2b ] shows that in the limit of ideal squeezing , the authorized group can achieve state reconstruction to an arbitrary precision .     and additional noise @xmath79 for the _ single feed - forward reconstruction protocol _
, with no squeezing in the dealer protocol .
( a ) accessible regions for the \{2,3 } ( and \{1,3 } ) authorized groups , and ( b ) accessible points for the \{1 } ( and \{2 } ) adversary group , for increasing additional gaussian noise in the dealer protocol of ( i ) @xmath119 ( ii ) @xmath120 ( iii ) @xmath121 and ( iv ) @xmath122 , normalized to the quantum noise limit .
grey square : unity gain point for the authorized group reconstruction protocol .
grey circles : corresponding adversary group points .
, width=566 ]     and additional noise @xmath79 for the _ single feed - forward reconstruction protocol _ , with increasing squeezing in the dealer protocol .
( a ) accessible regions for the \{2,3 } ( and \{1,3 } ) authorized groups , and ( b ) accessible points for the \{1 } ( and \{2 } ) adversary group , for increasing squeezing in the dealer protocol of ( i ) @xmath123  db ( ii ) @xmath124  db ( iii ) @xmath125  db and ( iv ) @xmath126  db below the quantum noise limit , and with no additional gaussian noise . ,
we use a nd : yag laser producing 1.2  w of laser light at 1064  nm . approximately 0.8  w of this laser light is coupled into a hemilithic @xmath127 second harmonic generator , producing approximately 0.4w of frequency doubled light at 532 nm .
the remaining light from the laser is coupled into a high finesse mode cleaning cavity .
this cavity serves as stable frequency reference , to which the laser is locked .
the output beam is quantum noise limited above the sideband frequency of 2mhz .
the mode cleaning cavity also  spatially cleans " the output mode , by only being resonant for the @xmath128 transverse electromagnetic field mode .
this output beam is used to seed two hemilithic @xmath129 optical parametric amplifiers , which are pumped with the frequency doubled light .
the optical phase of the pump beam is controlled to produce amplitude squeezed beams from the optical parametric amplifiers .
the amount of amplitude quadrature squeezing corresponds to @xmath130  db below the quantum noise limit . to produce epr
entangled beams , the two amplitude squeezed beams are interfered on a 1:1 beam splitter with a controlled relative optical phase shift of @xmath131 .
the resulting beams exhibit continuous variable entanglement between the amplitude and phase quadratures of the two beams .
this entanglement is characterized using two standard measures .
the first measure , proposed by duan et al .
@xcite , characterizes the inseparability of the two entangled wave functions and is referred to as the _ inseparability criterion_. our system satisfies the inseparability criterion , which can be express as @xmath132 where @xmath133 is the minimum of the normalized variance of the sum or difference of the operators @xmath134 and @xmath135 . a second measure proposed by reid and drummond  @xcite , referred to as the _ epr criterion _ ,
is based on the observation of non - classical correlations which can be used to demonstrate the epr paradox .
our system satisfied the epr criterion which can be express as @xmath136 where @xmath137 are the standard conditional variances given in equation  ( [ cv ] ) . a more detailed analysis and discussion of the experimental generation and characterization of continuous variable epr entanglement
is given in  @xcite .
in our experiment , the secret quantum state is a displaced coherent state at the sideband frequency of 6.12  mhz of the coherent laser field .
the secret state is encoded and distributed to the three players by interfering it with one of the epr entangled beams on a 1:1 beam splitter with a mode - matching efficiency of @xmath138 , as shown in figure  [ fig : fig0 ] . to increase the security of the scheme
, the dealer introduces additional gaussian noise onto the three player shares using electro - optic modulation techniques . an alternative method for introducing this noise
is to modulate the optical parametric amplifier resonator cavities with gaussian noise at the secret state sideband frequency . in our experiment ,
the gaussian noise appears naturally as a result of de - coherence in the optical parametric amplifiers , resulting in mixed output states from the optical parametric amplifiers .
these mixed states can be described as squeezed states with additional noise on the anti - squeezed quadratures .
the additional noise on the epr beams corresponds exactly to equations ( [ dealer1 ] ) , ( [ dealer2 ] ) and ( [ dealer3 ] ) .
experimentally , the variance of this noise can be controlled to an extent by adjusting the power of the 532 nm light used to pump the optical parametric amplifiers .
typically , the additional gaussian noise has a noise variance of @xmath139  db above the quantum noise limit , for a corresponding amplitude quadrature squeezing of @xmath140  db below the quantum noise limit .      for the \{1,2 }
authorized group state reconstruction , we use the mach - zehnder reconstruction protocol , as shown in figure  [ fig : fig1 ]  ( a ) .
both players shares are interfered on a 1:1 beam splitter with a mode - matching efficiency of @xmath141 .
the output state from the beam splitter is the reconstructed secret state .    for the @xmath7 quantum state sharing scheme ,
the \{1,3 } and \{2,3 } authorized groups are equivalent , so that an experimental demonstration requires the successful demonstration of either of these protocols .
for the \{2,3 } authorized group , the secret state is reconstructed using the single feed - forward reconstruction protocol , as shown in figure  [ fig : fig1 ]  ( d ) . for this reconstruction protocol , the players shares are interfered on a 2:1 beam splitter with a mode - matching efficiency of @xmath142 . to improve the efficiency of the feed - forward loop , the optical power on the feed - forward detector
is increased so that the quantum noise limit is sufficiently higher than the detector dark noise . typically for our experiment ,
the dark noise on the feed - forward detector is @xmath143  db below the quantum noise limit .    in the original proposal , the amplitude quadrature of beam @xmath53 is directly modulated using electro - optic feed - forward techniques .
this method , however , is prohibitive as amplitude modulators have quantum efficiencies of 50% .
an alternative method that has a much higher quantum efficiency is to displace the amplitude quadrature of a separate strong local oscillator field @xmath144 .
this local oscillator field is then interfered with field @xmath53 on a highly reflective beam splitter .
the efficiency of this technique is equal to the beam splitter reflectivity of the highly reflective beam splitter . in our experiment
we use a beam splitter ratio of 50:1 with a mode - matching efficiency of @xmath145 .
both the secret and reconstructed quantum states for the access and adversary groups are measured using a single balanced homodyne detector , via a configuration of removable mirrors .
assuming gaussian states , the secret and reconstructed states are completely characterized by measuring the amplitude and phase quadrature noise spectra , together with the calibration noise spectra .
after detection , the total homodyne efficiency @xmath146 is factored into each measurement .
this inference ensures accurate results ( this can be seen in the limit of poor homodyne efficiency , where all states measured correspond to vacuum states , resulting in state reconstruction to an arbitrary precision by both the access and adversary groups , which would be obviously incorrect ) . due to a control drift in our experimental setup ,
the quadrature noise spectra are normalized with respect to the noise of the secret state , which are approximately quantum noise limited at 6.12  mhz . from these noise spectra ,
@xmath147 and @xmath148 of the secret and reconstructed states are calculated respectively .
( b ) fidelity for \{2,3 } authorized group with @xmath149  db of squeezing in the dealer protocol .
solid line : theoretical curve with @xmath139  db of additional gaussian noise , @xmath143  db of electronic noise below the quantum noise limit and a feed - forward detector efficiency of @xmath150 .
grey area : classical region for the authorized group .
( inset ) fidelity for the \{1,2 } authorized group as a function of the optical gain product . solid line : theoretical curve . , width=302 ]      figure  [ fig : fig3 ]  ( b )  ( inset ) shows the measured fidelity for the \{1,2 } authorized group as a function of the optical gain product @xmath151 , with @xmath130  db of squeezing and @xmath152  db of additional gaussian noise in the dealer protocol .
the authorized group obtains a best fidelity of @xmath153 with @xmath154 . the theoretical curve for the fidelity as a function of optical gain product is also shown .
the fidelity and the optical gain product for the \{1,2 } authorized group are close to unity , being slightly degraded as a result of experimental losses and imperfections .    for the \{2,3 } and \{1,3 } authorized groups using the single feed forward reconstruction protocol ,
a meaningful fidelity measure can not be obtained directly .
this is because the reconstructed secret is a unitary transform of the secret state , and the overlap between the secret and reconstructed state overlap is poor , even in the ideal case of infinite squeezing .
however , a meaningful fidelity measure can be obtained after the unitary parametric operation @xmath155 is applied to reconstructed state _ a posteriori_. this unitary parametric operation
can either be applied electronically to the measured values of the amplitude and phase quadratures of the reconstructed state , or optically by amplifying the reconstructed state using an optical parametric amplifier .
figure  [ fig : fig3 ]  ( a ) shows the measured fidelity for the \{2,3 } authorized group as a function of the optical gain product for zero squeezing in the dealer protocol . the \{2,3 } authorized group achieves a maximum fidelity of @xmath156 at a gain of @xmath157 .
figure  [ fig : fig3 ]  ( b ) shows the measured fidelity for the \{2,3 } authorized group as a function of the optical gain product , for @xmath130  db of squeezing and @xmath152  db of additional gaussian noise in the dealer protocol . near unity gain of @xmath158 ,
the \{2,3 } authorized group measures a best state reconstruction of @xmath159 .
this fidelity exceeds the classical fidelity limit @xmath160 , which is only achievable using quantum resources in the dealer protocol . in our scheme ,
the fidelity averaged over all authorized groups is @xmath161 , which exceeds the classical limit of @xmath162 .
this classical limit can only be exceeded using quantum resources and so demonstrates the quantum nature of the @xmath7 threshold quantum state sharing scheme .
for the corresponding adversary group \{1 } , the fidelity is calculated both with , and without , an ideal linear amplification applied to the reconstructed state to achieve unity gain .
this linear amplification operation is applied to the measured quadratures of the adversary state electronically after the measurement , and is described by equation  ( [ ab ] ) , where we assume a linear amplification gain of @xmath163 . in the case of no squeezing in the dealer protocol ,
the best fidelity achieved by the adversary group after amplification is @xmath164 with a gain of @xmath165 , where the subscript ( amp ) denotes the fidelity after the _ a posteriori _ linear amplification . in this case , however , the adversary group obtains a higher fidelity by not applying linear amplification operation , with a fidelity @xmath166 at a gain of @xmath167 achieved directly without amplification .    for @xmath130
db of squeezing and @xmath152  db of additional gaussian noise in the dealer protocol , the best fidelity achieved by the adversary group is @xmath168 at a gain of @xmath169 . without the linear amplification
the authorized group achieves a fidelity of @xmath170 at a gain of @xmath171     and additional noise @xmath79 for the authorized groups .
( a ) classical @xmath9 and @xmath10 for the \{2,3 } authorized group , for varying electronic feed - forward gain .
( b ) @xmath9 and @xmath10 for the \{2,3 } authorized group with @xmath172  db of squeezing in the dealer protocol . solid line : theoretical curve for authorized group .
grey area : classical region for the authorized group .
( inset ) experimental @xmath9 and @xmath10 for the \{1,2 } authorized group .
, width=302 ]      figure  [ fig : fig4 ]  ( a )  ( inset ) shows the measured signal transfer @xmath9 and additional noise @xmath10 for the \{1,2 } authorized group with @xmath130  db of squeezing and @xmath152  db of additional gaussian noise in the dealer protocol .
the \{1,2 } authorized group achieves a best state reconstruction of @xmath173 and @xmath174 , which are both close to @xmath103 and @xmath104 , corresponding to ideal state reconstruction .
figure  [ fig : fig4 ]  ( b ) shows the @xmath9 and @xmath10 points for the \{2,3 } authorized group for no squeezing or additional gaussian noise in the dealer protocol .
the points are taken from two experimental runs .
the first experimental points ( labeled ( i ) ) are for a reconstruction beam splitter ratio of 2:1 and for varying electronic feed - forward gain .
the second experimental points ( labeled ( ii ) ) are for an optimized beam - splitter reflectivity of 100% and for zero electronic feed - forward gain . in this case
the \{2,3 } authorized group obtains a best signal transfer of @xmath175 and lowest additional noise of @xmath176 .
these points are close to the classical limits described by equations  ( [ ac ] )  and  ( [ ad ] ) .
figure  [ fig : fig4 ]  ( b ) shows the measured @xmath9 and @xmath10 points for the \{2,3 } authorized group for @xmath130  db of squeezing and @xmath152  db of additional gaussian noise in the dealer protocol .
the points are taken for a varying electronic feed - forward gain , and a beam splitter ratio of 2:1 .
the classically accessible region , which can only be exceeded using quantum resources in the dealer protocol , is also shown .
the quantum nature of our protocol is demonstrated by the experimental points which exceed this classical region .
for the \{2,3 } authorized group , we measure a best signal transfer of @xmath177 and lowest additional noise of @xmath178 .
the experimental points adhere to the theoretical curve , being degraded slightly due to drifts in our control system .     and
additional noise @xmath79 for the \{1 } adversary group , for increasing squeezing and additional gaussian noise in the dealer protocol .
solid line : theoretical curve with increasing squeezing or additional gaussian noise .
( i ) experimental point with no squeezing or additional noise , ( ii ) experimental points with squeezing of additional noise varied around @xmath172  db and @xmath179  db respectively ( iii ) and experimental point with @xmath172  db of squeezing and @xmath180  db of additional noise with respect to the quantum noise limit . , width=302 ]    figure  [ fig : fig5 ] shows the @xmath9 and @xmath10 points for the adversary group \{1 } for increasing squeezing and additional gaussian noise in the dealer protocol .
figure  [ fig : fig5 ] shows how the security of the scheme against individual players is enhanced by increasing either the squeezing or additional gaussian noise . for no squeezing or additional gaussian noise in the dealer protocol ,
the adversary group can obtain equal information about the secret state as the \{2,3 } authorized group with @xmath181 and @xmath182 .
the adversary group obtains almost no information about the secret state in the case of @xmath130  db of squeezing and @xmath183  db of additional noise in the dealer protocol , with @xmath184 and @xmath185 . to achieve this large amount of additional gaussian noise ,
the optical parametric amplifiers are displaced with noise centered around the secret state frequency of 6.12  mhz .
this demonstrates that the amount of information the adversary group obtains about the secret can be reduced to zero by increasing either the squeezing or additional gaussian noise in the dealer protocol .
the spatial separation of the adversary group @xmath9 and @xmath10 points from that of the authorized group illustrates the information difference about the secret state obtained by both parties .
in conclusion , we have demonstrated that for the @xmath7 threshold quantum state sharing scheme , there exists a class of  disentangling " protocols which can be used to reconstruct the secret state .
we have experimentally demonstrated that for this scheme , any two of the three players can form an authorized group to reconstruct the quantum state , achieving a fidelity averaged over all reconstruction permutations of @xmath186 , a level achievable only using quantum resources .
we demonstrated that the entangled state and classical encoding techniques in the dealer protocol provide security against individual players , and in the case of finite squeezing in the dealer protocol , the security can be arbitrarily enhanced using classical encoding techniques .
this demonstration of @xmath7 threshold quantum state sharing can be scaled up to @xmath1 threshold quantum state sharing without increasing the number of active elements ( e.g. optical parametric amplifiers and feed - forward devices )  @xcite .
although scaling up does not result in an increase in the number of active devices required by the players , the dealer does require an increasing number of two - mode squeezed states to hide the state being transmitted . despite this challenge , extending beyond three players should be possible and will elucidate the scaling properties of quantum state sharing .
furthermore , it may be possible to substitute one of the two squeezers in the dealer protocol by an electro - optic feed - forward and an amplifier as was done here for @xmath7 quantum state sharing , in which case the two - squeezer requirement  @xcite could be relaxed .
this implementation of quantum state sharing broadens the scope of quantum information protocols , allowing the secure and robust transfer of quantum information and also provides security against malicious parties or node and channel failures in quantum information networks .
teleported states , quantum computer output states , and quantum keys used in quantum cryptography can all be securely distributed using quantum state sharing .