{'fraction_non_alphanumeric': 0.03232938926735986, 'fraction_numerical': 0.013457631170072905, 'mean_word_length': 4.680312287847929, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 3, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Satellite-mediated quantum atmospheric links

The establishment of quantum communication links over a global scale is enabled by satellite nodes. We examine the influence of Earth's atmosphere on the performance of quantum optical communication channels with emphasis on the downlink scenario. We derive the geometrical path length between a moving low Earth orbit satellite and an optical ground station as a function of the ground observer's zenith angle, his geographical latitude, and the meridian inclination angle of the satellite. We show that the signal distortions due to regular atmospheric refraction, atmospheric absorption, and turbulence have a strong dependence on the zenith angle. The observed saturation of transmittance fluctuations for large zenith angles is explained. The probability distribution of the transmittance for slant propagation paths is derived, which enables us to perform the security analysis of decoy state protocols implemented via satellite-mediated links.


I. INTRODUCTION
The recent success in practical realization of quantum state transfer between satellites and ground stations [1][2][3][4][5][6][7][8][9][10][11] has established the cornerstone of future global quantum communication. This achievement is especially impressive in the view of how fast the quantum communication over free-space quantum links reached its maturity. During only three decades the free-space quantum communication reached distances of 7600 km [9], while starting from proof-of-principle demonstration over a 30-cm quantum channel [12].
An acceleration of the development of satellite-based quantum technologies is caused by the need to establish global secure communication networks. The present classical public key cryptography is based on mathematical problems that admit no efficient solutions with currently available technologies. However, its security is vulnerable to quantum computer hacking attacks, in particular, those based on Shor's factoring algorithm [13]. Therefore, the future realization of quantum computers threatens the currently used classical cryptographic protocols to become insecure and hence useless.
Conversely, quantum key distribution (QKD) establishes unconditional secure cryptographic keys between two distinct parties [14,15]. The security of QKD is based on some fundamental principles of quantum physics such as the no-cloning theorem [16], Bell correlations [17], uncertainty relations for the most of continuous-variable protocols [18][19][20][21][22][23][24], etc. Ironically, while providing the security of QKD, the no-cloning theorem at the same time puts limitations on possible communication distances due to inability to amplify a quantum signal. One way to bring quantum communication to global scale is the use of satellites. Satellite-mediated QKD networks could span large communication distances by linking widely separated ground stations [9,10].
The setup of the satellite-mediated quantum links is a demanding task. The following problems must be overcome for successfully establishing a feasible quantum communication with satellites: the relative motion of the communication parties [25][26][27], the influence of gravity [28,29], the clock synchronization problem [30,31], acquisition, tracking and pointing issues with moving platforms [32][33][34], the influence of background noise [35][36][37], to name just a few. For low Earth orbiting (LEO) satellites, the communication time is limited to a few minutes [38,39] and this puts additional tight bounds on communication security. Finally, Earth's atmosphere contributes significantly to the loss budget and to the deterioration of the quantum signal due to diffraction, scattering, absorption, and atmospheric turbulence [40][41][42].
The common feature of the aforementioned issues is the strong dependence of disturbing factors on the relative position of the moving satellite and the ground station. For the observer at the ground station the instantaneous position of the satellite is given by the zenith angle, i.e., by the angle between the satellite and the vertical direction. The dependence of atmospheric disturbances on the zenith angle has attracted the attention of scientists since ancient times. Already Ptolemy (100-175 A.D.) noticed that the atmospheric refraction displaces the apparent position of celestial bodies toward the zenith [43]. Such a regular refraction is caused by the altitude variation of the atmospheric refractive index. It influences the precision of satellite measurements and is responsible for apparent elongation of celestial objects, mirages, green flashes on setting sun, to name just a few [44]. Other types of disturbances, such as intensity scintillation [45,46] and image dancing [40,47], arise from turbulent fluctuations of the atmospheric refractive index. The strength of these fluctuations varies with altitude and hence its influence on optical light propagation is also a function of the zenith angle. Thus, the examination of the zenith angle dependence of relevant characteristics is of immense importance for the establishing of robust and reliable optical quantum communication links via the satellites.
In the following we provide a systematic analysis of quantum communication channels with the inclusion of disturbance effects due to geometrical elongation of communication links, atmospheric regular refraction, extinction, and turbulence. In our consideration we focus on the zenith angle dependence of the associated signal losses. Additionally, the finite communication time puts severe restrictions on secure quantum key length in satellite-mediated communication. Careful estimation of the loss budget of quantum channels is needed to estimate the lower bound of the key length and its rate. In this article we perform the security analysis of a decoy state protocol that is commonly used in practice.
This article is structured as follows. In Sec. II we review some basic communication scenarios with satellites and in Sec. III A we obtain the geometrical distance between a ground station and a satellite. We focus on atmospheric refraction effects in Sec. III B. The regular extinction of the optical signal due to scattering and absorption on air particles is discussed in Sec. III C. In Sec. IV, the dependence of optical field correlation functions on the zenith angle for the optical field propagating in turbulence is studied. These functions allow us to calculate the scintillation index, the mean beam-spot radius, and the beam wandering variance. In Sec. V, we derive the probability distribution of the transmittance that characterizes satellite-mediated atmospheric quantum channels. An application of the developed theory to the security analysis of decoy-state protocols is discussed in Sec. VI. A summary and conclusions are given in Sec. VII.

II. SATELLITE-MEDIATED COMMUNICATION LINKS
A low Earth orbit (LEO) is an orbit around Earth with an altitude above Earth's surface H ranging from 160 to 2000 km and an orbital period between about 80 and 130 min. The fast movement of the satellite puts certain restrictions on the communication performance with the ground stations and limits the communication window to several minutes. The duration of the communication session depends on OGS' geographical position, the duration of acquisition procedure, the presence of natural obstacles along the optical path, etc. The signal-to-noise ratio for satellite-mediated optical link is connected with the length of the optical path between the communication parties and hence it is related with the shape of the satellite orbit and its relative position to the ground-station communication party. Moreover, atmospheric refraction bends the optical ray paths, while the atmospheric turbulence corresponds to various random refraction and diffraction phenomena. In this section we remind the reader of some basic geometrical concepts of satellitemediated optical links and leave the detailed analysis of some aforementioned aspects to the following sections. . The subscript i = 1, 2, 3 in the notation Si refers to the successive positions of the satellite. After the satellite makes one orbital revolution along its orbit (i) its new position S3 as well as orbit (ii) appear inclined for the ground observer OGS2. This apparent change in the orbit inclination is due to the Earth rotation. Figure 1 shows the generic communication experiment with classical or quantum light. Two ground stations OGS 1 and OGS 2 establish the communication links with satellite S shown in successive moments of time. The instantaneous positions of the satellite at times t 1 , t 2 , and t 3 are denoted as S 1 , S 2 , and S 3 , respectively. The satellite has a polar orbit which passes over the Earth's polar regions from south to north. Moreover, since orbits of most LEO satellites have vanishingly small ellipticity, we will consider circular orbits in the following. Initially at time t 1 , the orbit, denoted as (i), passes through the meridian plane of OGS 2 but has some inclination to meridian plane of OGS 1 . At later time t 2 , the satellite approaches the horizon, makes one full orbit revolution and appears at the point S 3 . For a ground observer 1 the apparent satellite trajectory changes from (i) to (ii) during this single revolution period due to the Earth rotation. In the following we will also assume that the observer's parallax due to Earth's rotation during one communication session can be neglected. This is justified if the flight time over the observer horizon is much smaller than the satellite orbiting period 2 .
The satellite zenith trajectory that passes through the III. REGULAR LOSSES OF SATELLITE-MEDIATED LINK An optical Gaussian beam undergoes diffractioninduced broadening while propagating in free space. The amount of broadening depends on propagation path length and whether beam is focused, collimated, or divergent. Since the receiver collects the incoming light with the aid of finite-aperture device such as telescope, only a fraction of the signal reaches the detector. For fixed aperture size, the signal losses due to truncation on the aperture will increase with the increase of the propagation path. Moreover, absorption and scattering on atmospheric gases and aerosols leads to the degradation of the signal-to-noise ratio as well.
In this section we consider the effects leading to the regular diffraction-induced and extinction losses in satellite-mediated links. By the word "regular" we refer to effects that occur in a systematical manner. Among such effects we distinguish purely geometric optical path elongation due to increase of relative positions of communication parties. The regular losses in this case depend on the geographical location of the OGS, on the type of the satellite orbit, and on such characteristics as the satellite altitude, orbit inclination angle, and the satellite declination angle to the Equator plane. Additionally, regular atmospheric refraction bends the light rays, increasing the optical propagation path and contributing to loss budget. This effect is especially pronounced if the satellite is positioned close to the observer horizon. Finally, we discuss the signal loss due to atmospheric absorption and scattering.

A. Slant range
We consider the communication scenario with an orbiting satellite which has been described in the previous section and derive the length of the line segment connecting the ground observer and the satellite. This purely geometric length referred as the slant range does not account for any elongation effects due to atmosphere and depends on the geographical location of the observer and on the parameters of the satellite orbit.
In the following we consider a perfect polar satellite orbit that passes through both north and south poles. For simplicity, we assume that the orbit is perfectly circular with the radius R = R ⊕ + H, where R ⊕ = 6 371 km being the Earth radius and H being the satellite altitude above the ground. The slant range between the OGS and the satellite is obtained then from simple trigonometric considerations, [see Fig. 2 (a) and Appendix A] where Z is the zenith angle lying between the vertical direction of the observer and the direction pointing on the satellite. In Appendix A we show that for the satellite orbits inclined to the observer meridian plane on angle ∆ι the zenith angle varies in the range Z ∈ [Z ∆ι min , π/2] with Z ∆ι min = arccos 1 − cos 2 Ψ sin 2 ∆ι , where Ψ is the geographical latitude of the observer. Consequently, the slant range (1) varies from the minimal value L(Z ∆ι min ) at zenith to the maximal value (R ⊕ + H) 2 − R 2 ⊕ at the observer's horizon. In order to relate the orbit inclination angle ∆ι with the characteristics of the relative motion of the satellite and the observer, we restrict our attention to the communication scenario shown in Fig. 1 for the OGS 2 . If the satellite is initially at zenith of the observer (indicated as S 1 in Fig. 1) and moves towards the observer's horizon along the zenith trajectory (i), after one satellite orbiting period T sat it reappears at S 3 and moves along the inclined trajectory (ii). The trajectory (ii) is then inclined to the observer's meridian plane due to the Earth rotation. After nth satellite revolution the inclination angle ∆ι between the satellite orbit plane and the observer meridian is given by where v ⊕ = 1669.8 km/h is the speed of Earth's rotation at the Equator. We refer the orbit with zero inclination, ∆ι = 0, as to the zenith orbit. In this case, the orbit plane coincides with the observer meridian. In our convention, ∆ι is positive (negative) if the satellite flies westwards (eastwards) of the observer meridian plane. In order to get some impression of the communication geometry with the satellite with the inclined orbit, we consider two satellite positions S and S at successive times and the observer at O as shown in Fig. 2 (b). These positions are chosen in such way that the slant ranges OS and OS are equal as well as the corresponding zenith angles, i.e., SOB = S OB = Z. Let us choose the plane ABOC as the observer meridian. Then, the instantaneous position of the satellite is given by both its zenith and azimuth angles. The latter is the angle between the projected segment that connects the observer with the satellite and the reference vector in the meridian plane pointed toward the north pole. Clearly, for the inclined orbit at geographical latitudes different from the polar or equatorial ones, the positions S and S have the same zenith angle but different azimuth angles.
One can imagine that the points S and S lie on the cross sections of the satellite trajectory with the right circular cone whose height is aligned along the observer's zenith and the apex coincides with O [cf. the segment of the cone OASS in Fig. 2 (b)]. For inclined orbits that pass above the observer's horizon, each cone of angle 2Z crosses the trajectory in two points if Z ∈ (Z ∆ι min , π/2) and in one point if Z = Z ∆ι min . Due to this symmetry we are able to characterize the length of geometrical link between the observer and the satellite by Eq. (1) with Z ∈ [Z ∆ι min , π/2] and ignore the detailed information on the corresponding azimuth values. The latter assumption is well justified if the detailed position of satellite is determined by a tracking system that aligns automatically the sender and the receiver telescopes. In this case, the observer coordinate system is associated with the plane OSC [cf. Fig. 2 (a)] that rotates around the axis OC. Therefore, for optical communication with the automatical azimuth angle tracking the relevant link information is incorporated in the zenith angle dependence of the relevant quantities. It is worth to note that the cross section of the cone of given Z with other satellite trajectory determines the slant ranges of the same length. For example, link AO on Fig. 2 (b) for the zenith orbit AB is equivalent to the links SO and S O which results in equal propagation properties of light along these links.

B. Regular refraction
In this subsection we calculate the elongation of the slant range due to atmospheric refraction. Atmospheric refraction phenomena are based on the fact that Earth's atmosphere has an optical refractive index that is different from its value in vacuum. Furthermore, the value of the refractive index varies with the altitude, geographical location, and meteorological conditions and hence refraction depends on space and time variables. We refer to refraction phenomena that systematically occur in the atmosphere as to regular refraction [44,[48][49][50]. Regular refraction changes with altitude in a theoretically predictable fashion. Time variation of regular atmospheric refraction has rather seasonal behavior even for large zenith angles [51] and can be ignored.
Due to a spatial variability of the refractive index with altitude, the light coming from a distant source and reaching the ground observer propagates along a curved path rather than a straight line. As a consequence, the signal from distant objects arrives under the apparent zenith angle Z a rather than under the true zenith angle Z. Both zenith angles are related as where n 0 = 1.00027 is the air refractive index near the ground. We consider the effect of regular refraction on elongation of the slant range given L(Z).
Earth's atmosphere can be viewed as a spherically stratified medium with specific distribution of refractive index values within each strata. In order to obtain this distribution we use the so-called standard atmosphere model [52]. The standard atmosphere is an idealized steady-state representation of Earth's atmosphere that gives values of atmospheric pressure, temperature, and other parameters for altitudes up to 1000 km. The altitude-dependent values of the air refractive index can be found using the distributions of temperature and pressure according to the Edlén equation [53,54]. We distinguish 10 atmospheric layers above the ground and within each layer we approximate the latitude dependence of refractive index in linear manner (for details see Appendix B) If we denote the latitude of i-th layer upper bound as H i , the linear path within the layer is determined as The rest of the total optical path lies in the vacuum and is given by The angles Φ and Θ determine the relative position of incoming and refracted light rays within each layer and are complex functions of observer's zenith angle Z and the so-called refraction integral r i [44]. The explicit expressions for the lengths (5) and (6)  It is worth to note that it was assumed that the paths segments L i in the form (5) are obtained with the assumption that they are linear within each atmospheric layer. This is approximately true for the standard atmosphere model, which gives the minimal ray curvature of 4.4R ⊕ near the ground at Z a =90 • (cf. Ref. [55] for empirical formulas). This allows us to neglect the ray curvature effects in the following. This is of course an idealization and for specific daytime and meteorological conditions the accounting for ray curvature effects turns out to be important [56]. Optical path length elongation factor due to atmospheric refraction as a function of observer's apparent, Za, and true, Z, zenith angles for several LEO satellite orbits with altitudes H. Figure 3 shows the path elongation factor due to atmospheric refraction, where L(Z a ) is given by Eqs. (1) and (4) and L i (Z a ) are defined by Eqs. (5) and (6). Alternatively, Eq. (7) can be written as a function of the true zenith angle, i.e. ε r (Z).
The behavior of ε r as a function of the apparent zenith angle Z a starts to deviate from ε r (Z) while approaching the horizon due to larger optical density along the propagation path near the horizon. The elongation factor diminishes with the growth of orbit altitude. This is due to the increase of the propagation path in the vacuum with the increase of satellite altitude. For further convenience we give a polynomial fit to the elongation factor as a function of the apparent zenith angle (in degrees) for the orbit with H = 780 km: Finally, the slant range that accounts the elongation due to atmospheric refraction reads as where L is given by Eq. (1).

C. Regular extinction
Another source of losses that can be considered as regular or deterministic losses are associated with molecular and aerosol scattering. For the horizontal atmospheric links, the extinction factor is χ ext = exp[−β ext (h)L], where β ext (h) is the extinction coefficient due to molecular absorption and scattering at given height h above sea level and L is the distance between the communication parties. Clearly, for elevated links this formula should be modified in order to include the variation of the extinction coefficient with the height. If the slant range to the satellite is given by Eq. (9) we can write where the observer is assumed to be located at sea level and L = h sec Z a . Since the value of the extinction coefficient depends on the number density N (h) of air constituents at given height h its altitude dependence can be written as where β 0 ext is the extinction coefficient at sea level and N 0 is the corresponding number density of air constituents. Here, we have used the altitude dependence of N derived within the standard atmosphere model [cf. Appendix B, Eq. (B8)] with the scale parameter H 0 = 6600 m. Substituting Eq. (11) in Eq. (10) we finally derive Here we have adopted the conventional units of the extinction coefficient to be given in km −1 . Molecular or Rayleigh scattering contributes 2.544 × 10 −3 km −1 to this coefficient for optical wavelength λ = 800 nm [57].
The aerosol distribution has a more complex dependence on altitude than the model (B8). Nevertheless, for the most part of the optical propagation path one can consider that aerosol scattering contributes roughly the same amount to extinction as the Rayleigh scattering. For the total extinction coefficient in (10), we adopt therefore the value β 0 ext = 5 × 10 −3 km −1 . We also note that a similar expression to (12) has been derived in Ref. [58].

IV. ATMOSPHERIC TURBULENCE
In the previous section we considered the influence of regular refraction on the elongation of the optical path length for light propagating in the atmosphere. The regular refraction is caused by the variation of the air refraction index with the altitude and is predictable provided the altitude variation of temperature and pressure is known. Other types of refractive and diffraction phenomena arise due to the irregular variation in space and time of the refractive index. Such random variations are connected with temperature fluctuations and wind shear and have statistical properties of turbulent scalar fields. The strength of turbulent refractive index fluctuations also varies with the altitude. Hence, the irregular disturbances of the optical signal in satellite-mediated communication depend on the zenith angle. In this section we discuss the dependence of aperture-averaged scintillations, beam broadening, and beam wandering on the zenith angle.
A. Statistical description of optical turbulence Turbulent air motion consists of a set of vortices or eddies of various diameters, ranging from extremely large with characteristic so-called outer scale L o to extremely small with a scale l o . Under the influence of inertial forces, larger eddies break up into smaller ones. This cascade process continues until the minimal scale l o , referred to as the inner scale, is reached and dissipation of turbulent flow energy takes place. This evolution of turbulent air vortices leads to a random variability of the refractive index, where ρ = (x y z) T and n i is the regular part of the refractive index within ith atmospheric layer [cf. Eq. (B7) of Appendix B]. In the following we will omit the index i for convenience and adopt the notation n(ρ, t) for the refractive index (13). In Eq. (13) the z axis is chosen along the optical ray while r=(x y) T lies in the transverse plane to the ray direction. At optical wavelengths, the fluctuating part δn is of the order of 10 −6 or less. When the Taylor's "frozen turbulence" hypothesis [59] holds, implying that the random field n(ρ, t) is transported with constant velocity v, therefore remaining stationary in the moving coordinate system, n(ρ, t) = n(ρ − vt), the time dependence of refractive index is incorporated in the spatial variable.
In the statistical theory of optical turbulence, the refractive index fluctuations δn are described by the power spectrum where the B n is the correlation function For a locally isotropic random field the correlation function simplifies further and the turbulent spectrum can be written as where κ=(k x k y ) T and r=r 1 −r 2 . For the inertial range of spatial wave-numbers values, |κ| ∈ [2π/L o , 2π/l o ], the spectrum for Kolmogorov turbulence is Here, C 2 n is the refractive index structure parameter characterizing the strength of refractive index fluctuations.
In the following considerations we will require the specific form of correlation function, called structure function, for optical phase fluctuations: where r i , r i , i = 1, 2, are the transverse components of the corresponding spatial vectors ρ i = (r i z) and ρ i = (r i z). Here, the fluctuating phase is found from the first approximation of geometric optics for downlink communication scenarios. In this article we focus our attention on the downlink communication configuration and omit the corresponding superscripts for simplicity in the notations. The formulas for uplink can be then obtained by replacing z → L − z in integrals similar to the one in Eq. (21). For a locally isotropic and homogeneous random field δn, the Markov approximation, is well justified [40,60]. The phase structure function (19) is evaluated then as For the Kolmogorov spectrum (18), in the case of downlink the structure function (23) reduces to [61] D S (r, r , L r ) is the radius of spatial coherence of a plane wave in the atmosphere, L turb is the propagation length within the optically active turbulent atmospheric layer, L r is the total propagation length, ξ is the dimensionless integration variable, and is the refractive index structure function taken at some reference height h 0 above the ground (see also Appendix D). The structure function (24) for uplink is obtained by the change of the variable ξ → 1 − ξ.

B. Aperture-averaged scintillations
The dependence of optical intensity fluctuations, i.e., scintillations, on the zenith angle has attracted attention in the connection with astronomical photometry. Early measurements of the scintillation index σ 2 η [62][63][64] have shown that the aperture-averaged scintillations (or power scintillations) grow with the growth of the zenith angle as where is the transmittance of the light intensity I(r, L r ) through the receiver aperture with opening area A, and r is the spatial variable transversal to propagation direction. The exponent γ in Eq. (27) is related to the statistics of turbulent fluctuations of the refractive index and depends on the characteristics of the receiver telescope. Theoretical considerations [40] based on the Rytov approximation yield γ = 11/6 for small receiving apertures and γ = 3 for large receiving apertures, respectively. These results agree reasonably with the experiments [65]. The later investigations [65][66][67][68] have shown that dependence (27) is valid for small and moderate zenith angles or for highly elevated optical ground stations. For large zenith angles measured stellar scintillations exhibit a saturation or decrease in its value. A similar behavior has been reported for optical signals from satellites [69,70]. On the other hand, the Rytov approximation (27) yields the divergent scintillation index for Z a →90 • and does not account for the saturation effect. The phenomenon of saturation of scintillations has been theoretically studied in Refs. [71][72][73][74][75] and is attributed to multiple scattering phenomena on turbulent inhomogeneities.
In this section we derive the scintillation index of the aperture-averaged optical signal from the satellite and discuss its dependence on the zenith angle. As an accompanying result we obtain the expressions for two first moments of the transmittance (28), the mean width of the beam spot at the receiver and the beam wandering variance. These parameters will be used in Sec. V for the derivation of the probability distribution of quantum channel transmittance.
The scintillation index (27) is derived from the first two moments of the transmittance (28), namely where a is the receiving aperture radius, and u(r; L) is the optical field amplitude. Obviously, the field correlation functions Γ 2 and Γ 4 turn to be important ingredients for the evaluation of σ 2 η . On the other hand, their moments are related to the beam wandering variance, and to the mean short-term beam spot radius of the transmitted beam, Here the variable x denotes the x component of the transverse vector r. The short-term beam spot radius is associated with the intensity distribution observed during small exposure times while the long-term radius W LT includes broadening effects due to beam wandering and is associated with long detection times. In the following section we show that the quantities (29), (30), (33), (34) are of primary importance for the description of quantum atmospheric channels. The correlation functions Γ 2 and Γ 4 we calculate using the phase approximation of the Huygens-Kirchhoff method [76,77]. This approximative method neglects the fluctuations of the field amplitude. On the other hand, the phase fluctuations characterized by Eqs. (20) and (21) are caused by random diffraction and refraction in the turbulent medium, which are included up to the terms of order δn 2 1/2 . The former condition is justified for communication scenarios through links with saturated turbulence [78], which is the case for satellitemediated atmospheric channels. More rigorous methods [79] and experiments [40,80] suggest that the latter condition is satisfied for arbitrary propagation paths and turbulence strengths. Thus, the phase approximation of the Huygens-Kirchhoff method accounts for the diffraction and refraction effects arising due to the optical beam propagation in the turbulent atmosphere in most practically important cases.
For the TE00 mode of the laser beam in the plane of the radiating aperture, with W 0 being the initial beam spot size and F being the initial beam wavefront radius, the correlation functions (31) and (32) read as where we have used the relative and the center-of-mass coordinates r = r 1 −r 2 and R = (r 1 +r 2 )/2, respectively. Here, Ω = kW 2 0 /(2L r ) is the Fresnel number of the transmitter aperture, g 2 = 1+Ω 2 [1−L r /F ] 2 is the generalized diffraction parameter, and the phase structure function D S is given by (24). We also note that Eqs. (36) and (37) incorporate multiple-scattering effects.

Mean transmittance
The average intensity at the receiver aperture is found from Eqs. (31) and (36). We use the quadratic approximation [41] exp − (r/ρ 0 ) for the spatial dependence of the phase structure function (24). This approximation gives a good accuracy for small values of the radius of spatial coherence ρ 0 , i.e., for long propagation distances and strong optical turbulence, which is always the case for satellite-mediated links. Performing the integration in Eq. (36), we obtain the Gaussian distribution of the intensity distribution at the receiver aperture plane, where the long-term beam spot radius at the receiver is [cf. also Eq. (34)] Here, ρ 0 is defined in Eq. (25) and is the weighting factor that depends on the slant profile of the refractive index structure function C 2 n (L r , 1 − ξ). This profile is related with the vertical profile of turbulence as C 2 (see Appendix D for details). The natural diffraction of the laser beam is included in Eq. (41) by considering the initial beam waist W 0 , wavelength λ (Fresnel number Ω), and propagation distance L r . The resulting natural laser beam divergence is usually the main source of signal loss. The obtained formula (41) coincides with the long-term beam spot radius given in Ref. [81].
The obtained mean intensity allows one to calculate the mean transmittance straightforwardly. Inserting Eq. (40) in Eq. (28) and performing the integration with respect to the spatial variable, we obtain This is the transmittance of Gaussian beam with the beam-spot radius W LT through a circular aperture of radius a. The approximation sign is used due to the used quadratic approximation (39). This formula can serve for estimative calculations only and for the precise evaluations from Eqs. (29) and (36) we derive where J n (x) is the Bessel function of nth order. For the sake of completeness, we give the expression of the short-time beam spot size (34). Following Ref. [82] it is calculated as Here, the term proportional to X arises due to the diffraction-induced beam broadening caused by the turbulent atmosphere. In the limit X → 0 we obtain from Eq. (45) the diffraction-induced beam broadening in vacuum. We also note that Eq. (45) does not account for the beam broadening due to the random scattering on particles, aerosols, and precipitations. This additional broadening might be relevant under the condition of high moisture or low visibility, as has been shown in Ref. [83]. In this article, however, we deal with ideal weather conditions for optical communication. The short-term beam spot radius (45) is important for the derivation of the probability distribution of the channel transmittance as will be shown in the next section.
This expression can be simplified further by noting that most of the optical propagation path lies in vacuum as well as in the atmosphere with negligibly small turbulence, i.e., L turb L r . As a consequence, for small values of the integration variable ξ in (46), when the contributions from the r(1 − ξ) term are dominant, the value of the refractive index structure constant is equal to zero. On the other hand, for ξ ≈ 1 the structure constant is finite but the contribution from r(1−ξ) is negligibly small. Therefore, one can neglect the dependence on r in (46) along the whole propagation path We stress that this formula is justified for downlink configurations only. Inserting (37) in (30) and using the approximation (47), we obtain The further evaluation of integrals in (48) should be performed numerically.  Figure 4 shows the aperture-averaged scintillation index σ 2 η = ∆η 2 / η 2 as a function of the zenith angle calculated by using the phase approximation of the Huygens-Kirchhoff method. For the calculation of η 2 we have used the approximate expression (48), whereas η is calculated from Eq. (44). Table I lists the atmospheric and optical beam parameters used in the calculation of the scintillation index. The curves shown for three inclination angles yield the same functional dependence on zenith angle for medium and large Z a due to the properties discussed in Sec. III A and differ on the minimal value of the zenith angle Z ∆ι min [ see Eq. (2)]. For small and moderate zenith angles the scintillation index σ 2 η shows the asymptotic behavior given by Eq. (27). The scintillation index calculated within the phase approximation of Huygens-Kirchhoff method shows the saturation and decrease of intensity fluctuations for large zenith angles.
This result can be qualitatively compared with the experimental data that have been taken within five measurement campaigns between 2006 and 2016 and shown in Fig. 5 (shaded area). The direct quantitative comparison of theoretical curves in Fig. 4 with any individual experimental curve contributing to Fig. 5 is hardly possible due to the lack of all needed parameters of turbulence and the hardly measurable profile of C 2 n (z) inherent to the given meteorological conditions. Measurements of intensity scintillation index were conducted with an optical ground station nearby Munich, Germany, with elevation of about 602 m above sea level. Measurement wavelength was 847 and 1550 nm, depending on the used satellite (see Table II for an overview of measurement campaigns).
We also note that the difference in zenith angles with maximal scintillation index in Figs. 4 and 5 arises due to the different elevations of the observers. The measurement device that delivered the data for the scintillation index analysis is an infrared camera located in the exit pupil of the telescope. Thus, images of the intensity field incident onto the telescope aperture are recorded and analyzed. The experimental curves in Fig. 5 are obtained based on data from a single camera pixel. The effective radius of the pixel, taking magnification of the optical system into account, is a = 3.2 mm. The small value of the detector aperture as well as short exposure times (of order 0.1-1 ms) reduce the telescope aperture smoothing effect, yielding the intensity scintillation index For the sake of better comparison, the 1550-nm data are re-calculated to 847-nm wavelength using weak scattering theory. This is possible since the 1550 nm measurements lie well within the weak scattering regime, i.e. at low zenith angles. Twelve measurements are analyzed to form the mean run of scintillation index as shown in Fig. 5. The grey area indicates the confidence bound defined by the standard deviation. At low and high zenith angles, the standard deviation is not illustrated since only a single measurement track is recorded in these regimes and, thus, determination of standard deviation is not possible. Further description of the individual measurement campaigns and the data analysis method are found in [70,84]. In Appendix F we consider an estimation for the aperture-averaged scintillation index based on approximate phenomenological expressions for field correlation functions. This can give some insight into saturation effects observed at large zenith angles. The consideration yields Here, a is the receiving aperture radius, k = 2π/λ is the optical wave number, and 2 F 3 (a, b; c, d, e; x) is the hypergeometric function. This simple analytic formula contains three phenomenological parameters: the refractive index structure parameter at the ground C 2 n,0 , the characteristic height of the atmospheric turbulent layer H 0 , and the dimensionless proportionality parameter µ. The theoretical curve based on Eq. (49) shows a reasonable agreement with the experimental data in Fig. 5. The model parameters are: C 2 n,0 = 2.5×10 −17 m −2/3 , H 0 = 0.5 km, a = 3.2 mm, λ = 847 nm, and µ = 0.92.

Beam wandering variance
For the sake of completeness, we give the expression for the beam wandering variance (33). Beam wandering phenomenon depends strongly on the outer scale of turbulence, L o . The finite L o defines the upper bound on the size of turbulent inhomogeneities that are able to deflect the beam as a whole. Since the Kolmogorov spectrum (18) has a discontinuity at the turbulent wave numbers, |κ| ≈ κ o = 2π/L o , it is more suitable to use the smoothed spectrum For slant paths the outer turbulence scale varies with the height h. Very well known is the empirical Coulman-Vernin profile that reads as [85] L • (h) = 4 where the outer scale is given in meters.
Using the spectrum (50) and following the derivation steps of Ref. [86] we obtain Here W ST (L r ) is given by (34) and the altitude dependence of the outer scale is given by (51) Table I. The beam spot radius and the beam wandering variance grow with the growth of the zenith angle. The asymmetry of the curves for inclined orbits is dictated by the geographical position of the observer as discussed in Sec. III A. For zenith angles near Z a = 80 • some saturation of both quantities appears. This is due to the drop of the turbulence strength in the lower troposphere (3-10 km), the region that has its maximal contribution to the optical path at this zenith angle. Near the observer horizon the contributions of boundary layer turbulence at 1 km as well as of the atmospheric refraction have a maximal effect on the optical beam distortions leading to the growth of both beam-spot size and beam wandering.

V. PROBABILITY DISTRIBUTION OF TRANSMITTANCE
In this section we consider the model of atmospheric quantum channels. For the physical consistence of this model the preservation of the canonical commutation relations for the quantized optical field operators is important. This requirement puts certain restrictions on the probability distribution that governs the statistics of fluctuating channel transmittance. We also show the relationship of the statistical characteristics of this distribution and the moments of the field correlation functions derived in the previous section.
Quantum light transmission through a linear medium, such as Earth's atmosphere, is conveniently characterized via the input-output relationŝ whereâ in(out) is the input (output) field annihilation operator andĉ is an environmental mode operator. The random transmittance η ∈ [0, 1] equals to the instantaneously transmitted normalized intensity truncated by the receiver aperture [cf. Eq. (28)]. The transmission of the quantum state through the atmospheric link depends not only on the characteristics of the channel, but also on the parameters of the receiver aperture. In terms of the Glauber-Sudarshan P function [87,88], the input-output relation (53) reads [89] as where we have assumed that the environmental modes are in the vacuum state. Here, P in (α) and P out (α) are P functions of the input and output quantum fields and P(η) is the probability distribution of the transmittance (PDT). Hence, the description of quantum-light propagation through the atmosphere reduces merely to identifying P(η). An important requirement for the PDT is that its domain of definition is restricted to the interval [0, 1], which is the consequence of the canonical commutation relation forâ out andâ † out . Violation of this requirement may lead to unphysical effects which have critical influence, e.g., on security bounds of communication protocols. The first consistent model of the PDT [90] considered beam wandering as the main source of fluctuating losses on the receiver. In this case, the PDT can be derived in analytical form and is given by the log-negative Weibull distribution. This beam wandering model was further extended to include effects due to random beam broadening and deformation of the beam profile into an elliptic form [91]. In Ref. [83] this so-called elliptic-beam model was extended to include additional beam broadening and extinction due to random scattering on atmospheric aerosols and dust particles. The elliptic-beam model gives reasonable agreement with the PDT measurements for short-distance links. For long-distance channels, a discrepancy arises between the transmittance moments calculated via the elliptic-beam PDT and the corresponding moments (29) and (30) calculated from the first principles. For elimination of this discrepancy, a PDT model has been proposed based on the law of total probability [92]. This model is most suitable for the description of long-length quantum channels and in this section we extend it to the case of slant propagation paths.
Analyzing experimental PDTs for short and long propagation distances, one observes two limiting behaviors. For short distances, the beam wandering appears to be the major source of fluctuating losses and the corresponding PDT has similar form to the log-negative Weibull distribution. For long propagation distances, beam broadening and deformation are the dominating effects yielding the PDT in the form of truncated log-normal distribution. In the general case, using the law of total probability [93], the PDT can be written as where the random vector r 0 transverse to the propagation direction describes the position of the deflected beam centroid relative to the aperture center. The corresponding probability distribution in (55), describes the beam-wandering contribution to the total PDT. Here, σ 2 BW is the beam wandering variance, Eq. (33). The effects of beam-spot distortions are incorporated in the conditional distribution P (η|r 0 ). Physically it can be interpreted as the conditional PDT for the beam with a centroid position tracked to the position r 0 relative to the aperture center.
For negligible small beam wandering, σ BW → 0, the distribution (56) reduces to Dirac delta function and the conditional probability according to (55) reduces to the PDT. In this limit, the PDT resembles the log-normal distribution. Hence, for general situations we can assume that the conditional distribution can be approximated by the truncated log-normal distribution P (η|r 0 ) (57) where F(1) is the cumulative function of the (untruncated) log-normal distribution at η = 1. The parameters of this distribution are related to the conditional moments η r0 and η 2 r0 . These conditional moments can be considered as the corresponding moments of the aperture transmittance of the effective beam with beam-spot radius W ST whose centroid is displaced to the distance r 0 from the aperture center. In the limit of weak beam wandering, the conditional moments can be written as (see Ref. [92] for details) where Here, W ST is given by (45) and I n (x) is the modified Bessel function of nth order. The parameters of the conditional distribution (57) are determined from Eqs. (58) and (59) approximately: The knowledge of the parameter set { η , η 2 , σ BW , W ST } is therefore sufficient for the determination of the channel PDT. For detection with a Cassegrain-type telescope, the PDT derivation procedure can be further generalized as described in Ref. [94]. Practical optical communication via satellites is impossible without acquiring and tracking the received signal. Both beam wandering due to atmospheric turbulence [41] or satellite vibrations [95] cause changes in the direction of the received beam that result in misalignment between the communication parties. Moreover, the velocity aberration point ahead and the atmospheric dispersion effects [96] should be taken into account. The compensation of these disturbances requires an active beam steering that is accomplished by mechanical means. Quantum key exchange with low mean intensities requires especially precise beam tracking and stable pointing [97,98]. Applying coarse and fine tracking and pointing strategies, one can achieve a tracking accuracy of approximately θ tr ∼ 1.2µrad for LEO-ground communication links [99]. We incorporate the tracking procedure in the PDT model (55) by replacing in Eq. (56). Finally, we note that the parameters (60) and (63) still contain the beam wandering variance, and we calculate σ 2 BW by means of Eq. (52).

VI. APPLICATION: DECOY STATE PROTOCOL
We apply the developed theory of satellite-mediated quantum atmospheric channels for the calculation of the secret key rate when decoy states are in use [100,101]. Conventionally, we refer to communication parties Alice and Bob as to the sender and the receiver, respectively. Based on the BB84 protocol [14], the decoy-state method estimates channel parameters by sending two types of states. While one type of states (signal states) is used for transmission of quantum keys, the other is called the decoy state, which is used for the estimation of the number of transmitted single-photon states. Ideally, the singlephoton states are most suitable to be used as the signal. Practically perfect single-photon sources are hard to attain and one uses weak coherent states instead. In the security analysis of the decoy-state method, both signal and decoy states possess equal properties except for their intensity.
Usually, only a few decoy states are needed for practical implementations. A simple two-decoy-state protocol with vacuum+weak decoy states gives an optimal key generation rate which is the same as having an infinite number of decoy states [102]. On the first stage of the protocol, Alice, who has a phase-randomized source of coherent states, encodes the bits in the X or Z basis as in the standard BB84 scheme, e.g., by utilizing polarization degrees of freedom. Additionally to the signal field, she generates decoy states in vacuum and weak coherent states. The phase randomization makes the source statistically equivalent to a Poissonian distribution of Fock states such that, when the average photon number from the light source is µ, the probability to send an n-photon pulse is e −µ µ n /n!. We denote the mean photon numbers as µ j , j = s, d, v for signal, weak-decoy, and vacuum states. The following conditions are satisfied: µ d < µ s < 1, µ v = 0. After transmission through the free-space channel, Bob performs measurement of transmitted bits in a randomly chosen X or Z basis. The conditional probability of a detection event at Bob's side given that Alice sends an i-input state is referred to as the yield Y i of an i-photon state. The vacuum state is used for the estimation of the background detection probability Y 0 while the weak-decoy state allows one to estimate the single-photon yield Y 1 and the error rate of the single-photon state e 1 . Since both signal and weak-decoy states propagate through the same channel, the singlephoton yield would be the same for these states. Due to this property, the security of the decoy-state protocol against the photon-number splitting attacks [15,103] or the Trojan-horse attacks [104] can be verified.
As the next step, the parties perform the sifting of the raw key, its error correction, and privacy amplification. Finally, if these steps were successful, Alice and Bob share a shorter but more secure key. Defining the averaging over channel fluctuations with the applied beam tracking procedure (66) as we find for the lower bound of the average secure key rate Here, q depends on the implemented protocol, is the binary Shannon information function, Q µs is the gain of the signal states, Q 1 is the gain of single-photon states, and f (x) ≥ 1 is the bidirectional error correction efficiency (f (x) = 1 corresponds to the perfect error correction case). The quantum bit error rate, QBER, is estimated as The gain Q µs represents the ratio between the number of events where Bob observes a click under the condition that Alice sends a certain number of signal states.
This overall gain with respect to an ideal threshold detector [105] can be evaluated as [102] where the yield of the i-photon state is Here accounts for deterministic losses such as detector efficiency, channel losses due to atmospheric extinction (10), and absorption by optical components, while η is the random transmittance of the free-space channel [cf.
Eq. (28)]. Similarly, defining the error rate of the i-state as one derives for the overall error gain Here, e det is the probability that an incorrect bit value occurred that depends on the alignment and the stability of the optical system. The background error rate is e 0 = 1/2 for randomly occurring dark and background counts. The dark count contribution to Y 0 is of order 10 −6 for a commercially available Geiger-mode APD at room temperature and can be further decreased with proper cooling. The contribution from transmitted vacuum decoy states with the accounting of finite-size effects is given in Appendix G. The total value Y 0 can be further enhanced due to sky-noise photodetection [35,106,107]. In this article we assume that the background error rate is constant with the value taken from Ref. [6]. For the determination of the single-photon gain, Q 1 , and the single-photon error rate, e 1 , in Eq. (68) the statistical fluctuations must be considered. Indeed, since the communication link with a LEO satellite can be established for only several minutes, only a finite set of data can be transmitted. In the security analysis the accounting for possible deviations from most probable values must be taken into account. Moreover, statistical fluctuations tend to become more important as the distance of the QKD increases, i.e. for large values of the zenith angle. In Ref. [102] the Gaussian model and in Refs. [108,109] the Chernoff-Hoeffding method have been applied for deriving finite-key security bounds. We adopt the statistical fluctuation analysis of Ref. [110] that uses the Chernoff bound for establishing the lower bound for single-photon gain, and the relation between the upper bounds for singlephoton error rates, We calculate the secure key rate for the downlink communication scenario. Table III lists the values of parameters used in the calculation, whereas Table I gives parameters of the atmospheric link and communication system. With the source of repetition rate 150 MHz, the total number of generated bits by Alice during 14 minutes of communication session is N = 10 11 . We estimate the mean number of sifted key bits, where η sift = 0.5 is the sifting efficiency for conventional sifting protocols. The number of sifted key bits is averaged over the fluctuations of the channel transmittance and depends on the zenith angle (e.g., for zenith orbit M s tr = 1.   Figure 7 shows the QBER and the lower bound of the secure key rate calculated for several inclination angles of satellite orbits relative to the observer's meridian plane. For small zenith angles scintillations, atmospheric refraction, and absorption have minimal impact on the performance of decoy-state protocols. The QBER has almost constant value, the phenomenon that was theoretically predicted for satellite links in Ref. [111] and experimentally observed in Refs. [6,39,99]. Figure 7 a) shows a similar behavior for the zenith angles where the apertureaveraged scintillation index has the asymptotic behavior (27) and satisfies the condition σ 2 η < 1. In the region of saturated scintillations the QBER grows making quantum communication impossible for large zenith angles. In this region the wavefront distortions are maximal. These distortions together with the extinction losses lower the signal-to-noise ratio and correspondingly the QBER is inflated by the larger relative contributions from the background. The flat region of the QBER diminishes with the growing inclination angle of the satellite orbit allowing smaller time windows for the secure key exchange as shown in Fig. 7 b).
It is worth to note that by placing the observer at high altitudes above sea level this time window can be increased. Indeed, the thickness of the dense ground layer, which is responsible for scintillation, is different at sea level and at high altitudes. This causes a shift of the region with saturated scintillations to higher zenith angles. This phenomenon can be observed if one compares the curves of Fig. 4 calculated for the observer at sea level with the experimental curve of Fig. 5 with observer's elevation of 602 m above sea level. The saturation region may even vanish at particularly high altitudes, the phenomenon which is known in optical astronomy [62,67,68]. This observation makes observatories in mountains especially attractive as a OGS node for quantum free-space communication with satellites.

VII. CONCLUSIONS
In this article we have presented the theoretical analysis of satellite-mediated quantum links. We have dis-cussed the influence of regular refraction, extinction, and turbulence on the transmission properties of optical signals through the Earth's atmosphere. Since in satellitemediated communication scenario the position of the satellite changes rapidly for the observer located on the Earth's surface, the thoughtful analysis is presented of how atmospheric disturbances depend on the observer's geographical position, observer's zenith angle, and the orbit inclination angle.
We focus our analysis on low orbit satellites with perfect polar orbit. In particular, we considered the case when the satellite orbit is inclined to the observer meridian and derived the corresponding slant range. The orbit inclination restricts the definition range of the zenith angle by introducing the lower bound of the angle. As a consequence, the most favorable satellite trajectory corresponds to the zenith orbit that passes through the observer meridian. In this case, the smallest zenith angle is zero and the slant range is the shortest one at the observer zenith.
The effect of regular atmospheric refraction increases the optical slant range and changes the value of the true zenith angle to the apparent one. This effect is especially pronounced near the horizon where it can increase the propagation path of the optical signal up to 30%. Based on the standard atmosphere model we derived the corresponding path elongation factor as a function of the apparent zenith angle and gave the corresponding analytical fit formula. The resulting slant range has been used for the calculation of the atmospheric extinction factor due to absorption and scattering on atmospheric gases and aerosols.
Another important factor that deteriorates the optical performance of satellite-ground links is the atmospheric turbulence. It appears that the second-and the fourthorder optical field correlation functions play a central role in the description of light propagation through the turbulent media. These functions allow one to derive the aperture-averaged scintillation index, as well as the mean beam-spot radius and the beam wandering variance of the transmitted beam. Based on the properties of intensity covariance function, we have derived an analytical expression for the aperture-averaged scintillation index. For large zenith angles these scintillations saturate and decrease; this effect is well observed in experiment. It arises due to multiple scattering in most turbulent air layers near the ground, the process that degrades the performance of the receiver telescope and leads to the additional aperture-averaging of scintillations. Based on this simple model of aperture averaged scintillations, we have developed the rigorous approach for calculating field correlation functions and their moments.
The developed description of atmospheric channels has been adopted for the description of quantum light propagation through the Earth's atmosphere. For this sake we use the input-output relations for optical field operators, rewritten in terms of Glauber-Sudarshan P function. Fluctuations of the channel transmittance due to atmospheric turbulence are accounted with the help of the probability distribution of transmittance. We have obtained the latter for satellite-mediated quantum links using the law of total probability.
Finally, the security of quantum decoy-state communication protocols is analyzed with realistic channel parameters and communication conditions. In this connection, the inclusion of the finite-key effects plays an important role. Scintillation phenomena at large zenith angles influence greatly the performance of quantum channels, leading to a growth of the quantum bit error rate. In the region of saturated scintillations that appears close to the horizon, no secure quantum key can be obtained. For small zenith angles the quantum bit error rate has minor variation that allows one to obtain secure key bits within a certain time window. This window increases with the decrease of the satellite inclination angle relative to observer's meridian plane. We also expect that the increase of the observer's altitude relative to the sea level will lead to a decrease of the region with saturated scintillations and hence to a better communication performance.
We have omitted several aspects affecting the performance of the satellite-mediated quantum communication. Background radiation from the Sun, Moon, stars, or light reflected from the satellite introduce additional noise. This noise is detected by photodetectors, and therefore, it increases the quantum bit error rate. The use of light buffers, time gate, frequency, and spatial filters can partially mitigate the problem of background noise. In this study we have neglected the parallaxconnected errors due to the Earth's rotation during one communication session. For observers at small geographical latitudes, and for the satellites with small altitude such parallax effects should be included in the rigorous analysis. On the other hand, for the analysis of realistic communication scenarios not only the instantaneous position of a satellite relative to the observer is important, but also the relative position of the Sun or of the Moon. We refer to extensive literature that study the influence of background noise and dark counts on the satellite-mediated quantum key distribution.
Much less studied is the influence of random scattering on atmospheric aerosols and dust particles on the performance of satellite-based communication. Especially in overcast conditions the dominance of Mie scattering makes the optical quantum communication with satellites impossible. We have included in the model atmospheric extinction effects due to absorption and scattering on molecules and aerosols which correspond to average communication conditions. Under the conditions of low visibility and overcast skies, the performed analysis is not applicable.
Finally, here we have considered fundamental spatial modes for the light beams that have Gaussian profiles of the intensity distributions. The efficient generation of diffraction-free beams will allow one to reduce losses associated with regular and random diffraction in free-space and may extend the range of satellite-mediated quantum communication.

ACKNOWLEDGMENTS
The work was supported by the Deutsche Forschungsgemeinschaft through projects VO 501/21-2 and VO 501/22-2. The authors are grateful to A. A. Semenov for useful and enlightening discussions. In this appendix we derive the length of geometrical distance between the satellite and the optical ground station.

Geometry of satellite communication links
The geometric path length for a specific communication scenario is determined from the value of the zenith angle Z, which in turn is a function of the satellite orbit inclination, the instant position of the satellite, and geometric latitude of the observer. In the Earth surface coordinate system of the observer the position of the satellite is given by the zenith angle Z and the azimuth angle A. The latter we measure from the north point eastwards. In the Earth center (geocentric) coordinate system the satellite position is determined by its declination angle and its orbit inclination angle. For circular orbits the declination angle is given by where ω sat = 2π/T sat is the angular speed of the satellite with orbiting period T sat and t Pole is the reference time associated with the trajectory crossing either the North or South Pole. During a single communication session the declination angle changes from δ 0 to δ 0 + δ com with δ 0 being the initial declination of the satellite when it appears on the observer horizon and δ com = ω sat t com = 2 arctan Here t com is the maximal duration of the communication session, H is the satellite altitude above the ground, and R ⊕ is the Earth radius. Finally, the inclination angle ∆ι we define as the angle between the observer meridian plane and the satellite orbit plane and the geographical latitude of the observer we denote as Ψ. The set {Ψ, δ, ∆ι} determines the instantaneous position of the satellite relative to the observer in the geocentric coordinate system and is the alternative parameter set to the set {A, Z} in the Earth surface coordinate system. The following relation between angles Z, δ, ∆ι, Ψ shown in Fig. 8 can be established using spherical ϕ FIG. 8. Geometric representation of the surface and geocentric coordinate systems. The Earth surface coordinate system for the observer showing the azimuth A and the zenith Z angles. The geocentric coordinate system is defined in terms of the declination angle δ and the inclination angle ∆ι. The geographical position of the observer is given by the latitude Ψ while the parallax correction caused by the finiteness of the satellite altitude H is determined by the angle ϕ. trigonometry cos Z = sin Ψ sin δ + cos Ψ cos δ cos ∆ι. (A3) Here δ changes during the communication session from δ 0 = − arctan(cos ∆ι cot Ψ) to δ 0 + δ com . We note that the finite value of the inclination angle ∆ι in (A3) restricts the definition domain of Z to [Z ∆ι min , π/2] for the observer located at the geographical latitude Ψ. The minimal value of Z can be found from Eq. (A3) as which corresponds to the satellite declination angle (counted from the Equator) δ ∆ι min = arccos cos Ψ cos ∆ι The knowledge of the satellite declination angle, the orbit inclination angle, and geographical position of the observer allows one to determine the instantaneous values of zenith angle from Eqs. (A3) as well as to determine the slant range.

Inclined and zenith orbits
In most practical cases the satellite trajectory is inclined relative to the observer zenith direction. For example, the initial trajectory with zero inclination to the observer's zenith becomes inclined when the satellite makes one or more revolutions. Let us consider the satellite whose orbit initially has zero inclination relative to the meridian plane of the observer O (see Fig. 9). Let us also assume that initially the satellite is positioned at observer's zenith, i.e., at point S . For simplicity we consider the ideal polar orbit that passes through both Earth's celestial poles. After time T sat , i.e., the satellite orbiting period, the satellite is positioned again in the point S . Meanwhile the observer position O is moved to the point O due to Earth's rotation. The resulting inclination angle reads as where v ⊕ is the speed of Earth's rotation at the Equator.
Here and in the following we assume that the change of the inclination angle during the satellite transition over the observer horizon is relatively small, so that we can approximate it being constant (A6) during the whole communication session. The negative values of ∆ι refer to situations when the visible satellite trajectory is positioned eastwards to the observer. We calculate the slant range between O and S along the satellite orbit provided the trajectory S S of the moving satellite lies above the observer horizon H. The instantaneous position of the satellite relative to the observer is determined by zenith Z and azimuth A angles as shown in Fig. 8. For satellite tracking purposes both these angles are of importance. In the context of optical satellite-based communication we are interested primarily in the instantaneous value of the slant range as a function of zenith angle. Indeed, by assuming that tracking systems point correctly the telescope towards the flying satellite, we can can ignore the dependence of the slant range on the azimuth angle. Then, the slant range L for the inclined orbit can be determined from the triangle OSC in Fig. 2 using the law of cosines Solving this equation with respect to L we obtain The root of the quadratic equation (A7) is chosen to yield the non-negative slant range. At the observer's horizon the slant range reaches its maximal value L(90 • )= The shortest slant range is determined as L(Z ∆ι min ), where the minimal zenith angle is given by Eq. (A4).
The special case of the slant range (A8) corresponds to the zenith satellite orbit with zero inclination angle ∆ι. Some authors refer to this orbit as to the "best pass" [42] since the slant range, that we denote as L 0 , gives the shortest distance between the observer and the satellite at zenith, namely, L 0 (0 • ) = H. This fact makes the zenith orbit as well as the orbits with small inclination angle ∆ι most attractive for the optical communication. Denoting the zenith angle within the zenith orbit plane (observer's meridian plane) as Z 0 , it follows from Eq. (A3) that Z 0 = Ψ − δ. Consequently, we have L 0 (Z 0 ) = L(Z) ∆ι=0 .

Appendix B: Standard Atmosphere
The standard atmosphere is an idealized model of the Earth's atmosphere for heights ranging from the surface to 1000 km [52]. The model yields the air density, viscosity, etc., for various altitudes. For our purposes, the most useful values calculated within the standard atmosphere model are the temperature T and the pressure P . These variables are important for the calculation of the refractive index variation with altitude.
The altitude dependence of the temperature is approximated with linear segments Each segment lies within an atmospheric layer bounded by the surfaces with the altitudes H b−1 and H b . Table  IV summarizes the reference values T b and the vertical gradient values of temperature (lapse rates) which enter Eq. (B1). The altitude dependence of pressure can be found from the gas law and hydrostatic equation and reads as for constant lapse rate and for isothermal layers (λ b = 0). Here g = 9.8 m/s 2 is the gravitational acceleration and R = 287.053 J/kg · K is the gas constant for air. The reference values of pressure P b are given in Table IV.   Here λ is the optical wavelength given in µm.
Since the values of the refractive index are distinct from the vacuum value n = 1 up to the mesosphere, we restrict our attention only to altitudes ranging from 0 to 85 km. Figure 10 shows the variation of temperature, pressure and refractive index with altitude. The temperature profile shows several layers where temperature dependence on altitude can be approximated by linear relations. We use these specific altitudes for the calculation of the refractive index profile using linear segmentation. Such a procedure simplifies the calculation of atmospheric refraction but introduces errors that grow for large zenith angles Z ∼ 90 • . The altitude dependence of the refractive index within the ith segment reads as  For the calculation of the deterministic atmospheric extinction, the number density of absorbing and scattering particles is required. The standard atmosphere model gives the following dependence of the relative number density on altitude h (given in meters) [58], Here N 0 is the number density at the observer level (N 0 = 2.55 × 10 25 m −3 at sea level) and H 0 = 6 600 m.
Appendix C: Path elongation due to atmospheric refraction In the presence of Earth's atmosphere, the slant path L is elongated due to refraction on interfaces of atmospheric layers with different refractive indices (see Fig. 11). In the real atmosphere the gradient of the refractive index is a continuous function of height. We use the standard atmosphere model and consider 10 atmospheric layers (c.f. Appendix B, Table V As a consequence of atmospheric refraction the apparent zenith angle Z a starts to deviate from the true zenith angle Z. These angles are related with each other as where n 0 = 1.00027 is the refractive index of the lower layer of atmosphere [54]. Near sea level the two zenith angles differ by approximately a minute of arc at Z = 45 • and half a degree near the horizon. Refraction of optical rays happens on the ith interface of two adjoined ith and (i + 1)th layers of heights H i and H i+1 , correspondingly, and is characterized by the angle of incidence π/2 − β i and the angle of refraction ψ i (see Fig. 11). If the ray enters the observer telescope at the zenith angle Z a , Snell's law yields the geometric invariant where is the elevation angle at the observer O and R ⊕ is the Earth radius. Using the notation with H being the altitude of the satellite above the where the index N corresponds to the last atmospheric layer at altitude 85 km which is accounted in our calculations (in our case N = 10). We also use the index i = 1, ..., N to denote the atmospheric layers above the ground level. Using simple geometric considerations and Snell's law, we derive the following relations for the angles relevant for the calculation of the ray path length, The remaining angles to be determined are δ i and r i . The former angle is associated with the local elevation angle error and can be found from the law of sines Solving these equations with respect to δ i we derive The remaining angle r i is the bending angle within an ith layer which is calculated from the refraction integral [48], The total angle r = i r i is known in optical astronomy as atmospheric refraction. It can be shown that the refraction integral (C16) can be simplified to the following approximate analytical form, provided that H i − H i−1 H i−1 and if the refractive index gradient dn/dh is constant within the atmospheric layer.
The length of the optical ray path inside the ith layer can be found from the triangle CP i−1 P i applying the law of cosines For the optical path length in vacuum we find from the triangle CP N S Herein we need the angle The ratio of the total length of the ray trajectory to the geometric path length [c.f. Eq. (1)] reads as, which is the elongation factor due to atmospheric refraction.
The elongation factor (C22) is calculated without taking into account the finite radius of curvature of optical rays. Actually, the beam curvature near the ground is the smallest one, i.e. the ray bending is the greatest. In this case the empirical function for ray curvature K is given by [55,56] where T is the temperature in K, P is the pressure in mb, λ(h) = dT /dh is the lapse rate in K/km. For the standard atmosphere at Z a = 90 • the curvature reaches its minimum value of 4.4R ⊕ . Since this value is still larger than the Earth's radius, we can assume that the optical rays within each atmospheric layer can be considered to be straight lines.
Appendix D: Atmospheric model of optical turbulence Dewan et al. [112] proposed a simplified version of the multiparameter VanZandt model [113] for the refractive index structure parameter variation with altitude. This so-called Air Force Geophysics Laboratory (AFGL) model utilizes the meteorological data derived from radiosondes and yields the following analytic formula for the refractive-index structure parameter profile: Here the factors (0.1) 4/3 10 Y (h) determine the outer scale of turbulence in a statistical manner. The function Y (h) is empirically related with the altitude-dependent wind shear S(h) and the lapse rate λ(h) as [114] Y The parameter M is connected with the gradient of the index of refraction, where P is the pressure in mb, the temperature T is given in K, the buoyancy frequency (Brunt-Väisälä frequency) in s −1 . The buoyancy frequency reads as where g is the acceleration of gravity, and γ = 9.8 K/km is the dry air adiabatic lapse rate. The altitude dependencies of pressure and temperature are governed by Eqs. (B1), (B3), and (B4). The altitude variation of the refractive index structure parameter can be determined from Eq. (D1), provided the altitude variation of the wind shear S(h) is known. In this study we assume horizontal homogeneity of the atmosphere, which means that the mean wind properties do not depend on the horizontal position of the observer. Thus, we assume a flat terrain and neglect any spatial inhomogeneity of Earth's surface. This assumption is equivalent to the independence of the vertical wind component on altitude [115]. For the determination of the vertical wind shear components due to meridional and zonal winds we use the HWM93 thermospheric wind model [116]. The examples of winds and corresponding shear components are shown in Fig. 12 for summer night and the observer located near Munich [117].
For the atmospheric boundary layer close to the Earth's surface, the refractive index structure parameter given by Eq. (D1) is not applicable. We use the Walters and Kunkel model (WK) [118] for the C 2 n profile within the boundary layer, for nighttime and for daytime. Here h i is the height of the inversion layer above the ground (h i ∼ 0.5 km at nighttime and ∼ 1 km at daytime), h 0 is the reference height referred to as the Typical example of the mean meridional (solid line) and the zonal (dashed) winds is shown together with the corresponding vertical wind shear components. The HWM93 empirical wind model [116] for the northern hemisphere (48 • N, 11.5 • E) summer (day 236) at midnight has been used for the calculation.
Monin-Obukhov scale (h 0 ∼ 10 m at nighttime and ∼ 5 m at daytime). Profiles of the refractive index structure function: AFGL, WK, and Hufnagel models are compared to the thermosonde data adopted from Ref. [120]. The inset shows the refractive-index structure parameter within the boundary layer with respect to the inversion height. Figure 13 shows the profile of the refractive-index structure parameter calculated using the AFGL and the WK models [cf. Eqs. (D1), (D7), and (D8)]. For comparison, the widely used Hufnagel model [119] as well as the estimation of C 2 n based on thermosonde data [120] are shown. The AFGL+WK model agrees better with the experimental profile than the Hufnagel model. The difference between nighttime and daytime profiles is negligibly small for the altitudes above the inversion layer height h i . Figure 12 shows the different behavior of the wind shear for meridional and zonal winds. However this anisotropy has almost no influence on the C 2 n profile. As a consequence, we could neglect the dependence of this turbulence characteristics on the direction of view of the observer.
Finally, we relate the vertical profile C 2 n (h) to the corresponding profile along the slant range. For the uplink configuration, the relation between the height h of the certain point along the slant path and the distance between this point and the light source, L r ξ, ξ ∈ [0, 1], can be found from the law of cosines [cf. Ref. [61] and see Fig. 2 Similarly, for the downlink we derive by replacing ξ → Under the condition L r /R ⊕ 1, these equations reduce to The refractive index structure parameter given by Eqs. (D1), (D7), and (D8) maps for the uplink slant range as C 2 n (h) → C 2 n (h UL ) = C 2 n (L r , ξ) and for the downlink as C 2 n (h) → C 2 n (L r , 1 − ξ). In this appendix we give the approximation for the integral kernel (38). We consider the downlink configuration and just note that the formulas for uplink are obtained in the similar footing with the variable replacement ξ → 1 − ξ. For the case of strong turbulence or long propagation distances in turbulence the coherence radius ρ 0 [cf. Eq. (25)] is small. This condition is well satisfied for satellite-mediated atmospheric links. In this case, the exponential in Eq. (38), J (r, r 1 , r 2 , r 3 ), differs significantly from zero in the following regions: |r 2 |ξ ρ 0 , |r 3 |ξ, |r(1−ξ)+r 1 ξ| ρ 0 ; (E1) |r(1−ξ)+r 1 ξ| ρ 0 , |r 2 |ξ, |r 3 |ξ ρ 0 ; (E2) |r 2 |ξ, |r 3 |ξ, |r(1−ξ)+r 1 ξ| ρ 0 .
The function (38) can be approximated then as linear combination of three terms [77,121] which already gives a good approximation to the kernel J (cf. Ref. [77]).
Appendix F: Phenomenological model of aperture-averaged scintillations The rigorous analysis of satellite-mediated quantum communication links should account for turbulent disturbances for a wide range of the zenith angle. Here we calculate the aperture averaged scintillation index with accounting for saturation effects. The aperture-averaged scintillation index can be obtained by substitution of Eq. (28) in Eq. (27), which leads to [40] 3 where f A (κ) = 1 A A d 2 re iκ·r 2 (F2) 3 Originally, the expression for the scintillation index for the log transmittance, σ 2 log η , is derived in the chapter 13 of Ref. [40]. Equation (F1) is then obtained from the relation σ 2 η = exp[σ 2 log η ] − 1 (cf. Ref. [41]).
is the aperture filter function, and I is the mean intensity. The Fourier transformed correlation function of the intensity fluctuations is given by For a circular aperture of radius a the filter function (F2) is easily evaluated to be where κ = |κ| and J n (x) is a Bessel function of the first kind.
In the limiting case of the vanishingly small Fresnel number Ω = kW 2 0 /(2L r ) → 0 the collimated beam with the initial beam spot size W 0 can be considered as a plane wave. Indeed, for the satellite-mediated link under consideration the slant range L r is large enough even at the zenith and Ω → 0. In this limiting case the intensity spectral density F I (κ, L r ) can be obtained by solving the equations of geometrical optics [40] where the turbulence spectrum Φ n is given in Eq. (16). For the Kolmogorov turbulence spectrum (18) the intensity spectral density F I (κ, L r ) is proportional to κ 1/3 in the inertial range. Thus, for large values of the transverse wave number the intensity spectral function diverges. In order to remedy this nonphysical effect we introduce the cutoff of higher spatial frequencies ∆κ such that κ ∈ [0, ∆κ]. The specifical choice of ∆κ will be discussed later in this appendix. Taking into account this cutoff effect the aperture averaged scintillation index is calculated straightforwardly, The obtained result shows that the intensity fluctuations are directly related to spectrum of turbulent fluctuations of the refractive index. For the Kolmogorov turbulence spectrum (18) the integrations can be performed, provided the altitude dependence of structure constant is known. Here we adopt a simple dependence on the z variable assuming that the to the vacuum state, weak decoy state, and signal state). The total number of bits sent by Alice to Bob is given by where the superscripts correspond to signal (s), weakdecoy (d), and vacuum (v) states. We denote q a = N a /N as the rate with which Alice encodes a state with intensity µ a , a = s, d, v. The conditional probability that an iphoton state corresponds to a coherent pulse with the intensity µ a is where the approximation sign is due to statistical fluctuations. The finiteness of numbers of generated bits yields for the q parameter in Eq. (68). Bob measures the received states in X or Z basis chosen randomly. After basis reconciliation and key sifting, Bob possesses the total number of sifted bits For the atmospheric quantum channel, the bit numbers N and M are related as where the factor 1/2 is due to the sifting procedure, η d is the deterministic channel loss including the detector efficiency given by Eq. (72), and η is the fluctuating channel transmittance. The bit number corresponding to the iphoton state is determined as where p a 1 is the same as the probability (G2) chosen by Alice.
After error correction and error verification the secure key rate depends on a lower bound, on the gain of singlephoton components of the signal state Q L 1 and an upper bound, on the corresponding error rate e U 1 . The estimation of Q L 1 and e U 1 should be performed in each basis. The corresponding components we denote by superscripts x and z referring to the X and Z bases, correspondingly. For the Z basis the bounds on the single-photon gain and the error rate are given by where Y γL Here e 0 = 1/2 and the lower and upper bounds are estimated by using the Chernoff bound method and are related to the overall gain (70), with the overall quantum bit error rate (74) components, and with the counting rate for vacuum decoy states and dark count contributions The deviation function with respect to θ U [110,124]. Here, the averaging ... tr is performed according to Eq. (67) and the lower bounds of sifted key numbers are with q a = N a /N . In Eq. (G17) the exponential function ξ(θ) read as [124] ξ(θ) ≈ ln 2 2 (1 − q x )q x (1 − e xU