A hyper-entanglement photon server (i.e., hub) employs non-degenerate frequencies input as entangled photon pairs into a beam splitter. The beam splitter splits probability amplitudes into two sets of bunched superposition states plus two sets of anti-bunched superposition states. The amplitudes pass through identical Lyot filters and then either enter a polarization beam splitter, where the bunched and anti-bunched states switch identities, or merely advance unchanged to awaiting users at two distinct and spatially-displaced positions (i.e., spokes). The Lyot filters change the output amplitudes from rotationally invariant superpositions of generalized Bell States to rotationally non-invariant superpositions of generalized Bell states. All hubs and spokes pre-share operating key material (a security method called KCQ) that may be continually updated by shared stream ciphers seeded by fresh key material engendered by hub-to-spoke quantum communication.