Monitoring a fiber optic cable for intrusion using a weighted algorithm

• US 10,263,696 B2
• Filed: 06/11/2018
• Issued: 04/16/2019
• Est. Priority Date: 06/12/2017
• Status: Active Grant

• Current Assignee: Network Integrity Systems, Inc.
• Original Assignee: Network Integrity Systems, Inc.
• Inventors: Murphy, Cary R., Goertzen, Daniel M, Bridges, Mark K.
• Primary Examiner(s): Jordan, Andrew
• Application Number:
  US16/005,226
• Publication Number:
  US 20190074896A1
• Time in Patent Office: 309 Days
• CPC Class Codes: G01D 5/353 influencing the transmission properties of an optical fibre
• CPC Class Codes: G01M 11/33 with a light emitter being disposed at one fibre or waveguide end-face, and a light receiver at the other end-face
• CPC Class Codes: G08B 13/186 using light guides, e.g. optical fibres
• CPC Class Codes: H04B 10/07955 Monitoring or measuring power
• CPC Class Codes: H04B 10/85 Protection from unauthorised access, e.g. eavesdrop protection
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

An optical fiber is monitored for changes in a monitor signal caused when the fiber is subjected to vibration, motion, or handling typical of an intrusion attempt and for triggering an alarm condition in response by one or more sensors. The sensor emits data on each disturbance event including the existence of the disturbance event and a value associated with the disturbance event dependent on an intensity of the disturbance. The arrangement herein provides an algorithm to analyze the disturbance events which calculates for each event a score dependent on the presence of the event and the value associated with the event, generates a summation of the scores in a FIFO and when the summation of the scores exceeds a predetermined threshold within a predetermined time period, the processor emits a signal triggering the alarm condition.

Claims

1. A method for monitoring an optical fiber for changes in a monitor signal transmitted along the fiber caused when the fiber is subjected to vibration, motion, or handling that would be typical of an intrusion attempt and for triggering an alarm condition in response thereto comprising:

transmitting the monitoring signal along the fiber;

using one or more sensors to detect disturbance events of changes in the monitor signal transmitted along the fiber caused when the fiber is subjected to vibration, motion, or handling that would be typical of an intrusion attempt;

wherein the sensor emits data on each disturbance event including the existence of the disturbance event and a value associated with the disturbance event dependent on an intensity of the disturbance;

and using an algorithm in a processor to analyze the disturbance events to determine when the alarm signal should be triggered;

wherein the algorithm;

calculates for each event a score dependent on the presence of the event and the value associated with the event;

generates a summation of the scores;

and when the summation of the scores exceeds a predetermined threshold within a predetermined time period, the processor emits a signal triggering the alarm condition.

2. The method according to claim 1 wherein the fiber comprises a single mode fiber and wherein the sensor is responsive to changes in polarization of the monitor signal.

3. The method according to claim 1 wherein the fiber comprises a multi-mode fiber and the sensor is responsive to changes in modal power distribution in the fiber which changes are indicative of manipulation of the fiber.

4. The method according to claim 1 wherein the received signals are at an end remote from a transmitted end.

5. The method according to claim 1 wherein the transmitted optical signals are provided from a polarized light source.

6. The method according to claim 1 wherein the score attributed to each event is dependent on the intensity value.

7. The method according to claim 1 wherein the score attributed to each event depends on the intensity value of the event and scoring factors associated with that event type.

8. The method according to claim 1 wherein the event is scored through a basis/factor method so that when an event occurs it can produce an event score which indicates the severity of the event.

9. The method according to claim 1 wherein parameters of the score are adjusted to achieve different alarming characteristics.

10. The method according to claim 9 wherein the equation for converting this into a score is:

event score=event basis+(event intensity×

event factor).

11. The method according to claim 1 wherein some events produce a vector of values where the event is scored through a vector basis/factor method, where a different basis/factor parameter is applied to each value of the vector, and the results summed to form a final score.

12. The method according to claim 1 wherein the events and the scores associated therewith are stored and summed in a FIFO.

13. The method according to claim 12 wherein the predetermined time period is defined by a time period of the FIFO which is a sliding time window in which alarm events are included in summation.

14. The method according to claim 13 wherein there is provide a time schedule arrangement of the FIFO in which the threshold and/or scoring factors are changed based on time to change detection goals.

15. The method according to claim 14 wherein there is provided a multiple FIFO arrangement for storing different ones of the events and the scores associated therewith.

16. The method according to claim 15 wherein each FIFO is scheduled independently.