Secure optical communication components, method, and system

• US 4,217,488 A
• Filed: 01/21/1977
• Issued: 08/12/1980
• Est. Priority Date: 01/21/1977
• Status: Expired due to Term

• Current Assignee: Bell Telephone Laboratories, Inc. (Nokia Corporation)
• Original Assignee: Bell Telephone Laboratories, Inc. (Nokia Corporation)
• Inventors: Hubbard, William M.
• Primary Examiner(s): Griffin, Robert L.
• Assistant Examiner(s): Orsino, Jr., Joseph A.
• Application Number:
  US05/761,283
• Time in Patent Office: 1,299 Days
• Field of Search: 350/96 WG, 350/96.33, 350/96.24, 350/96.25, 350/96.28, 350/96.29, 350/96.30, 250/199, 179/1.5 E, 179/1.5 R, 179/1.5 M, 179/15 AP, 179/15 AN
• US Class Current: 398/40
• CPC Class Codes: G02B 6/4469 Security aspects
• CPC Class Codes: H04B 10/85 Protection from unauthorised access, e.g. eavesdrop protection
• CPC Class Codes: H04Q 11/04 for time-division multiplexing H04Q11/0001 takes precedence

Abstract

A transmitter of information to be communicated in secure form is optically coupled to a composite optical fiber at one end, the fiber being connected to a receiver of the secure information at the other end. The composite optical fiber has cores including a central core for carrying the secure information, one or more guard signal cores, a cladding matrix surrounding all the cores, and a metallic or other nontransmissive film surrounding the central core but not the guard cores. A guard signal optical transmitter section is coupled to the guard cores for jamming any leakage of secure information through the film, and a guard signal receiver section is provided at the other end of the fiber for monitoring purposes. The optical transmitter apparatus employs pulse code modulation (PCM) and sends related security bits in the guard and secure signals. The optical receiver apparatus features amplitude monitoring and a comparison of the related security bits and provides a warning when unexpected changes indicative of tampering are observed.

Claims

1. A secure subscriber loop optical communications system comprising:

subscriber station set means for sending outgoing message and signaling information and receiving incoming message and signaling information;

subscriber optical transmitter means having a message input, a signaling input, and a central office warning input and having a first secure optical output incorporating said outgoing information, and a first guard optical output for masking leakage of said first secure output;

subscriber optical receiver means having a second secure optical input for said incoming information, and a second guard optical input, and having a message output, a signaling output, a subscriber alarm output and a central office warning output communicating to said central office warning input of said subscriber optical transmitter;

subscriber system security status indication means responsive to said subscriber alarm output;

station set line apparatus means for routing said outgoing message and signaling information from said station set to said message input and signaling input of said subscriber optical transmitter and routing said message output and said signaling output from said subscriber optical receiver as said incoming information to said station set;

central office optical receiver means having a first secure optical input and a first guard optical input and having a central office message output, a central office signaling output, a subscriber warning output, and a central office alarm output;

central office alarm indicator means responsive to said central office alarm output;

central office optical transmitter means having a central office message input, a central office signaling input, and a subscriber warning input communicating with said subscriber warning output of said central office optical receiver, and having a second secure optical output for said incoming information and a second guard optical output capable of masking leakage of said second secure output;

central office line apparatus means for routing said incoming message and signaling information from a central office line to said central office message input and central office signaling input of said central office optical transmitter and routing said central office message output and said central office signaling output from said central office optical receiver of said outgoing information to said central office line; and

optical link means comprising first and second optical fiber transmission lines each having at least two cores encased in a cladding, including a central core surrounded by an opaque film in said cladding and also including at least one guard core exterior to said film;

said central core and said guard core or cores of said first fiber connecting said first secure optical output and first guard optical output of said subscriber optical transmitter respectively to said first secure optical input and said first guard optical input of said central office optical receiver,

said central core and guard core or cores of said second fiber connecting said second secure optical output and said second guard optical output of said central office optical transmitter respectively to said second secure optical input and said second guard optical input of said subscriber optical receiver, any said leakage from each said secure core through each said film of each said fiber being masked by each said guard signal output respectively;

said first secure optical input and said first guard optical input being monitored by said central office optical receiver so as to produce said subscriber warning when tampering on said first fiber is detected, said second secure optical input and said second guard optical input being monitored by said subscriber optical receiver so as to produce said central office warning when tampering on said second fiber is detected;

whereby a more secure subscriber loop is achieved.

2. A secure fiber optic communications system comprising transmitter means, an optical fiber link having first and second cores, and optical reception means,

said transmitter means comprising

clock means;

means for producing a first bit stream in a digital format from a first communications signal in a manner responsive to said clock;

electrically driven first light emitting means for introducing said first bit stream into a first core of said optical fiber link;

means for producing a second bit stream in a manner responsive to said clock; and

electrically driven second light emitting means for introducing said second bit stream into at least a second core of said optical fiber link;

said optical fiber link comprising a composite optical fiber including said first core and said second core in a cladding matrix, said first core being surrounded by a metallic film in said matrix all along the length of said first core so that escape of light from said first core through said metallic film is essentially prevented, said second core being exterior to said metallic film;

said optical reception means comprising

first photodetection means for obtaining said first bit stream from a first optical signal receivable after transmission through said first core;

second photodetection means for obtaining said second bit stream from at least one second optical signal receivable after transmission through said at least said second core; and

means for monitoring said first and second bit streams so as to detect changes therein indicative of tampering or malfunction and to provide a warning when said changes are detected.

3. A secure fiber optic communications system as claimed in claim 2 wherein

said digital producing means in said transmitter means comprises pulse amplitude modulation (PAM) means for sampling said first communications signal to produce a sampler output, a pulse code modulation (PCM) unit driven by said clock for encoding said PAM sampler output into PCM, and means ultimately responsive to said clock for producing system bits and combining said system bits with said PCM encoded sampler output to produce said first bit stream in said optical format.

4. A secure fiber optic communications system as claimed in claim 2 wherein

said digital producing means in said transmitter means repetitively provides at least one framing bit in said format thereby to enable identification of time slots;

and said digital producing means is also responsive to said means for producing a second bit stream so as to insert a security bit at a specific time slot in said format of said first bit stream so that said security bit has a prearranged relationship to a corresponding bit in said second bit stream; and

said monitoring means in said optical reception means comprises means responsive to said first bit stream for time slot identification and means for comparing said security bit in said first bit stream in said specific time slot with said corresponding bit in said second bit stream so as to determine whether the compared bits have the relationship prearranged at said transmitter, said warning being provided when said relationship ceases to be detected by the comparing means.

5. A secure fiber optic communications system as claimed in claim 2 wherein

said digital producing means in said transmitter means repetitively provides at least one framing bit in said format thereby to enable identification of time slots, said first bit stream having essentially zero energy transmitted at a specific time slot;

and

said monitoring means in said optical reception means comprises means responsive to said first bit stream for time slot identification and guard bit monitor means responsive to said first bit stream in said specific time slot, said warning being provided when said guard bit monitor means detects significant energy in said time slot.

6. A secure optical fiber communications system comprising first and second transmitter-link-optical reception units, each unit being as claimed in claim 2, wherein

said warning of said optical reception means of said first unit is conveyed to said transmitter means of said second unit;

said digital producing means in said transmitting means of said second unit repetitively provides at least one framing bit in said format thereby to enable identification of time slots, and said second unit transmitter digital producing means is also responsive to said first warning signal so as to insert an integrity check bit at a specific time slot in said format; and

said monitoring means of said optical reception means of said second unit comprises means responsive to said first bit stream from said second unit transmitter for time slot identification and integrity check bit monitor means responsive to said first bit stream in said specific time slot, an alarm being provided when said integrity bit changes in response to said first warning signal.

7. A secure optical transmission line including a first optical waveguide surrounded by a plurality of security optical waveguides, wherein said first optical waveguide and each of said security waveguides includes a core region surrounded by a cladding of lower refractive index;

CHARACTERIZED IN THAT

said line includes means for optically isolating said first waveguide from said plurality of security waveguides;

and in that the core regions of all the security waveguides are enbedded in and are in contact with a common cladding surrounding said optical isolating means.

8. An optical communication system comprising:

first and second signal sources of otpical wave energy;

an optical receiver;

and an optical transmission line connecting said sources to said receiver,

CHARACTERIZED IN THAT

said line includes;

a first secure optical wavepath, coupled to said first source, comprising a core region surrounded by a cladding of lower refractive index

said first wavepath being further surrounded by an absorbing layer and a plurality of guard wavepaths coupled to said second source;

and in that each of said guard wavepaths comprises a core region embedded in and in contact with a common cladding surrounding said absorbing layer.

9. The system according to claim 8 wherein said receiver includes means for separately receiving the signal from said first source, carried by said first wavepath, and the signal from said second source, carried by said guard wavepaths.

10. The system according to claim 9 wherein said receiver includes:

means for monitoring the amplitude of the signal from said second source;

and means for producing a system security warning when said signal amplitude departs from a prescribed level.

11. The system according to claim 8 wherein:

said signal sources produce first and second signals which are related to each other in a manner which permits comparing said signals to yield evidence of said relationship,

and means, included in said receiver, for making said comparison and producing a system security warning when evidence of said relationship is absent.

12. The system according to claim 10 wherein said signals are pulse encoded and include synchronized security bits;

and wherein said receiver includes means for comparing said security bits in said signals.

13. The system according to claim 8 wherein the signal produced by said second source includes a tag component not included in the signal produced by said first source;

and wherein said receiver includes means for monitoring said first signal for the presence of said tag component and for producing a system security warning when said tag component is detected.