Subchannel security at the optical layer

• US 8,705,741 B2
• Filed: 02/21/2011
• Issued: 04/22/2014
• Est. Priority Date: 02/22/2010
• Status: Active Grant

• Current Assignee: Snell Holdings, LLC (Treq Labs, Inc.)
• Original Assignee: Vello Systems Incorporated
• Inventors: Voruganti, Pavan, May, Karl
• Primary Examiner(s): HOLDER, BRADLEY W
• Application Number:
  US13/031,594
• Publication Number:
  US 20110206203A1
• Time in Patent Office: 1,156 Days
• Field of Search: 380/256, 380/255, 380/268
• US Class Current: 380/256
• CPC Class Codes: H04K 1/04 by frequency scrambling, i.e. by transposing or inverting parts of the frequency band or by inverting the whole band
• CPC Class Codes: H04K 1/08 by varying the polarisation of transmitted waves
• CPC Class Codes: H04K 1/10 by using two signals transmitted simultaneously or successively

Abstract

The present invention includes various novel techniques, apparatus, and systems for optical WDM communications that involve dynamically modifying certain aspects of the WDM transmission (and corresponding receive) process at the optical (physical) layer to significantly enhance data/network security. These various dynamic modifications can be employed individually or in combination to provide even greater security depending upon the desired application and design tradeoffs. WDM transmission steps typically include encoding the client signals, mapping them to one or more subchannels within or across ITU channels, modulating them onto subcarrier frequencies, and multiplexing them together for optical transmission. By dynamically modifying one or more of these processing steps over time (in addition to any encryption of the underlying client signals), the current invention provides additional security at the physical (optical) layer of an optical network and thus greatly enhances overall network security.

Claims

1. A method of providing security at the physical layer of an optical network by processing client signals for transmission on a fiber optic cable of the optical network, the fiber optic cable carrying a plurality of ITU (International Telecommunications Union) channels, each ITU channel having a corresponding ITU carrier frequency and a plurality of subchannels, each of the subchannels having a corresponding subcarrier frequency within that ITU channel, the method comprising the following steps:

(a) encoding a plurality of client signals;

(b) buffering and synchronizing the encoded client signals;

(c) mapping the buffered and synchronized encoded client signals to respective subchannels of the ITU channels, wherein each subchannel of the ITU channels corresponds to a subcarrier frequency of its corresponding ITU carrier frequency, and wherein each subcarrier frequency of its corresponding ITU carrier frequency is generated by a separate distinct laser;

(d) modulating each subchannel of the ITU channels onto the subcarrier frequency of its corresponding ITU carrier frequency;

(e) multiplexing together those subchannels of the ITU channels whose corresponding frequencies fall within the same ITU channel to create a plurality of ITU channel signals, and multiplexing the ITU channel signals to generate and transmit an optical signal along the fiber optic cable of the optical network; and

(f) modifying dynamically over time one or more of the processing steps (a)-(e).

2. The method of claim 1, wherein one or more of the dynamic modifications are triggered randomly over time.

3. The method of claim 1, wherein one or more of the dynamic modifications are triggered in response to a predetermined condition.

4. The method of claim 3, wherein the predetermined condition includes detection of an intrusion into the optical network.

5. The method of claim 1, wherein the encoding of the client signals is modified dynamically by alternating between ITU scrambling standards G.709 and G.975.

6. The method of claim 1, wherein the buffering and synchronizing of the encoded client signals is modified dynamically by changing a data rate of one or more encoded client signals.

7. The method of claim 1, wherein the mapping of the buffered and synchronized encoded client signals is modified dynamically by remapping one or more buffered and synchronized encoded client signals to a different subchannel within the same ITU channel, or to a subchannel within a different ITU channel.

8. The method of claim 1, wherein the modulation of each subchannel is modified dynamically to introduce a lambda drift of its corresponding subcarrier frequency within an ITU channel window.

9. The method of claim 1, wherein the modulation of each subchannel is modified dynamically by changing a polarization state of its corresponding subcarrier frequency.

10. The method of claim 1, wherein the modulation of each subchannel is modified dynamically by changing a modulation scheme.

11. A method of providing security at the physical layer of an optical network by processing an optical signal received on a fiber optic cable of the optical network, the fiber optic cable carrying a plurality of ITU (International Telecommunications Union) channels, each ITU channel having a corresponding ITU carrier frequency and a plurality of subchannels, each of the subchannels having a corresponding subcarrier frequency within that ITU channel, the method comprising the following steps:

(a) receiving the optical signal along the fiber optic cable, demultiplexing the received optical signal into a plurality of ITU channels, and demultiplexing each ITU channel into a plurality of subcarrier frequencies of its corresponding ITU carrier frequency, each subcarrier frequency representing a corresponding subchannel within that ITU channel;

(b) demodulating each subcarrier frequency of the ITU carrier frequencies into its corresponding subchannel of the ITU channels;

(c) demapping each subchannel of the ITU channels into a buffered and synchronized encoded client signal, wherein each subchannel of the ITU channels corresponds to a subcarrier frequency of its corresponding ITU carrier frequency, and wherein each subcarrier frequency of its corresponding ITU carrier frequency is generated by a separate distinct laser;

(d) extracting an encoded client signal from each buffered and synchronized encoded client signal;

(e) decoding each encoded client signal; and

(f) modifying dynamically over time one or more of the processing steps (a)-(e).

12. The method of claim 11, wherein one or more of the dynamic modifications are triggered periodically over time.