Patent Application
20180159619
The present disclosure relates generally to optical fiber cables, and more particularly to preventing tapping of optical fiber cables.
Intruders can tap into optical fiber transmission lines and steal information by either bending a segment or segments of the fiber or by stretching (i.e. tapering) a segment or segments of the fiber via application of heat to enable reading and interpreting the signal energy escaping from that fiber. While there are other methods of tapping information out of optical fibers, taps based on fiber bending or stretching are easy to implement, effective, and can be hard to detect. Tapping valuable data transmitted over the world wide optical fiber infrastructure is a threat to every major industry and government organization and, in particular, larger organizations utilizing multiple facilities. While these organizations may be able to secure optical fiber cables within their own facilities, they generally have much less control over the optical fiber cable links between those facilities.
The vulnerabilities of optical fibers to tapping and, in particular, tapping by bending or stretching of the fiber, leaves many organizations susceptible to data theft. Such data theft could lead to leaking of confidential information, thereby causing harm to the entity transporting data over optical fibers. In the business context, leaking of information, such as marketing strategies or developmental technologies may ultimately result in damage to profits. In the governmental context, leaking of information related to national security may endanger the lives or citizens. Existing solutions face challenges in detecting and preventing tapping of optical fibers.
It is generally believed that data encryption can secure data transmitted over a fiber link usually implemented using high level Advanced Encryption Standard (AES). This approach neglects, however, the fact that while the data payload is encrypted, the IP header information that guides the data packets around the internet is not, revealing both the source and destination of each packet, therefore revealing information about any message sent over the internet.
It would therefore be advantageous to provide a solution that would overcome the deficiencies of the prior art.
A summary of several example embodiments of the disclosure follows. This summary is provided for the convenience of the reader to provide a basic understanding of such embodiments and does not wholly define the breadth of the disclosure. This summary is not an extensive overview of all contemplated embodiments, and is intended to neither identify key or critical elements of all embodiments nor delineate the scope of any or all embodiments. Its sole purpose is to present some concepts of one or more embodiments in a simplified form as a prelude to the more detailed description that is presented later. For convenience, the term some embodiments may be used herein to refer to a single embodiment or multiple embodiments of the disclosure.
The disclosed embodiments include a system for securing communication over an optical fiber. The system comprises: a transmit spatial multiplexer configured to couple a plurality of optical signals into respective ones of a plurality of spatial paths of an optical fiber, each of the spatial paths being able to carry an optical signal; wherein at least one of the plurality of optical signals is an optically modulated version of a desired sequence of information that is intended to be transferred over the optical fiber; and wherein at least one of the plurality of optical signals is an optical chaff signal; whereby a tap along the fiber cannot determine the transmitted desired sequence of information.
The disclosed embodiments also include a method for securing information transmitted over an optical fiber having a plurality of spatial paths. The method comprises: coupling each of a plurality of optical signals into at least a respective one of the plurality of spatial paths, wherein at least one of the plurality of optical signals is an optically modulated version of a desired sequence of information that is intended to be transferred over the optical fiber; and wherein at least one of the plurality of optical signals is an optical chaff signal.
The disclosed embodiments also include a terminal equipment for use in transmitting information over an optical fiber having a plurality of spatial paths each of which is able to carry an optical signal. The terminal equipment comprises: an optical coupler configured to couple each of a plurality of optical signals into at least a respective one of the plurality of spatial paths, wherein at least one of the optical signals is an optically modulated version of a desired sequence of information that is intended to be transferred over the optical fiber and at least one of the optical signals is a chaff signal; and a chaff signal generator supplying the chaff signal to the optical coupler, the chaff signal generator configured to extract amplified spontaneous emission from an optical amplifier substantially within the bandwidth of the optically modulated version of the desired sequence of information.
According to some disclosed embodiments there are three essential components to an untappable optical cable link system; a transmission medium, Chaff or Subterfuge signaling and compatibility with fiber networks. In an example embodiment, the transmission medium includes an optical fiber cable in which the transfer of information from a source (sender) is nearly transparent, high optical signal to noise ratio (OSNR) and low bit-error-rate (BER), to intended user(s) but is virtually opaque (low OSNR and high BER) to an intruder attempting to tap the cable anywhere along the line.
In another example embodiments, the chaff or subterfuge signaling provides a link opaque to intruders. Implemented at the terminal equipment, the interference data with the desired signal properties, discussed in more detail below, makes it virtually impossible for the intruders to separate the real signal from the combined data and interfering signals extracted by tapping the fiber cable. This method of launching interfering signals generated at the terminal(s) may be compatible with any current or future data transmission formats and protocol.
The compatibility with fiber networks provide cable technology and terminal equipment compatible with standard fiber cable infrastructure so that interfacing with the untappable cable is seamless to users of the technology.
According to some embodiments any fiber in which multiple, independent information bearing signals can propagate simultaneously can be utilized. Examples for such a fiber include multicore fiber (MCF) where individual signals can propagate in a set of parallel cores and any fiber, including multicore fibers, few mode fibers and multimode fibers, where spatial division multiplexing technology is employed. While the disclosed embodiments apply to all of these types of fibers, for simplicity the disclosure will focus on independent signals each propagating in a core of a multicore fiber. It is further assumed that there are at least one or more dedicated cores or channels used to transmit true signals in the multicore fiber. Furthermore, it is assumed that there is at least one chaff core or channel and at least one signal core or channel propagating in the multicore fiber. The multicore fibers can be made with a variety of core geometries. Such geometries can include concentric refractive index layers in a fiber creating concentric cores as well as individual cores arranged in a variety of cross sectional configurations, including: linear, circular, hexagonal, rectangular, and the like. Each core of a multicore fiber is capable of independently guiding a light signal along the length of the multicore fiber. The individual cores may be single mode or multimode at the signal wavelengths transmitted.
The subject matter disclosed herein is particularly pointed out and distinctly claimed in the claims at the conclusion of the specification. The foregoing and other objects, features, and advantages of the disclosed embodiments will be apparent from the following detailed description taken in conjunction with the accompanying drawings.
It is important to note that the embodiments disclosed herein are only examples of the many advantageous uses of the innovative teachings herein. In general, statements made in the specification of the present application do not necessarily limit any of the various claimed embodiments. Moreover, some statements may apply to some inventive features but not to others. In general, unless otherwise indicated, singular elements may be in plural and vice versa with no loss of generality. In the drawings, like numerals refer to like parts through several views.
The various disclosed embodiments include a secured fiber link system that can operate in concert with other measures for protecting transmitted data, such as data encryption, patrolling of data lines by guards, intrusion detection monitor sensors, and hardening of data lines by encasing them in concrete or steel conduits.
In an embodiment, the secured fiber link system is configured to allow transparent transmission of data to the intended user while simultaneously making the signal opaque or uninterpretable to an intruder anywhere along the entire link by overwhelming the intended information signal with interfering signal energy. In an embodiment, the secured fiber link system is compatible with any contemporary data rates, formats or telecommunications protocols, as well as signal wavelength provisioning, such as wavelength multiplexing (WDM). As such, the disclosed system may be agnostic to new equipment and protocols that will be developed in the future.
According to the disclosed embodiments, the secured fiber link system is configured to provide physical security of in-flight data propagating over a secured link by preventing the acquisition of true signal data by an intruder, without corruption by chaff signals. A true signal is a desired sequence of information that is intended to be transferred between legitimate users at both ends of the link. The chaff signals are generated at the terminal equipment whether or not the true data is encrypted. The chaff (subterfuge) signals are signals sent alongside the true signal to prevent intruders from tapping such legitimate signals from a fiber cable. Chaff signals may be applied to the link at one or both ends of the link. This security can be achieved by chaff signals generated at the terminal equipment, whether or not the true data is encrypted.
The system is configured to ensure that the intended recipient at the other end of the link receives the true data without the corrupting signal. Encrypting the data stream takes up transmission bandwidth and can introduce latency in the data transmission. An encrypted signal can be tapped by an intruder, but the secured fiber link system prevents the intruder from acquiring the true data in an unaltered form. Tapping of a fiber link is the act of changing a fiber by either putting physical force on a fiber cable (for example by bending the fiber) or by modifying the fiber by, for example, applying of heat, to allow a segment or segments of the fiber to be axially stretched (without breaking the fiber). Therefore, the energy propagating within the fiber is forced to leak out of the fiber for possible detection by an intruder (e.g., a hacker attempting to steal information being transmitted on the cable).
In an embodiment, the secured fiber link system can be used in conjunction with encryption to further secure data transmitted between terminals or can reduce the need for encryption which would in-turn free up considerable transmission bandwidth in the link.
The secured fiber link system sends a desired sequence of information in the form of a first “legitimate” or “true” signal (or set of signals) that is typically intended to be transferred between legitimate users at both ends of a link. At the terminal ends of the link, the chaff signal core(s) and the true signal core(s) can be monitored to detect changes in those signals that can result from the act of tapping the fiber. This would enable intrusion detection at the terminals of the fiber optic link system.
The terminal 110-1 transmits and receives signals via the optical fiber cables 150-1 and 150-2, respectively. In an embodiment, Chaff (interfering) signals are generated within the terminal 110-1 and is transmitted via the optical fiber cable 150-1 along with the true signal sent by the transmitter 121-1. The chaff signals may be generated within the chaff generator 140-1 or 140-2 and transmitted via the transmitter 121-2.
In an embodiment, the generated chaff signals are uncorrelated with the true data signals. The bandwidth of chaff signals is at least as wide as the bandwidth used for the true data signals. Further, the chaff signal is of sufficient optical strength to reduce the optical signal-to-noise-ratio (OSNR), or equivalently raise the bit error rate (BER), observed by an intruder, to a level whereby the information in the data signals tapped by the intruder is un-interpretable. At the receiver ends of the multicore fiber cable (150-1 or 150-2) the intended recipient will detect only the true signals transported transparently without interference from the chaff signals. Simultaneously, the chaff signals are available at the one or both ends of the link for intruder detection.
In an embodiment, the chaff and data signals are coupled selectively into the cores (or channels) of the multicore optical fiber at the transmitter end and selectively decoupled at the receiver. The coupling and decoupling of the true data and chaff signals into the individual channels of the multicore fiber is performed using a coupler, such as lensed fiber based coupler, tapered glass fiber coupler, a free space bulk optics coupler, and the like.
In an embodiment the optical fiber cables 150-1 and 150-2 are structured as multicore cables. Each core of a multicore fiber is capable of independently guiding a light signal along the entire length of the multicore fiber. The individual cores may be single mode or multimode at the signal wavelengths transmitted.
In a further embodiment, each of optical fiber cables 150-1 and 150-2 is constructed to have the following properties: transparent, high optical OSNR and low BER to intended recipients of the information, but is virtually opaque (low OSNR and high BER) to an intruder attempting to tap the cable. Different implementations of a multicore optical fiber cable are provided below.
The properties of the chaff signaling defenses the fiber cable from intruders. Such properties, discussed in more detail below, prevent the ability of the intruder to separate the true data signal from the combined true data and chaff signals extracted by tapping the fiber cable. This method of launching interfering signals generated at the terminal is compatible with any current or future data transmission formats and protocol. Further, the disclosed systems include optical fiber optical cables are compatible with standard fiber cable infrastructure, thus that interfacing with the untappable cable is seamless to users of the technology.
The secured fiber link system provides protection along the entire length of the link without the need for expensive guards or encasements making installation and security maintenance less expensive (especially on a long link), and increase in bandwidth available for transmitting data due to reduced dependence on data encryption for security.
It should be noted that only two terminals 110 and two optical fibers 150 are shown in
In another embodiment, the chaff signals can be made overwhelmingly strong so that the level of tapped optical energy exceeds the dynamic range of the detector in the intruder's tapping equipment. In this case, there may not be any need to structure the format of the chaff signals as their total power will overwhelm the tapping equipment.
According to various disclosed embodiments, a secured fiber link system may include a transmission medium and chaff signaling, and may be compatible with fiber networks. The transmission medium may be an optical fiber cable in which the transfer of information from a source (sender) is nearly transparent, having a high OSNR and BER, to intended user(s) but is virtually opaque (having low OSNR and high BER) to an intruder attempting to tap the cable anywhere along the line.
The OSNR of the data channel seen by the intended recipient is not degraded by the presence of chaff signals in other cores of the multicore fiber. The OSNR seen by the intended recipient is given by the ratio of the signal intensity detected in the data channel to the total noise power detected
OSNR=Psignal,Tx/ASEtotal; Equation 1
where Psignal,Tx is the signal power transmitted from the terminal equipment and ASEtotal is the total amplified spontaneous emission power generated over the link and detected at the receiver. The two quantities are inversely related, the higher the OSNR the lower the BER (and vice versa). For each data format, there is a threshold BER above which the signal information cannot be extracted. The purpose of the chaff in combination with the multicore fiber is to make sure that all along the fiber link, that the BER seen by an intruder is above this threshold.
where αsignal and αchaff are the attenuations suffered by the data signal and chaff respectively between the terminal equipment and the position at which the fiber cable was tapped. ρsignal and ρchaff are the out-coupling coefficients for the signal and chaff at the tap location. Psignal,Tx is the signal power transmitted from the terminal equipment and ASEchaff is the power in the chaff signal generated at the terminal equipment.
The terminal equipment 500 may include one or more data channels (N) and chaff channels and generators (M) where M and N are both integers greater than or equal to 1. Further, the number of total channels in the multicore fiber 550 is at least the sum of the data and chaff channels (N+M). The OSNR is inversely dependent on the number of chaff channels (1/M) as shown in the following equation:
where the αsignal and αchaff are the attenuations suffered by the data signal and chaff respectively between the terminal equipment at which they were each generated and the position at which the fiber cable was tapped. M is the number of independent chaff channels and ρsignal and ρchaff are the out-coupling coefficients for the signal and chaff at the tap location. Psignal,Tx is the signal power transmitted from the terminal equipment and ASEchaff is the power in the chaff signal generated at the terminal equipment. When there are multiple data channels (N>1), the OSNR value of each data channel 520 is the same as for a single data channel since it is assumed that the data channels are also independent of each other.
As discussed above, the secured optical fiber system utilizes multicore optical fibers. In such fibers, individual signals can propagate in a set of parallel cores and any fiber, including multicore fibers, few mode fibers and multimode fibers, where spatial division multiplexing technology is employed.
Multicore fibers can be made with a variety of core geometries including, but not limited to, concentric refractive index layers in a fiber creating concentric cores as well as individual cores arranged in a variety of cross sectional configurations. These configurations include, but are not limited to: linear, circular, hexagonal, rectangular, and the like.
The individual cores of a multicore fiber used in the secured fiber link system can be identical to each other or can be different from one another. Specifically, here it is considered that the cores are selected from among two basic types, one that is bend sensitive and one that is bend insensitive. The bend insensitive cores can be made using refractive index trenches or rings of air-cores surrounding the signal carrying core that will limit the amount of light that can escape the fiber when it is bent. A multicore fiber can be made with cores of one type of fiber described or can be made of combinations of both types.
In an embodiment, the center core of a multicore fiber (carrying the true signal) is a bend sensitive core and the outer core(s) carrying the chaff signals are of the bend insensitive type. Upon tapping by an intruder, the energy in the signal channel will drop and is detectable by a monitor at the terminal end(s) of the link. In a similar embodiment, if there are M signal cores (M≥1) and N chaff cores (N≥1) in the multicore fiber (total cores in MCF≥M+N), then the M signal cores can be of the bend sensitive type and the N chaff cores can be of the bend insensitive type.
In another embodiment, the center core of the multicore fiber (signal) is bend insensitive and the outer core(s) carrying chaff signal(s) are of the bend sensitive type. This will improve the OSNR advantage of the secured fiber link system when tapped by an intruder as more energy leaks out of the chaff cores than the true signal core. In a similar embodiment, if there are M signal cores (M≥1) and N chaff cores (N≥1) in the multicore fiber (total cores in MCF≥M+N), then the M signal cores can be of the bend insensitive type and the N chaff cores can be of the bend sensitive type.
The chaff signals should be totally uncorrelated with the true signal and have a bandwidth at least as wide as that used for the data signals used over the fiber link. The chaff signals should also be of sufficient strength to reduce the OSNR or equivalently raise the BER for an intruder tapping the fiber link.
According to various disclosed embodiments, the transmission medium may include, but is not limited to, any fiber in which multiple, independent information bearing signals can propagate simultaneously. Examples include, but are not limited to, multicore optical fibers where individual signals can propagate in a set of parallel cores and any fiber, including multicore fibers, few mode fibers and multimode fibers, where spatial division multiplexing technology is employed. While the principles of the disclosed embodiments may apply to these types of fibers, for the sake of simplicity, the disclosure is discussed with respect to independent signals each propagating in a core of a multicore fiber. It is further assumed that there are at least one or more dedicated channels used to transmit signals in the multicore fiber. Furthermore, it is assumed that there is at least one chaff channel and at least one signal channel propagating in the multicore fiber.
Therefore, if the anti-tapping system is utilized according to various disclosed embodiments, then the resulting protection will be the same regardless of how an intruder applies their fiber bending or stretching mechanism. For the current secured system, it is assumed that the chaff and true signal channels can each be coupled selectively into the chaff and true signal channels of the fiber at the transmitter end and selectively coupled out at the other end (receiver) of the link with an appropriate coupler. Such couplers include lensed fiber based couplers, tapered glass fiber couplers, polymer based couplers, and free space bulk optics couplers.
In a typical embodiment, the optical fiber medium should have properties that both maximize the effectiveness of the anti-tapping capability of the system and do not inhibit the legitimate information transfer between system users: The relevant properties of the fiber are out-coupling efficiency (dB) of the true and chaff channels via bending or stretching, attenuation of the chaff and true signal channels (dB/m) along the fiber link, and cross-talk between the chaff and true signal channels (dB). The various disclosed embodiments include involves the relative out-coupling of the chaff signal(s) energy as compared to the true signal(s) energy at the point of tapping along the link and the corresponding impact on the OSNR as seen by an intruder. The strength of the true and chaff signal(s) depends on the strength of the corresponding sources, the attenuation of the signals in the fiber from the source to the point along the fiber link where the tapping occurs and the out-coupling efficiency for each signal at the point of tapping (as summarized for different embodiments in equations 2, 3 and 4). The essential point is that the total chaff energy extracted by an intruder from the fiber link at the point of tapping should be sufficiently strong compared to the true signal energy such that the OSNR observed by the intruder is sufficiently low so that the bit error rate will be sufficiently high to prevent the intruder from extracting useful information from the true signal. Simultaneously the OSNR observed by the indented recipient should be sufficiently high so that the intended recipient can extract all information from the true signal.
If the crosstalk, γ(dB/m) being the crosstalk per unit length of fiber between chaff and true signal channels, is significant then this can severely limit the data transfer along the legitimate signal channel. It may also be easier to tap the fiber as both signal and chaff channels will contain signal information.
If crosstalk is low between the signal and chaff channels, then the secured fiber link system will be the most effective. Thus, crosstalk should be minimized in the fiber.
In an embodiment, station reflectors may be used at the terminations of the multicore fiber cores that carry the chaff signals so that generated chaff generated signal at the central office can be “reused” in the cable. This may negate the need for to generate a chaff signal at the recipient's premises, reducing the equipment needed at the customer's premises. This may be advantageous for fiber-to-the-home, where this embodiment minimizes the equipment required at the customer's home. This aids the network management in that all chaff signal generation can be at the central office making repairs easier and less invasive to a home customer. A reflector can be placed at the end of the multicore fiber link that only reflects the chaff channels and does not reflect the true signal core. An alternative is to use a multichannel fanout coupler and then to terminate the individual chaff fanout channels with connectors that have a reflector on them that will reflect the amplified spontaneous emission energy back through the multichannel fanout coupler and back into the multicore fiber. The signal channel(s) will not be terminated with a reflector.
In an embodiment, one or more of the non-true-signal carrying cores can be used to carry light that will be used to transmit power from the central office to the receive station where a photodetector will convert the optical energy into electrical energy that can be used to run the receive station or be stored in a battery if one is used at the receiver. This will enable the capability of the phone system that was in place for many years in that the phone system was self-powered, independent of the local power company.
It should be noted that the various teachings herein are described with respect to particular units of measurement merely for simplicity purposes and without limitation on the disclosed embodiments.
It should be noted that the disclosed embodiments can be utilized in alternatively or in conjunction with existing or future fiber cables and/or security systems for preventing tapping or other tampering with fiber cables without departing from the scope of the disclosure.
For any control electronics required for the terminal equipment, the various embodiments disclosed herein can be implemented as any combination of hardware, firmware, and software. Moreover, the software is preferably implemented as an application program tangibly embodied on a program storage unit or computer readable medium. The application program may be uploaded to, and executed by, a machine comprising any suitable architecture. Preferably, the machine is implemented on a computer platform having hardware such as one or more central processing units (“CPUs”), a memory, and input/output interfaces. The computer platform may also include an operating system and microinstruction code. The various processes and functions described herein may be either part of the microinstruction code or part of the application program, or any combination thereof, which may be executed by a CPU, whether or not such computer or processor is explicitly shown. In addition, various other peripheral units may be connected to the computer platform such as an additional data storage unit and a printing unit. Furthermore, a non-transitory computer readable medium is any computer readable medium except for a transitory propagating signal.
It should be understood that any reference to an element herein using a designation such as “first,” “second,” and so forth does not generally limit the quantity or order of those elements. Rather, these designations are generally used herein as a convenient method of distinguishing between two or more elements or instances of an element. Thus, a reference to first and second elements does not mean that only two elements may be employed there or that the first element must precede the second element in some manner. Also, unless stated otherwise a set of elements comprises one or more elements. In addition, terminology of the form “at least one of A, B, or C” or “one or more of A, B, or C” or “at least one of the group consisting of A, B, and C” or “at least one of A, B, and C” used in the description or the claims means “A or B or C or any combination of these elements.” For example, this terminology may include A, or B, or C, or A and B, or A and C, or A and B and C, or 2A, or 2B, or 2C, and so on.
All examples and conditional language recited herein are intended for pedagogical purposes to aid the reader in understanding the principles of the disclosed embodiment and the concepts contributed by the inventor to furthering the art, and are to be construed as being without limitation to such specifically recited examples and conditions. Moreover, all statements herein reciting principles, aspects, and embodiments of the disclosed embodiments, as well as specific examples thereof, are intended to encompass both structural and functional equivalents thereof. Additionally, it is intended that such equivalents include both currently known equivalents as well as equivalents developed in the future, i.e., any elements developed that perform the same function, regardless of structure.
This application claims the benefit of U.S. provisional application No. 62/427186 filed on Nov. 29, 2016. This application is also a continuation-in-part of U.S. patent application Ser. No. 15/435,619 filed Feb. 17, 2017, which claims the benefit of U.S. provisional application No. 62/296,897, filed on Feb. 18, 2016 and of provisional application No. 62/301,892, filed on Mar. 1, 2016. The contents of each of the above-referenced applications are incorporated herein by reference.
| Number | Date | Country | |
|---|---|---|---|
| 62427186 | Nov 2016 | US | |
| 62296897 | Feb 2016 | US | |
| 62301892 | Mar 2016 | US |
| Number | Date | Country | |
|---|---|---|---|
| Parent | 15435619 | Feb 2017 | US |
| Child | 15822909 | US |
