1. Technical Field
This invention generally relates to optical signal processing. In particular, this invention relates to systems and methods of optical encryption based on optical code division multiplexing (OCDM).
2. Description of the Related Art
Modern day digital communications are dominated by optics (such as fiber-optic networks), because of the ability of fiber-optic networks to transmit information over particularly long distances at high rates with relatively little loss. At an origin, digital data in electronic form modulate an optical signal, such that the optical signal carries the digital data. The modulated optical signal is transmitted through an optical fiber to a destination. At the destination, the optical signal is demodulated to extract the electronic digital data. Thus, fiber-optic communication systems include electronic components for processing electronic digital data and optical components for processing optical signals modulated by the electronic data.
As all communications that traverse a public space such as the wireless cellular networks, high rate data communications over public fiber optics networks are susceptible to eavesdropping and require certain security measures. For example, the Office of the Comptroller of Currency in the U.S. will require the financial sectors to encrypt optical communications leaving their secure locations in the near future.
However, at increasingly high data rates such as 40 Gb/s or 100 Gb/s, protection against eavesdropping and/or snooping through data encryption at the electronic level becomes difficult with today's technology. Indeed, today's encryption technology, such as the Advanced Encryption Standard (AES), adds additional overhead, requires additional bandwidth, and imposes high end-to-end cost of implementation.
In contrast, the tremendous capacity of public dark fibers and the capabilities of emerging optical components create a compelling case for providing security protection at the optical layer (i.e., photonic layer security).
OCDM technology is generally used to provide very high rate data transmissions. Still with reference to
Some other exemplar photonic layer security solutions are described in U.S. Pat. No. 7,574,144 and U.S. Patent Application Publication No. 2008/0107430 A1, the entire contents of which are incorporated herein by reference.
This invention provides an improved photonic layer security solution for systems based on optical code division multiplexing (OCDM).
In accordance with the invention, there is provided a method of optical signal processing, including receiving an optical signal including a plurality of frequency lines; defining at least two wavesets including an updatable random subset of the frequency lines; receiving a data stream; modulating the optical signal with the data stream; encrypting the data stream by extracting the subset of the frequency lines of the at least two wavesets from the modulated optical signal; and phase coding the subset of frequency lines of the at least two wavesets in the modulated optical signal.
In accordance with the invention, there is further provided a transmitter for optical signal processing, including: at least one modulator configured to receive a data stream and an optical signal, the optical signal including a plurality of frequency lines, the at least one modulator further configured to modulate the optical signal with the data stream; and at least one phase coder configured to define at least two wavesets including an updatable random subset of the frequency lines, encrypt the data stream by extracting the random of the frequency lines of the at least two wavesets from the modulated optical signal, and phase code the subset of frequency lines of the at least two wavesets in the modulated optical signal.
In accordance with the invention, there is further provided a receiver for optical signal processing, including: at least one phase decoder configured to receive a phase coded modulated optical signal, identify at least two wavesets including an updatable random subset of frequency lines, and perform phase decoding on the random set of frequency lines of the at least two wavesets in the phase coded modulated optical signal; and at least one demodulator configured to receive the modulated optical signal after the phase decoder performs the phase decoding and demodulate the modulated optical signal to extract at least one data stream.
It is important to understand that both the foregoing general description and the following detailed description are exemplary and explanatory only, and are not restrictive of the invention as claimed.
The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate various embodiments. In the drawings:
In the following description, for purposes of explanation and not limitation, specific techniques and embodiments are set forth, such as particular sequences of steps, interfaces, and configurations, in order to provide a thorough understanding of the techniques presented here. While the techniques and embodiments will primarily be described in the context of the accompanying drawings, those skilled in the art will further appreciate that the techniques and embodiments can also be practiced in other electronic devices or systems.
Reference will now be made in detail to exemplary embodiments of the present invention, examples of which are illustrated in the accompanying drawings. Whenever possible, the same reference numbers will be used throughout the drawings to refer to the same or like parts.
Consistent with embodiments of the present invention, there are provided security solutions implemented not only in the phase dimension, but also in the frequency dimension. More specifically, a laser generates optical pulses containing a great number of frequency components, or frequency lines, or wavelengths. When data modulate only some of the frequency lines at a transmitter, a receiver needs to know exactly which frequency lines were used by the transmitter in order to retrieve the data. The present invention introduces an additional layer of security based on random selections of frequency lines used for transmitting data streams or sub-streams, as illustrated in
Consistent with embodiments of the present invention, the available frequency lines in the laser output may be grouped into distinct subsets, where the exact grouping is held as a security key known only to the entities privy to the relevant communication. For example, as shown in
Although
Thus, the randomly defined wavesets may contain intermingled frequency lines, as shown in
Once the wavesets are defined, the wavesets may each carry data to be transmitted.
Transmitter 300 includes serial-to-parallel converter 302. Converter 302 receives a broadband (BB) signal 304. Converter 302 converts the BB signal 304 into a plurality of parallel data sub-streams using inverse multiplexing. The data sub-streams may correspond to a plurality of sub-channels 306.
Transmitter 300 also includes a source of phase locked laser lines, such as a mode locked laser (MLL), not shown, that generates optical pulses or an optical pulse train 308. Optical pulse train 308 will be shared by all wavesets.
As shown in
Consistent with embodiments of the present invention, the randomly defined wavesets can further be used with OCDM such that each waveset can carry multiple data streams or sub-streams each phase coded with a code from an orthogonal phase code set. The phase codes, however, need not be orthogonal between wavesets. Because the sub-streams may be individually phase coded with different codes, the sub-streams obscure each other.
In the exemplary transmitter 300 of
It is to be understood that the depiction of two separate branches 310 and 312 is only for illustration purposes. One skilled in the art should understand that no physical separation between the two branches is needed.
Consistent with embodiments of the present invention, when a broadband signal is inversely multiplexed to create multiple sub-streams or sub-channels, the sub-streams may be carried over the same waveset or different wavesets. Similarly, a waveset may carry the sub-streams from multiple broadband signals. The assignment of the sub-streams to the wavesets adds another layer of security, as the receiver must know which wavesets are used to carry which sub-stream of the broadband signal the receiver is trying to detect.
In the exemplary transmitter 300, a mapper 314 assigns the data sub-streams on sub-channels 306 to the wavesets and the phase codes within the wavesets. Mapper 314 may be part of converter 302 or a separate device. In the example shown in
One of ordinary skill in the art should understand that, assuming a binary phase shift, i.e., either 0 or π, a waveset with four frequency lines allows for four orthogonal phase codes, and a waveset with eight frequency lines allows for eight orthogonal phase codes. However, consistent with embodiments of the present invention, not all available phase codes need to be used. Thus, even though
With non-binary phase shifts, a larger code-space can be available. For example, if phase coders 318 can implement phase shifts of 0, π/2, 3π/4, and π, the number of orthogonal phase codes is much greater than that with binary phase shifts. One of ordinary skill in the art will also appreciate that different code sets may be used, such as Barker codes, Hadamard-Walsh codes.
Additionally, different phase coding schemes can be adopted for different wavesets. For example, binary Hadamard-Walsh codes may be used with one waveset, while non-binary phase shifts are used with another waveset.
In addition, although
The data sub-stream assigned to a particular phase code of a particular waveset first modulates the optical signal output of the MLL at data modulator 316. The modulated optical signal is then subject to phase coding at phase coder 318. Phase coder 318 performs phase coding by introducing phase shifts to the frequency components of the modulated optical signal based on the corresponding phase code, where the frequency components are of the corresponding waveset. Moreover, phase coder 318 may define and/or identify the frequency components of its corresponding waveset.
Data modulator 316 modulates the optical signals using any suitable modulation scheme, such as on-off keying (OOK), duobinary, differential phase shift keying (DPSK), or multi-amplitude/phase constellations such as QAM, PSK, etc. One of ordinary skill in the art should understand how these or any other known modulation scheme works, and therefore detailed explanations thereof are not provided herein.
Phase coder 318 may be implemented using ring resonator filters, as reviewed in the IEEE Communications Magazine article “An Overlay Photonic Layer Security System Scaleable to 100 Gb/s” Etemad et al. August 2008, the entire contents of which are hereby incorporated by reference. The notion that the OCDM signals can occupy non-contiguous frequency lines was introduced in the incorporated U.S. Pat. No. 7,574,144 to Galli et al. It is to be understood, however, that any structure capable of phase coding can be used as phase coder 318. Moreover, as mentioned above, different phase coding techniques, e.g., binary or non-binary, may be used by phase coder 318, such as binary phase coding.
After each sub-channel goes through data modulation and phase coding, the sub-channels are combined. In other words, the optical signals modulated by the data sub-streams and phase coded are combined and then sent to a phase scrambler 320. Phase scrambler 320 performs phase scrambling on the combined optical signal. In particular, phase scrambler 320 introduces further phase shifts to the frequency lines in the combined optical signal according to a scrambling key. The functionality of phase scrambler 320 may be combined with phase coders 318. Phase scrambler 320 outputs an optically encrypted signal that is ready for transmission. Moreover, the identification of the frequency lines within the at least two wavesets encoded by phase coder 318 may be sent to a receiving end, so that the receiving end can decode the optically encrypted signal.
As the wavesets include only subsets of the frequency lines of the laser output, frequency lines not belonging to a waveset need to be removed. In one aspect, phase coder 318 removes the frequency lines except those belonging to the waveset the phase coder operates on. In another aspect, a separate component may be included in transmitter 300 to remove the irrelevant frequency lines either before data modulation at data modulator 316, between data modulation and phase coding at phase coder 318, or after phase coding. By extracting the frequency lines of the wavesets, a data stream modulating the optical signal including the frequency lines is encrypted in the sense that the exact frequency lines of the wavesets becomes a key to receiving and decoding the data.
Moreover, the frequency lines assigned to the wavesets may be changed from time to time, either regularly or randomly. The updating of the frequency lines may be effected through an update of the phase coder 318 to phase code the frequency lines in the new wavesets, and the removal of the corresponding remaining frequency lines.
System 400 includes a laser source 402, such as a phase-locked multi wavelength laser, which generates an optical pulse train that is simultaneously fed into data modulators 404, including DM 1, DM 2, . . . DM N. Data modulators 404 each receive a sub-stream of data that is used to modulate the optical pulse train. Each of the data modulators 404 outputs a modulated optical sub-stream.
Each modulated optical sub-stream is then fed to a corresponding spectral phase encoder (SPE) 410 for phase coding on an assigned waveset as described above in
SPE 1, SPE 2, . . . SPE N output their respective modulated and coded optical sub-streams, which are then passively combined with each other using bit-time synchronization. The passively combined stream then passes through a shared phase code scrambler 416. In some embodiments, shared phase code scrambler 416 may be combined with each of SPE 1, SPE 2, . . . SPE N. Shared phase code scrambler 416 performs phase code scrambling with a random key on the combined signal.
The scrambled optical signal may be transmitted over an optical medium to a network 418, such as a WDM or Dense WDM (DWDM) network to the receiving end. At the receiving end, code descrambler 420 undoes the scrambling using the random key. The unscrambled coded modulated data stream passes through spectral phase decoders (SPD) 422, including SPD 1, SPD 2, . . . SPD N for phase decoding. The SPDs operate on the same wavesets as were used for spectral phase encoding by the transmitter. Code descrambler 420 may be combined with each of SPD 1, SPD 2, . . . SPD N. Each of SPD 1, SPD 2, . . . SPD N outputs a decoded modulated optical stream to one of optical time gates (OTG) 428, including OTG 1, OTG 2, . . . OTG N. Each of OTG 1, OTG 2, . . . OTG N extracts only a desired tributary from among the decoded stream, thereby each outputting a modulated optical sub-stream. The modulated optical sub-streams then each pass through one of Detection and Demodulation (DID) modules 434, including D/D 1, D/D 2, . . . D/D N to reproduce the original data sub-streams that were fed into data modulators 404. In some embodiments, some of the data-streams may include random data that was used by the transmitter to obscure a data stream.
In view of the descriptions of
The foregoing description has been presented for purposes of illustration. It is not exhaustive and does not limit the invention to the precise forms or embodiments disclosed. Modifications and adaptations of the invention can be made from consideration of the specification and practice of the disclosed embodiments of the invention.
For example, one or more steps of methods described above may be performed in a different order or concurrently and still achieve desirable results.
Moreover, the above descriptions of the embodiments refer to components of a system. It is to be understood that the components may be implemented as hardware or software, or a combination thereof. For example, mapper 314 of
In addition, the description associated with
Other embodiments of the invention will be apparent to those skilled in the art from consideration of the specification and practice of the invention disclosed herein. It is intended that the specification and examples be considered as exemplary only, with a true scope of the invention being indicated by the following claims.