Transmitting communications traffic across an optical communication network
10014933 ยท 2018-07-03
Assignee
Inventors
Cpc classification
H04Q2011/0077
ELECTRICITY
H04B10/85
ELECTRICITY
H04Q2011/0081
ELECTRICITY
International classification
H04B10/00
ELECTRICITY
Abstract
A method of transmitting communications traffic in an optical communication network comprising a plurality of nodes, the method comprising, at a source node: receiving communications traffic to be transmitted across the optical communication network to a target node; obtaining a path sequence defining an order in which a plurality of optical paths from the source node to the target node across the optical communication network are to be used, at least part of each optical path being spatially separate from each other optical path; and transmitting the communications traffic as a series of traffic portions, each traffic portion being transmitted for a respective preselected transmission period on a respective optical path according to the path sequence.
Claims
1. A method of transmitting communications traffic in an optical communication network comprising a plurality of nodes, the method comprising, at a source node: receiving communications traffic to be transmitted across the optical communication network to a target node; obtaining a path sequence defining an order in which a plurality of optical paths from the source node to the target node across the optical communication network are to be used, at least part of each optical path being spatially separate from each other optical path; and transmitting, over a series of transmission periods, the communications traffic as a series of traffic portions, each traffic portion being transmitted for a respective preselected one of the transmission periods on a respective one of the optical paths according to the path sequence, wherein transmission of the series of traffic portions is distributed among the optical paths, and wherein the path sequence is a preselected sequence, and wherein only one of the optical paths is used during each of the transmission periods.
2. A method as claimed in claim 1, wherein the method comprises obtaining information identifying a respective different optical channel assigned to each said optical path and digitally wrapping the communications traffic, and wherein the digitally wrapped communications traffic is transmitted as a series of traffic portions, each traffic portion being transmitted on the optical channel assigned to its respective optical path.
3. A method of receiving communications traffic in an optical communication network comprising a plurality of nodes, the method comprising: obtaining a path sequence defining an order in which a plurality of optical paths from a source node to a target node across the optical communication network are to be used, at least part of each optical path being spatially separate from each other optical path; receiving, over a series of transmission periods, a series of traffic portions at the target node, each traffic portion being received for a respective preselected one of the transmission periods from a respective one of the optical paths according to the path sequence, wherein reception of the series of traffic portions is distributed among the optical paths; and reconstructing the communications traffic from the received traffic portions according to the path sequence, wherein the path sequence is a preselected sequence, and wherein only one of the optical paths is used during each of the transmission periods.
4. A method as claimed in claim 3, wherein each traffic portion is a portion of digitally wrapped communications traffic.
5. A method as claimed in claim 3, wherein the communications traffic in each said traffic portion can only be reconstructed when recombined with at least one other said traffic portion.
6. A method as claimed in claim 3, wherein the spatially separate parts of the optical paths comprise one of physically distinct paths across the optical communication network, different optical fibre cables following a shared physical path across the optical communication network and different optical fibres within an optical fibre cable within the optical communication network.
7. An optical communication network transmitter module comprising: an input arranged to receive communications traffic to be transmitted; a plurality of outputs, each arranged to be coupled to a respective one of a plurality of optical paths across an optical communication network; an optical transmitter; and a module controller arranged to: obtain a path sequence defining an order in which a plurality of optical paths from the transmitter module to a target node across the optical communication network are to be used, at least part of each optical path being spatially separate from each other optical path; and generate and transmit at least one transmitter control signal containing instructions arranged to cause the optical transmitter to transmit, over a series of transmission periods, the communications traffic as a series of traffic portions, the instructions arranged to cause each traffic portion to be transmitted for a respective preselected one of the transmission periods on a respective one of the optical paths according to the path sequence, wherein transmission of the series of traffic portions is distributed among the optical paths, and wherein the path sequence is a preselected sequence, and wherein only one of the optical paths is used during each of the transmission periods.
8. An optical communication network transmitter module as claimed in claim 7 and comprising: a plurality of optical transmitters each arranged to operate at a different one of a plurality of optical channels and each coupled to a respective one of the optical outputs; and a digital wrapping element arranged to digitally wrap the communications traffic, and wherein the at least one transmitter control signal contains instructions arranged to cause the optical transmitters to transmit, over the series of transmission periods, the digitally wrapped communications traffic as a series of traffic portions, the instructions arranged to cause each traffic portion to be transmitted for a respective preselected one of the transmission periods by a respective optical transmitter according to the path sequence.
9. An optical communication network transmitter module as claimed in claim 7, wherein the communications traffic in each said traffic portion is only able to be reconstructed when recombined with at least one other said traffic portion.
10. An optical communication network receiver module comprising: a plurality of inputs, each arranged to be coupled to a respective one of a plurality of optical paths across an optical communication network from a source node to the receiver module, at least part of each optical path being spatially separate from each other optical path; a plurality of optical receivers each coupled to a respective one of the inputs; and a module controller arranged to: obtain a path sequence defining an order in which the plurality of optical paths across the optical communication network are to be used; receive, over a series of transmission periods, a series of traffic portions, each traffic portion being received for a respective preselected one of the transmission periods on a respective optical channel from a respective one of the optical paths according to the path sequence, wherein reception of the series of traffic portions is distributed among the optical paths, and reconstruct the communications traffic from the received traffic portions according to the path sequence, wherein the path sequence is a preselected sequence, and wherein only one of the optical paths is used during each of the transmission periods.
11. An optical communication network receiver module as claimed in 10, wherein the communications traffic in each said traffic portion is only able to be reconstructed when recombined with at least one other said traffic portion.
12. An optical communication network comprising: a source node comprising an optical communication network transmitter module comprising: an input arranged to receive communications traffic to be transmitted; a plurality of outputs, each arranged to be coupled to a respective one of a plurality of optical paths across an optical communication network; an optical transmitter; and a module controller arranged to: obtain a path sequence defining an order in which a plurality of optical paths from the transmitter module to a target node across the optical communication network are to be used, at least part of each optical path being spatially separate from each other optical path; and generate and transmit at least one transmitter control signal containing instructions arranged to cause the optical transmitter to transmit, over a series of transmission periods, the communications traffic as a series of traffic portions, the instructions arranged to cause each traffic portion to be transmitted for a respective preselected one of the transmission periods on a respective one of the optical paths according to the path sequence, wherein transmission of the series of traffic portions is distributed among the optical paths; a target node comprising an optical communication network receiver module comprising: a plurality of inputs, each arranged to be coupled to a respective one of a plurality of optical paths across an optical communication network from a source node to the receiver module, at least part of each optical path being spatially separate from each other optical path; a plurality of optical receivers each coupled to a respective one of the inputs; and a module controller arranged to: obtain a path sequence defining an order in which the plurality of optical paths across the optical communication network are to be used; receive, over a series of transmission periods, a series of traffic portions, each traffic portion being received for a respective preselected one of the transmission periods on a respective optical channel from a respective optical path according to the path sequence; and reconstruct the communications traffic from the received traffic portions according to the path sequence; a plurality of intermediate nodes; a plurality of optical fibre links each connecting a pair of the nodes; and a network control element arranged to: configure a plurality of optical paths from the source node to the target node across the optical communication network, at least part of each optical path being spatially separate from each other optical path; and generate a path sequence defining an order in which the optical paths are to be used, wherein the path sequence is a preselected sequence, and wherein only one of the optical paths is used during each of the transmission periods.
13. An optical communication network as claimed in claim 12, wherein the network control element is arranged to configure the optical paths such that the spatially separate parts of the optical paths comprise one of physically distinct paths across the optical communication network, different optical fibres following a shared physical path across the optical communication network and different optical fibres within an optical fibre cable within the optical communication network.
14. An optical communication network as claimed in claim 12, wherein the communications traffic has a security level and the network control element is arranged to configure a plurality of optical paths proportional to the security level.
15. An optical communication network as claimed in claim 12, wherein the network control element is arranged to generate a dynamically changing path sequence by pseudo randomly generating a sequence of the optical paths and wherein the network control element is further arranged to generate and transmit a path sequence signal to the source node and to the target node.
16. A method as claimed in claim 1, wherein the communications traffic in each said traffic portion can only be reconstructed when recombined with at least one other said traffic portion.
17. A method as claimed in claim 1, wherein the spatially separate parts of the optical paths comprise one of physically distinct paths across the optical communication network, different optical fibre cables following a shared physical path across the optical communication network and different optical fibres within an optical fibre cable within the optical communication network.
Description
BRIEF DESCRIPTION OF THE DRAWINGS
(1)
(2)
(3)
(4)
(5)
(6)
(7)
(8)
(9)
(10)
(11)
(12)
(13)
(14)
(15)
(16)
(17)
(18)
DETAILED DESCRIPTION
(19) Referring to
(20) The method 10 comprises obtaining a path sequence which defines an order in which a plurality of optical paths from the source node to the target node across the optical communication network are to be used 14. At least part of each optical path is spatially separate from each other optical path.
(21) The method 10 comprises transmitting the communications traffic as a series of traffic portions. Each traffic portion is transmitted for a respective preselected transmission period on a respective optical path according to the path sequence. A first traffic portion is transmitted on the first optical path of the path sequence 16. The next traffic portion is transmitted on the next optical path of the path sequence 18. If all of the communications traffic has been transmitted, the method ends 22. If there is traffic still to be transmitted, the method 10 continues to transmitting the next traffic portion on the next optical path of the path sequence 18, and so on. If all of the optical paths in the path sequence have been used 24, the method returns to the first optical path in the path sequence 26 and so on, following the path sequence until the last traffic portion has been transmitted.
(22) As will be well known by the person skilled in the art, in an optical network communications traffic is transmitted on an optical channel, also known as a lightpath, which has a respective wavelength. Typically, traffic is transmitted on a plurality of optical channels, each of which has a different wavelength. In this embodiment, the communications traffic can be transmitted in one of two different ways, as follows. A single optical channel can be used to transmit all of the traffic, with the optical channel being switched onto a respective optical path for each traffic portion. Alternatively, as will be described in more detail below, the traffic portions can be switched onto different optical channels, with each optical channel being transmitted on a different optical path.
(23) Referring to
(24) In this embodiment, the method comprises obtaining information identifying an optical channel assigned to each optical path 32; each optical path has a respective, different optical channel assigned to it. The communications traffic is digitally wrapped prior to being transmitted 34. Each traffic portion is therefore a portion of the digitally wrapped traffic.
(25) The first traffic portion is transmitted on the first optical path of the path sequence, on the optical channel assigned to the first optical path 36. The next traffic portion is transmitted on the next optical path of the path sequence, on the optical channel assigned to that optical path 38. If all of the communications traffic has been transmitted, the method ends 22. If there is traffic still to be transmitted, the method 10 continues to transmitting the next traffic portion on the next optical path of the path sequence on the optical channel assigned to that optical path 38, and so on. If all of the optical paths in the path sequence have been used 24, the method returns to the first optical path in the path sequence, transmitting the next traffic portion on the first optical path, on the optical channel assigned to the first optical path 39, and so on, following the path sequence until the last traffic portion has been transmitted. The traffic portions are therefore switched onto different optical channels for transmission on the respective optical paths of the path sequence.
(26) Referring to
(27) In this embodiment, the communications traffic is digitally wrapped in a multi protocol label switching, MPLS, label switched path, LSP, prior to being transmitted 42. Each traffic portion is therefore a portion of the MPLS LSP.
(28) Referring to
(29) In this embodiment, the communications traffic is digitally wrapped in an optical transport network, OTN, container, for example an optical data unit, ODU, such as ODU1, ODU2 etc., prior to being transmitted 52. Each traffic portion is therefore a portion of the OTN container.
(30) Referring to
(31) The method 60 comprises obtaining a path sequence defining an order in which a plurality of optical paths from a source node to the target node across the optical communication network are to be used 62. At least part of each optical path is spatially separate from each other optical path.
(32) The method comprises receiving a series of traffic portions at a target node within the optical communication network 64. Each traffic portion is received for a respective preselected transmission period from a respective optical path according to the path sequence. The communications traffic may be digitally wrapped communications traffic.
(33) The method comprises reconstructing the communications traffic from the received traffic portions according to the path sequence 66.
(34) Referring to
(35) The method comprises configuring a plurality of optical paths from a source node to a target node across the optical communication network 72. At least part of each optical path is spatially separate from each other optical path.
(36) The method comprises, at the source node, transmitting the communications traffic according to any of the methods 10, 30, 40, 50 described above and shown in
(37) The method comprises, at the target node, receiving the communications traffic according to the method 60 as described above and shown in
(38) In a seventh embodiment of the invention, which is similar to the method 70 shown in
(39) Alternatively, the spatially separate parts of the optical paths may be different optical fibre cables following a shared physical path across the optical communication network or different optical fibres within an optical fibre cable within the optical communication network.
(40) Where parts of two or more optical paths are not physically separate, that is, where they share an optical link or a node within the network, the link or node is required to be in a secure location with guaranteed protection against a tapping attack.
(41) Referring to
(42) In this embodiment, the method 170 additionally comprises assigning a different optical channel to each of the optical paths which have been configured.
(43) Referring to
(44) In this embodiment, the optical communication network is to be operated for communications traffic having a security level. The method 80 comprises configuring a plurality of optical paths proportional to the security level 82.
(45) A twentieth embodiment of the invention provides a method operating an optical communication network comprising a plurality of nodes which is similar to the method 80 of
(46) In this embodiment, the communications traffic comprises a security marker if the communications traffic has a security level. The method comprises determining whether the communications traffic has a security marker and only transmitting the communications traffic as a series of traffic portions if the communications traffic has a said security marker.
(47) The security marker may comprise information identifying the security level. Where this is the case, the method additionally comprises reading the information to obtain the security level and then configuring the plurality of optical paths to be proportional to the said security level.
(48) Referring to
(49) The path sequence is either a preselected sequence or a dynamically changing sequence. In this embodiment, a dynamically changing path sequence is used and the method comprises pseudo randomly generating a path sequence of the optical paths which have been configured 182. The path sequence is securely communicated to both the source node and the target node each time it changes 184.
(50)
(51) Three optical paths, PATH1 98, PATH2 102, PATH3 104 have been configured from a source node (node A) 94 to a target node (node B) 96 across an optical communication network 100. Each optical path comprises a plurality of intermediate nodes and optical links connecting the nodes.
(52) In this example, LSP1 is transmitted on a selected optical channel across PATH 1 and the transmission of LSP1 takes a certain amount of time, T, to complete.
(53)
(54) Three optical paths are configured, as in
(55) Communications traffic is received and is wrapped in an MPLS LSP (LSP1) 92. LSP1 is transmitted across the network using the three paths PATH1, PATH2 and PATH3 in a circular sequence of the paths. As shown in
(56) The switching of LSP1 from one path to the next may be achieved using a known protection switching mechanism, which is used for conventional failure recovery at the packet layer. In this scenario, when an optical path is no longer available, for example due to a fibre cut, the LSP which was using this path is sent to an alternative path. In this embodiment, the action of rerouting LSPs for failure recovery is used to reroute LSP1 from PATH1 to PATH2, etc. to achieve spatial hopping.
(57) The switching of LSP1 from one path to the next may be instigated on expiry of a timer set to the preselected transmission period. Alternatively, switching of LSP1 may be effected by periodically inserting a fictitious signal degrade at the source node, to cause the network's protection switching mechanism to cause the switching of LSP1 onto its next optical path of the path sequence. This may be implemented as follows:
(58) a) configure a pair of worker and protection paths according to the path sequence, the pair having a non-revertive mode;
(59) b) create a fictitious signal degrade on the worker path to be switched;
(60) c) allow the protection switching to switch from the worker path to its paired protection path;
(61) d) change the worker/protection path pair configuration to create new protection/worker pairs according to next switching step in the path sequence;
(62) e) restart at b).
(63) Using an existing protection switching mechanism within an optical communication network has the advantage of ease of implementation. No hardware protocols need to be changed.
(64) Considering a switching time, Ts, of 50 ms and a hopping frequency, Rh, being the number of times per second that the optical path being used to transmit LSP1 is changed, the method may cause a reduction in communication traffic throughput of Ts*Rh. To keep the throughput loss less than 1% a hopping frequency of less than 0.2 Hz should be used.
(65) In order to reduce transmission performance degradation due to switching transmission of LSP1 onto different optical paths, the communications traffic to be transmitted during each transmission period may be stored in a buffer for a period at least equal to the switching time to change from one optical path to the next in the path sequence and then released at higher rate to enable continuous transmission of LSP1 without loss of traffic. As alternative, before starting transmission the whole of LSP1 may be stored in a buffer for a period at least equal to the total of the switching times required, in order to adsorb the time required to switch LSP1 onto each of the optical paths of the path sequence.
(66) Alternatively, transmission performance degradation may be reduced by communicating the path sequence to both the source node and the target node and synchronising transmission and reception so that the source node and target node automatically switch to the optical transmitter and optical receiver assigned to the next optical path of the path sequence. A protocol similar to that used in Bluetooth wireless communication systems to implement frequency hopping to counteract narrowband interference may be used to implement this.
(67) In this embodiment it is the MPLS LSP that is switched onto the different optical channels assigned to each optical path rather than the optical channel itself which is switched. So the action of switching the traffic onto the different optical paths in the path sequence is done in the digital domain at the IP/MPLS level and not at the optical layer.
(68) Alternatively, the communications traffic may be wrapped in an OTN container, such as ODU1, ODU2 etc., which is switched onto the different optical paths in the same manner. In addition, the communications traffic may be transmitted on a single optical channel which is switched onto the different optical paths, using for example an optical-electrical-optical, OEO, switch.
(69) If an attacker taps an optical link within PATH1 they will be able to tap LSP1 only for the transmission period during which LSP1 is transmitted on PATH1. The transmission period is set such that the traffic transmitted during the preselected transmission period, i.e. the traffic within the first traffic portion transmitted over PATH1, is not auto-consistent, that is to say the traffic can only be reconstructed when recombined with at least one other traffic portion of LSP1. This means that the traffic within one single traffic portion is never sufficient to allow an attacker to reconstruct the communications traffic, which may ensure that even if there is an optical fibre tapping attack on an optical fibre of one of the optical paths, the communications traffic obtained by the attacker cannot provide any useful information to the attacker. The transmission period may for example be selected according to a known cryptographic data splitting algorithm or a known cloud storage data splitting algorithm.
(70) For simplicity,
(71) The path sequence may be pre-established, and the source node and target node configured with the path sequence during network configuration, to avoid the requirement for any signalling at the optical layer during network operation. Alternatively, the path sequence may be configured statically in the source node and the target node and communicated to the nodes periodically. To increase the security of transmission of the communications traffic the path sequence may be scrambled and communicated to the source and target nodes (Node A and Node B in
(72)
(73) Conventionally, two LSPs would be transmitted either on two optical channels, on two optical paths of the network 100, or on the same optical channel, on the same optical path. In this embodiment, each LSP is transmitted on the optical paths following the path sequence as illustrated in
(74) LPS1 is transmitted over PATH1 for transmission period T1 and during same transmission period LSP2 is transmitted over PATH2, as shown in
(75) Referring to
(76) The input 122 is arranged to receive communications traffic to be transmitted. Each output 124 is arranged to be coupled to a respective one of a plurality of optical paths across an optical communication network.
(77) The module controller 128 is arranged to obtain a path sequence defining an order in which a plurality of optical paths from the transmitter module to a target node across the optical communication network are to be used. At least part of each optical path is spatially separate from each other optical path.
(78) The module controller 128 is arranged to generate and transmit a transmitter control signal 130 containing instructions arranged to cause the optical transmitter to transmit the communications traffic as a series of traffic portions. The instructions are arranged to cause each traffic portion to be transmitted for a respective preselected transmission period on a respective optical path according to the path sequence.
(79) In this embodiment, the transmitter module 120 also comprises an optical switch 132 between the optical transmitter 126 and the outputs 124. The optical switch is configurable to connect the optical transmitter 126 to a selected on of the outputs 124, to follow the path sequence.
(80) Referring to
(81) In this embodiment, the transmitter module 140 comprises a plurality of optical transmitters 126 and a digital wrapping element 142.
(82) Each optical transmitter is arranged to operate at a different one of a plurality of optical channels. Each is coupled to a respective one of the optical outputs 124.
(83) The digital wrapping element 142 is arranged to digitally wrap the communications traffic.
(84) In this embodiment, a transmitter control signal 146 is transmitted to each optical transmitter. The transmitter control signals contain instructions arranged to cause the optical transmitters to transmit the digitally wrapped communications traffic as a series of traffic portions. The instructions are arranged to cause each optical transmitter to transmit the digitally wrapped communications traffic on its respective optical channel for a respective preselected transmission period according to the path sequence. The communications traffic is thereby split into traffic portions each of which are transmitted on a respective optical path of the path sequence.
(85) Referring to
(86) The transmitter module of this embodiment is a packet-optical transmitter module comprising an IP/MPLS switch 152 and an optical switch 158, for example a reconfigurable optical add-drop multiplexer, ROADM. The optical switch is coupled to the outputs 124 by optical multiplexers 154, such as an arrayed waveguide grating, AWG, or a wavelength selective switch, WSS. The IP/MPLS switch is arranged to generate control signals 156 comprising instructions arranged to request optical connectivity at the optical layer. Communications traffic packets received at the transmitter module 150 are wrapped in MPLS LSPs by the IP/MPLS switch 152.
(87) The IP/MPLS switch 152 has a first input 121 for receiving communications traffic which is not to be transmitted as traffic portions. As can be seen, a single control signal 156 is generated, since all of the communications traffic is to be transmitted on a single optical path. The IP/MPLS switch 152 also has a second input 122 for receiving communications traffic which is to be wrapped in an MPLS LSP, to be transmitted as traffic portions on different optical paths of the path sequence, as described above.
(88) Referring to
(89) Each input is arranged to be coupled to a respective one of a plurality of optical paths across an optical communication network from a source node to the receiver module. At least part of each optical path is spatially separate from each other optical path. Each optical receiver 164 is coupled to a respective one of the inputs.
(90) The module controller 166 is arranged to:
(91) obtain a path sequence defining an order in which the plurality of optical paths across the optical communication network are to be used;
(92) receive a series of traffic portions, each traffic portion being received for a respective preselected transmission period on a respective optical channel from a respective optical path according to the path sequence; and
(93) reconstruct the communications traffic from the received traffic portions according to the path sequence.
(94) The communications traffic in each traffic portion may only be reconstructed when recombined with at least one other said traffic portion. This means that one single traffic portion in never sufficient to allow an attacker to reconstruct the communications traffic, which may ensure that even if there is an optical fibre tapping attack on an optical fibre of one of the optical paths, the communications traffic obtained by the attacker cannot provide any useful information to the attacker.
(95) Referring to
(96) The node 170 may alternatively comprise an optical communication network transmitter 140 as shown in
(97) Referring to
(98) The source node 192 comprises an optical communication network transmitter module 120 as shown in
(99) The network 190 is shown here as being a meshed network but other network configurations may be used. The network does not have to be a meshed network, it is sufficient that at least two disjointed/spatially separate paths exist between the source and target nodes. A meshed network may provide an advantage that a larger number of spatially separate paths may be configured.
(100) The network control element 200 is arranged to configure a plurality of optical paths from the source node 192 to the target node 194 across the network 190. Each optical path comprises at least one optical link 198 and may comprise one or more of the intermediate nodes 196. At least part of each optical path is spatially separate from each other optical path. In this embodiment the optical paths are physically distinct paths across the network. The optical paths may alternatively comprise different optical fibres sharing the same point to point path across the network, which may be implemented as optical fibres in different optical cables following the same path or as different optical fibres sharing the same optical cables along the path.
(101) The network control element 200 is additionally arranged to generate a path sequence defining an order in which the optical paths are to be used. In this embodiment, the network control element is additionally arranged to generate and transmit a path sequence signal 202 containing the path sequence to the source node.
(102) An eighteenth embodiment of the invention provides an optical communication network having the same structure as the network 190 shown in
(103) The communications traffic may comprise a security marker to indicate that it is to be transmitted as a series of traffic portions according to the path sequence. The transmitter module controller may additionally be arranged to determine whether a security marker is present on the communications traffic and to transmit the communications traffic as a series of traffic portions only if a security marker is present.
(104) The security marker may contain information identifying the security level of the communications traffic and the network control element is arranged to configure a plurality of optical paths proportional to that security level.
(105) A nineteenth embodiment of the invention provides an optical communication network having the same structure as the network 190 shown in