全光网络安全及防范技术研究
|
摘要
随着密集波分复用(DWDM)技术、掺饵光纤放大器(EDFA)技术和光时分复用(OTDR)技术的发展和成熟,光纤通信技术正朝着超高速、大容量通信系统的方向发展,并且逐渐向全光网络(All Optical NetwoNs)演进。而全光网络的透明性在改善网络性能的同时,也给网络的安全带来了一定的隐患,全光网络安全研究随着全光网络的发展成为新的研究课题。
本文以全光网络安全及防范技术为研究课题,主要从网络物理安全和信息安全两个方面,展开对网络安全的研究。主要工作成果有:
1)理论研究了全光网络的网络结构、关键光器件和关键技术。
2)重点对全光网络现存的安全隐患进行了详细的分析,从物理光层安全和信息安全两个方面对全光网络的安全进行研究。物理安全方面,对全光网络光层的攻击方法及其相应的安全措施进行分析;信息安全部分,分析了全光网络的数字包封技术,并对光包进行加密时引入量子密码,对量子密钥的基本原理及量子密钥的分发协议在通信中遵守的原则进行详细的介绍。
3)重点研究了光纤传感器在全光网络安全及防范技术中的应用,提出一种新型的光纤传感器模型。文中对现有的基于OTDR、OFDR传感原理、传感机制进行深入的研究,分析了现有的几种传感器的优缺点及其在全光网络安全防范措施中的应用,并针对系统的安全问题,提出自己的传感模型:在基于Brillouin和Rayleigh光频域背向散射的分布式光纤传感器模型的基础上,进行功能上的扩展使其同时测量分布式温度/应力和损耗,做到对网络的多方位安全监控。
4)对模型中涉及到的已有的Rayleigh光频域背向散射功率表达公式进行理论研究及完善,并推导出Brillouin光频域背向散射信号功率表达公式,通过接收频域信号得到光纤的冲击响应函数,确定光纤损耗、温度/应力信息。论文最后还通过MATLAB对Rayleigh信道进行建模及仿真,仿真实验数据与理论值一致,表明了该防范措施的有效性。
With the development and maturity of Dense Wavelength Division Multiplexing (DWDM) technology, erbium-doped fiber amplifier (EDFA) technology and OTDR technology, optical fiber communication technology is moving towards super-high-speed and large capacity communication system and gradually to the All -optical Network evolution. The transparency of All-optical Network can improve the performance of the network as well as bring some hidden dangers to network security, with the development of All-optical Network, the research of its security will be a new study.
In this paper, we researched the security and prevention technology of All-optical Network. We carried out the research on network security mainly from both of network physical security and information security. Main results of work are as follows:
1) We studied the network structure, the key optical components and key technologies of All-optical Network.
2) We analyzed the security risks in All-optical Network and researched the security problem in All-optical Network mainly from both of network physical security and information security. The attacks to All-optical Network-layer and its corresponding security measures are analyzed in the physical security. In information security, we studied the digital packet encapsulation technology in All-optical Network and introduced quantum encryption. We described the principle of quantum key and the communication agreement of quantum key.
3) We discussed the application of fiber sensor in All-optical network security and preventive measures, proposed a new fiber sensor model. We researched the principle of OTDR, OFDR and sensor mechanism. It analyzes the excellences and disadvantages of several kinds of existing sensors, as well as their applications in security measure of All-optical Network, put forward our own sensor model. We made expansion in functions at measuring the temperature /stress and loss at the same time based on the Brillouin and Rayleigh scattering distributed fiber sensor model, it monitors multi-positions of the network.
4) The fully distributed optical fiber sensor system is studied by theory and emulational methods: We studied the power expressions of Rayleigh optical frequency backscattering, put forward the power expressions of Brillouin optical frequency backscattering and determine the fiber temperature/stress information through the response function of fiber plus from the frequency signal received. We gave the modeling and simulation of Rayleigh channel with MATLAB, the validity can be obtained by analyzing the comparison of experimental data in simulation with the theoretical value.
本文以全光网络安全及防范技术为研究课题,主要从网络物理安全和信息安全两个方面,展开对网络安全的研究。主要工作成果有:
1)理论研究了全光网络的网络结构、关键光器件和关键技术。
2)重点对全光网络现存的安全隐患进行了详细的分析,从物理光层安全和信息安全两个方面对全光网络的安全进行研究。物理安全方面,对全光网络光层的攻击方法及其相应的安全措施进行分析;信息安全部分,分析了全光网络的数字包封技术,并对光包进行加密时引入量子密码,对量子密钥的基本原理及量子密钥的分发协议在通信中遵守的原则进行详细的介绍。
3)重点研究了光纤传感器在全光网络安全及防范技术中的应用,提出一种新型的光纤传感器模型。文中对现有的基于OTDR、OFDR传感原理、传感机制进行深入的研究,分析了现有的几种传感器的优缺点及其在全光网络安全防范措施中的应用,并针对系统的安全问题,提出自己的传感模型:在基于Brillouin和Rayleigh光频域背向散射的分布式光纤传感器模型的基础上,进行功能上的扩展使其同时测量分布式温度/应力和损耗,做到对网络的多方位安全监控。
4)对模型中涉及到的已有的Rayleigh光频域背向散射功率表达公式进行理论研究及完善,并推导出Brillouin光频域背向散射信号功率表达公式,通过接收频域信号得到光纤的冲击响应函数,确定光纤损耗、温度/应力信息。论文最后还通过MATLAB对Rayleigh信道进行建模及仿真,仿真实验数据与理论值一致,表明了该防范措施的有效性。
With the development and maturity of Dense Wavelength Division Multiplexing (DWDM) technology, erbium-doped fiber amplifier (EDFA) technology and OTDR technology, optical fiber communication technology is moving towards super-high-speed and large capacity communication system and gradually to the All -optical Network evolution. The transparency of All-optical Network can improve the performance of the network as well as bring some hidden dangers to network security, with the development of All-optical Network, the research of its security will be a new study.
In this paper, we researched the security and prevention technology of All-optical Network. We carried out the research on network security mainly from both of network physical security and information security. Main results of work are as follows:
1) We studied the network structure, the key optical components and key technologies of All-optical Network.
2) We analyzed the security risks in All-optical Network and researched the security problem in All-optical Network mainly from both of network physical security and information security. The attacks to All-optical Network-layer and its corresponding security measures are analyzed in the physical security. In information security, we studied the digital packet encapsulation technology in All-optical Network and introduced quantum encryption. We described the principle of quantum key and the communication agreement of quantum key.
3) We discussed the application of fiber sensor in All-optical network security and preventive measures, proposed a new fiber sensor model. We researched the principle of OTDR, OFDR and sensor mechanism. It analyzes the excellences and disadvantages of several kinds of existing sensors, as well as their applications in security measure of All-optical Network, put forward our own sensor model. We made expansion in functions at measuring the temperature /stress and loss at the same time based on the Brillouin and Rayleigh scattering distributed fiber sensor model, it monitors multi-positions of the network.
4) The fully distributed optical fiber sensor system is studied by theory and emulational methods: We studied the power expressions of Rayleigh optical frequency backscattering, put forward the power expressions of Brillouin optical frequency backscattering and determine the fiber temperature/stress information through the response function of fiber plus from the frequency signal received. We gave the modeling and simulation of Rayleigh channel with MATLAB, the validity can be obtained by analyzing the comparison of experimental data in simulation with the theoretical value.
引文
[1]顾晼仪,张杰.全光通信网[M].北京,北京邮电大学出版社.1999
[2]陈勇.全光通信网关键技术的研究与实现[D].北京交通大学博士学位论文.2006:9-12
[3]谢小平,张引发,邓大鹏,温钰.全光网络光层安全问题研究[J].光纤与网络.2004.(3):34-36
[4]赵文玉,纪越峰,徐大雄.全光网络的安全管理研究[J].电信科学.2001,(5):12-14
[5]汪超,罗青松.光网络安全及防范技术研究[J].广西通信技术 2004,(1):19-21
[6]陈敦.全光网络的安全分析[J].通信世界网络安全技术.2003,:32
[7]谢艳丁,马明,陈建松.全光网络关键技术及其安全管理[J].空军雷达学院学报.2002,16(3):34-35
[8]吴水清,王国才.基于全光网络的通信安全探讨[J].论文选粹.2007,(6):26-27
[9]Muriel Mlard,Douglas Marquis,Richard A,Barry,Steven G.Finn.Security Issues in All-Optical Networks[J].IEEE Network.1997,:1997,42-48
[10]彭承柱,彭明宇.全光网络的发展历程和发展趋势(二)_光纤通信[J].2007:http://www.sudu.cn/info/html/sitemanage/20071227/46080.html
[11]王阿川,宋辞,曹军.一种更加安全的密码技术[J].中国安全科学学报.2007,17(1):107-110
[12]刘岳启.量子密码学研究的现状及其发展趋势[J].通信技术.2007,(11):324-326
[13]池灏,章献民.量子密码的原理、应用和研究进展[J].光电子,激光.2001,12(1):105-108
[14]陈峰华,孟继轲.光纤传感器及其应用研究[J].太原科技大学学报.2005,26(2):99-100
[15]倪玉婷,吕辰刚,葛春风,武星.基于OTDR的分布式光纤传感器原理与其应用[J].光纤与电缆及其应用技术.2006.(1)
[16]余丽苹,刘永智,代志勇.布里渊散射分布式光纤传感器[J].激光与光电子学进展.2006,43(4):25-26
[17]陶世昆.分布式光纤传感测量系统[D].哈尔滨工程大学硕士学位论文.2005:7-18
[18]T.Horiguchi,Mitsuhiro Tateda.BOTDA-Nondestructive measurement of single-mode optical fiber attenuation charactersfics using Brillouin interaction.IEEE journal of Lightwave Technology[J].1989,17(8):1170-1175
[19]E.Geinitz,S.Jetschke,U.Ropke,S.Schroter,R.Willsch,H.Bartelt.The influence of pulse amplification on distributed fiber-optical Brillouin sensing and a method to compensate for systematic errors[J].1999,10:112-116
[20]王江平,李青.光纤传感器在全光网络攻击测试方法中的应用[J].南京晓庄学院学报.2006,(4):23-25
[21]耿军平.全分布式光纤传感器系统研究[D].西北工业大学工学博士学位论文.2002:80-83,92-94
[22]尹成群,曹冬,何玉钧.分布式光纤布里渊温度传感系统的试验研究[J].传感器与微系统.2006,25(8):15-21
[23]Koichiro Nakamura,Takefumi Hara,Masato Yoshida,Toshiharu Miyahara,and Hiromasa Ito.Optieal frequency domain ranging by a frequency-shifted feedback lasers[J].IEEE Journal of Quantum Electronics.2000,36(3):305-316
[24]万生鹏,何兴道,高益庆.布里渊功率应变系数的理论分析[J].传感技术学报.2006,19(6):2554-2555
[25]余丽萍.布里渊散射分布式光纤传感器的理论分析和相关技术研究[D].电子科技大学硕士学位论文.2006:2-22
[26]刘迪仁.长距离分布式布里渊散射光纤传感技术研究[D].浙江大学博士学位论文.2005:51-23
[27]李卓明.布里渊分布型光纤温度和应变传感技术研究[D].华北电力大学硕士学位论文.2006:2-18,43-45
[28]黄民双,王新强,陈伟民,黄尚廉.Brillouin光纤应变传感中的参数理论计算[J].光通信技术.1996,20(1):39-40
[29]孙光东.基于全分布式光纤传感器测试设备的准分布式光纤传感器的应用研究[J].电子设计.2006,22(6-2):275
[30]宋牟平.微波电光调制的布里渊散射分布式光纤传感技术[J].光学学报.2004,24(8):1112
[2]陈勇.全光通信网关键技术的研究与实现[D].北京交通大学博士学位论文.2006:9-12
[3]谢小平,张引发,邓大鹏,温钰.全光网络光层安全问题研究[J].光纤与网络.2004.(3):34-36
[4]赵文玉,纪越峰,徐大雄.全光网络的安全管理研究[J].电信科学.2001,(5):12-14
[5]汪超,罗青松.光网络安全及防范技术研究[J].广西通信技术 2004,(1):19-21
[6]陈敦.全光网络的安全分析[J].通信世界网络安全技术.2003,:32
[7]谢艳丁,马明,陈建松.全光网络关键技术及其安全管理[J].空军雷达学院学报.2002,16(3):34-35
[8]吴水清,王国才.基于全光网络的通信安全探讨[J].论文选粹.2007,(6):26-27
[9]Muriel Mlard,Douglas Marquis,Richard A,Barry,Steven G.Finn.Security Issues in All-Optical Networks[J].IEEE Network.1997,:1997,42-48
[10]彭承柱,彭明宇.全光网络的发展历程和发展趋势(二)_光纤通信[J].2007:http://www.sudu.cn/info/html/sitemanage/20071227/46080.html
[11]王阿川,宋辞,曹军.一种更加安全的密码技术[J].中国安全科学学报.2007,17(1):107-110
[12]刘岳启.量子密码学研究的现状及其发展趋势[J].通信技术.2007,(11):324-326
[13]池灏,章献民.量子密码的原理、应用和研究进展[J].光电子,激光.2001,12(1):105-108
[14]陈峰华,孟继轲.光纤传感器及其应用研究[J].太原科技大学学报.2005,26(2):99-100
[15]倪玉婷,吕辰刚,葛春风,武星.基于OTDR的分布式光纤传感器原理与其应用[J].光纤与电缆及其应用技术.2006.(1)
[16]余丽苹,刘永智,代志勇.布里渊散射分布式光纤传感器[J].激光与光电子学进展.2006,43(4):25-26
[17]陶世昆.分布式光纤传感测量系统[D].哈尔滨工程大学硕士学位论文.2005:7-18
[18]T.Horiguchi,Mitsuhiro Tateda.BOTDA-Nondestructive measurement of single-mode optical fiber attenuation charactersfics using Brillouin interaction.IEEE journal of Lightwave Technology[J].1989,17(8):1170-1175
[19]E.Geinitz,S.Jetschke,U.Ropke,S.Schroter,R.Willsch,H.Bartelt.The influence of pulse amplification on distributed fiber-optical Brillouin sensing and a method to compensate for systematic errors[J].1999,10:112-116
[20]王江平,李青.光纤传感器在全光网络攻击测试方法中的应用[J].南京晓庄学院学报.2006,(4):23-25
[21]耿军平.全分布式光纤传感器系统研究[D].西北工业大学工学博士学位论文.2002:80-83,92-94
[22]尹成群,曹冬,何玉钧.分布式光纤布里渊温度传感系统的试验研究[J].传感器与微系统.2006,25(8):15-21
[23]Koichiro Nakamura,Takefumi Hara,Masato Yoshida,Toshiharu Miyahara,and Hiromasa Ito.Optieal frequency domain ranging by a frequency-shifted feedback lasers[J].IEEE Journal of Quantum Electronics.2000,36(3):305-316
[24]万生鹏,何兴道,高益庆.布里渊功率应变系数的理论分析[J].传感技术学报.2006,19(6):2554-2555
[25]余丽萍.布里渊散射分布式光纤传感器的理论分析和相关技术研究[D].电子科技大学硕士学位论文.2006:2-22
[26]刘迪仁.长距离分布式布里渊散射光纤传感技术研究[D].浙江大学博士学位论文.2005:51-23
[27]李卓明.布里渊分布型光纤温度和应变传感技术研究[D].华北电力大学硕士学位论文.2006:2-18,43-45
[28]黄民双,王新强,陈伟民,黄尚廉.Brillouin光纤应变传感中的参数理论计算[J].光通信技术.1996,20(1):39-40
[29]孙光东.基于全分布式光纤传感器测试设备的准分布式光纤传感器的应用研究[J].电子设计.2006,22(6-2):275
[30]宋牟平.微波电光调制的布里渊散射分布式光纤传感技术[J].光学学报.2004,24(8):1112